Originally Posted by
notquiteaff
The confirmation email accomplishes basically the same as the notification, no? Unless you don’t read your email on a regular basis, of course, or the fraudulent reservation is for more or less immediate travel.
Unfortunately it is trivial to change the trip confirmation email address into literally anything (even without changing the account's email settings). Just did that (for a booking for me from my wife's account) and the account owner receives no email notification at all.