I've been trying to help my wife book a reward trip, and the person on the phone asked her for a password or pin which she never created. When I insisted we speak to a supervisor, she finally agreed to send a link to the email for the account to reset the pin. The link she sent would not open at all in Chrome, and in Firefox it lead to the attached webpage which seems like a total scam site! I'm mystified...