I'm actually surprised ticketed names and such were provided to the card holder. I wonder if some odd privacy issues could come up.

Glad United protected themselves from what would have been a non-rev flight in the end.