Fake Travel Loyalty Points Transfer Scam
Fraudsters posing as loyalty scheme support or third-party brokers steal frequent flyer and hotel points by requesting account credentials or directing victims to fake transfer sites.
Last reviewed: 1 June 2026
What this scam is
Fake travel loyalty points transfer scams target holders of airline frequent flyer miles, hotel reward points, and other travel loyalty balances. The scammer contacts the victim claiming to represent the loyalty programme's customer service, a points broker service, or a travel rewards platform, with an offer to transfer, sell, or maximise the value of their points.
In the course of the transaction, the scammer obtains the victim's loyalty account credentials, which they use to drain the points balance — redeeming it for gift cards, flight upgrades, or selling the points in secondary markets. Victims may also be directed to fake loyalty programme portals that harvest credentials.
Some victims have accumulated significant balances over years and lose thousands of dollars worth of redeemable value.
How it works
The scammer contacts the victim by email, phone, or social media, presenting an offer to help transfer, consolidate, or cash out loyalty points. They may claim the points are about to expire — creating urgency — or offer an above-market rate to purchase the victim's points balance.
To process the transfer or purchase, the scammer requests the victim's account number, password, or PIN. Alternatively, they direct the victim to a fake loyalty programme site that replicates the genuine login page to capture credentials.
Once credentials are obtained, the attacker logs into the genuine loyalty account and transfers the points to their own account, redeems them immediately for gift cards, or sells them through secondary points market platforms.
Why this scam works
Loyalty points feel like abstract currency rather than real money, which can reduce the vigilance people apply to protecting them. Expiry warnings are a real and routine feature of loyalty programmes, making fake expiry alerts believable. Many people have large, dormant balances they do not actively monitor — which means unusual activity is noticed late.
Common red flags
- Unsolicited contact about your loyalty balance you did not initiate
- Request for account password or full account credentials over the phone or email
- Offer to buy your points at a rate higher than official transfer partnerships
- Points expiry warning that does not match your known balance status
- Email domain is not the official loyalty programme domain
- Loyalty portal URL differs from the programme's official website
- Request to complete a 'verification' step that involves entering your password
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Your [airline] miles are due to expire in 7 days. Log in to prevent loss: [fake link]
We would like to purchase your [amount] miles for [cash offer]. Send your account details to complete the transaction.
[Loyalty programme] security alert: your account has been flagged. Verify your identity by confirming your password with our team: [fake site]
Transfer your points to our partner portal for [higher value] equivalent. Enter your loyalty login at [fake URL] to begin.
Common variations
- Points pooling scam — offers to combine multiple family members' balances and steals all of them
- Upgrade auction scam — fake bidding platform for seat upgrades using loyalty points
- Hotel points cash-out scam targeting inactive or near-expiry balances
How to verify before you act
Loyalty programmes do not ask for your password via email, phone, or chat. All account management should be done by navigating directly to the official programme website using a URL you type or a bookmark — not a link in an email. If you receive a points expiry warning, log in directly to verify rather than following any link. Genuine points brokers and transfer partnerships are listed on the official programme website.
Payment methods used
- Gift cards (redeemed from stolen points)
- No direct payment — credential theft and points redemption
Who is usually targeted
- Frequent flyers with large accumulated miles balances
- Hotel loyalty programme members
- Travellers who have not redeemed points recently
- People approaching an apparent expiry date for their balance
What to do immediately
- Change your loyalty account password immediately if you believe credentials were compromised
- Enable two-factor authentication on your loyalty account
- Contact the loyalty programme's official support to flag the compromise and review recent redemptions
- If points were drained, request a fraud investigation — some programmes can recover fraudulently redeemed points
- Report to your national fraud service
How to prevent it
- Enable two-factor authentication on all loyalty programme accounts
- Manage your loyalty account only through bookmarked official sites — never through email links
- Know your actual points balance and expiry dates so you can identify false expiry warnings
- Never share your loyalty account password with any third party
Evidence to preserve
- The original email or message received
- Any URLs visited
- Screenshots of account activity showing unauthorised redemptions
- Reference numbers from the loyalty programme's fraud team
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
Can stolen loyalty points be recovered?
Some loyalty programmes have fraud recovery processes that can reinstate points in confirmed fraud cases. Contact the programme's official fraud or security team immediately. Act quickly — the sooner you report, the more likely a recovery may be possible before points are fully redeemed.
Is it legal to sell frequent flyer miles?
Most loyalty programme terms and conditions prohibit the sale or transfer of points to non-approved partners. Third-party points brokers operate in a legal grey area and are not endorsed by the programmes. Using them also creates security risks as they require account access. Refer to your programme's official terms.