Originally Posted by
cbagent
When an e ticket is generated by ba the e mail will point out that the booking reference will allow access to the reservation..it is therefore the responsibility of the person receiving the e ticket to ensure that they disclose this only to people they are happy to access the booking.
I wonder what identity verification process you might suggest if a caller states their name and booking reference .
The only simple option I can think of (bar the questioning of various known FFP info) is that the user is asked to enter a password when making the booking. This is the standard practise with many companies over the phone and interestingly on adding 3rd party advocates on my BAEC profile just know, I was asked to provide a password, for that user