Originally Posted by Gardyloo

I have to think, however, that there should be some sort of fail-safe to prevent an interloper in possession of the password changing everything in the account without some sort of call-back or email notification to an alternate email account, or a text to my cell phone (which AA has on file for flight notifications) when wholesale changes are being made to the account. And maybe some kind of flag that alerts somebody regarding big redemptions being made the same day that so many entries in the account profile have been changed. Remember this is CX we're talking about, so somebody had to speak to an AA rep in the process. Twice.