With the recent 12,000 Miles bonus promotion and concerns around its validity, I was wondering whether the level of security for BAEC accounts was sufficient?

Many of us have six figure - and more - mileage balances. I personally would value these at several thousand pounds, and therefore to be guarded well.

However, many of us merrily tripped off to input acount details and PINs to a ba weblink which did prove to be pukka, but could have easily been fraudulent.

What policy does British Airways have in place in the event miles are fraudulently used? Are they re-imbursed?

Perhaps we should have to input a third level of security, such as date of birth or random digits from a preassigned additional PIN number, as is the case with online banking?

I suppose the transferability of BA Miles is somewhat limited by the requirement to send the details to the address of the BAEC member, the minimum advance purchase restrictions and the need to identify the beneficiary of the BA Miles for ticketing and ID purposes.

However, should we be looking out for scams, have any been reported in the past and what happens if BA Miles are fraudulently removed from our accounts?