Originally Posted by Djlawman

Glad it has not happened to me, but here is what I suspect is going on.

Thief decides to steal your SPG points. Sets up an Air Canada account with YOUR name, and phony address.

Hacks your account, changes email address, password to prevent you from getting into account, transfers the points to miles in the phony AC account.

Once in the account, the miles are used for a ticket for a "friend" -- the real identity of the thief (or his friends or relatives, or people he is selling the tickets to).

As far as I know, none of the airlines even require that the CC used to pay for the taxes, fees, etc. on a FF ticket even be in the name of the person who holds the account. (Witness all the postings regarding using a dead relative's account.)