When I read the OP story, I didn't think of a scheming divorcee, but rather as a secretary/boss relationship. Most people who delegate booking of their plane tickets will generally know nothing about miles, give their card number to the person booking and possibly the web access code was chosen by the secretary too...