Originally Posted by
mgcsinc
Look, brute force is just not that likely here. Phishing and the like are way more likely to be the way these folks are getting PINs. It's really not a big concern.
In any case, due to concerns like yours, UA has now taken the complete MP number off of boarding passes.
I doubt its phishing either, far too hit and miss. I think it's much more likely that its insiders at the call center, this would be a much more efficient way of targeting high value MP accounts.
Originally Posted by
Pat89339
The 4-digit pin is also the reason I shred all boarding passes and printed itineraries. I don't want my MP number floating around.
I now use the app almost exclusively which removes this issue, but as I said above this is almost certainly not someone picking up discarded boarding passes and brute forcing the PIN.