TL;DR
My question was, first of all is that a 'REAL' ticket she use to get her boarding pass in the past. What I mean 'REAL' include employee ticket, reward ticket etc... Otherwise, AC may have a serious trouble in IT department (joke?) if someone can fake a plane ticket (with PNR and e-Ticket #), able to gone past the check-in process and get a BP and not been detected in real time. That's sounds like a serious [security] issue. Or is it possible for an insider like 'Captain Cooll' have access to internal AC system to create a ticket, but somehow pocket the money (sounds rather risky).
And of course, we don't know the timing from when the ticket was purchased and the flight taken place. If it is rather short period, the actual credit card victim may not notice the charges until next billing cycle to call in.
IMHO, the story still didn't really line up.
I wonder if she collect aeroplan as well... what happen to her miles
