I heard when you sell miles to a mileage broker, they sometimes pay you in advance. They ask for user ID, password, Pin (if applicable), email, phone number, address etc.

My question is, after getting paid, what if you change your Pin and password? Is there anything they can do? Is there any catch here?

Asking for a friend.