With regard to the credit card piece of this, I'm not surprised. It's not at all unusual in SEAsia to be required to show the physical credit card at airport checkin. UL does this 100% of the time ex-BKK, for example. If they see a ticket charged to a credit card not yours, they may view this as helping you out. The "thief" who breached your account and used your miles could also have done the same with a credit card. Can't speak to the other stuff....