Originally Posted by
Some person
Let's say that FFlash posts a message to Facebook: "My flight to Lisbon was several hours late, here's a pic of my boarding pass." I see the message and immediately create an e-mail address:
[email protected]. From that address, I request compensation and money is then sent to my bank account. Later on, the real FFlash demands compensation. TP has to pay out compensation a second time, and unless they can somehow identify and sue me, they can't claim back the money that was incorrectly paid to me. They might be requesting that document from FFlash to avoid this kind of situation.
On those facts, the passenger has intentionally compromised account security and it would be for the passenger to recover from the individual he was foolish enough to disclose to.
To continue your hypothetical, the fool could also post a copy of his bank details and any half-way smart person could change those to his own.