Fake United Airlines MileagePlus Transfer Scam
Fraudsters impersonate United Airlines MileagePlus to send fake mile-expiry warnings or partner-transfer offers, stealing login credentials and draining accumulated miles balances.
Part of: Fake Travel Loyalty Points Transfer Scam
Last reviewed: 8 June 2026
United Airlines MileagePlus miles do expire after 18 months of account inactivity — a genuine policy that scammers weaponise in phishing campaigns. By referencing this real rule, the fraudulent urgency warnings feel credible to members who are aware that their balance could genuinely lapse.
The phishing messages combine precise knowledge of MileagePlus branding with manipulative time pressure. Victims who click are led to a lookalike United login page, and their captured credentials are used within minutes to redeem miles for merchandise or travel vouchers that are shipped or transferred to the scammer.
United's real MileagePlus activity is managed entirely through the app and united.com. The airline does send genuine activity-reminder emails, but these direct you to sign in at united.com normally — they do not require you to perform a transfer or pay a fee through a link to prevent expiry.
How this scam works on the United Airlines brand
Emails arrive with United's globe logo and blue-and-white styling, from domains like 'mileageplus-notice.com'. The subject line might read: 'Your 72,000 MileagePlus miles expire in 48 hours — transfer now.' A prominent button reads 'Save My Miles'.
On the fake login page, after credentials are captured, the victim is shown a realistic-looking 'Confirm Transfer' screen with partner airline logos, reinforcing the illusion. In the background, the attacker has already logged in to the real MileagePlus account and is converting miles to gift cards or travel merchandise as fast as the site allows.
Some campaigns add a phone number and a 'representative' who will help with the transfer — a social engineering layer that prevents the victim from independently verifying the message while they are on the call.
Common red flags
- Email arrives from any domain other than '@united.com' or '@mileageplus.com'
- Mile-expiry warning referencing a specific balance that does not match your real account
- A 'transfer fee' charged to save your miles from expiry — MileagePlus does not charge members a fee to prevent inactivity expiry
- The 'partner transfer' destination is an airline you have never heard of or one whose name is misspelled
- Checking united.com directly shows no matching expiry warning in your account notifications
- The page asks you to confirm your MileagePlus number and PIN together in the same form
How to protect yourself
- Log in directly at united.com or via the United app to check your real mile balance and the date your miles would expire due to inactivity
- You can prevent MileagePlus mile expiry simply by earning or using miles — even a small purchase through a shopping portal resets the clock
- Enable two-step verification on your MileagePlus account in profile settings
- If you entered credentials through a suspicious page, change your MileagePlus password immediately and review recent redemptions
- Contact MileagePlus customer service at 1-800-421-4655 to flag suspected fraudulent activity on your account
- Alert your linked credit card issuer if you provided card details
How to report it
- Report the phishing email by forwarding it to [email protected]
- File a complaint with the FTC at reportfraud.ftc.gov
- Contact MileagePlus at 1-800-421-4655 to request a fraud hold on pending redemptions
- File with the IC3 at ic3.gov if you suffered financial loss
Frequently asked questions
Do United MileagePlus miles expire?
Yes — MileagePlus miles expire after 18 months of account inactivity. However, any qualifying earning or redemption activity resets the clock, and United will email you genuine warnings from '@united.com' before expiry.
Can United recover stolen miles?
United has a fraud team that investigates unauthorised redemptions. Contact MileagePlus at 1-800-421-4655 as soon as possible — prompt action improves recovery chances.
What counts as account activity to prevent expiry?
Earning miles through flights, shopping portals, dining, or hotel stays, as well as redeeming miles, all count. You can also purchase a small number of miles to reset the expiry clock.