Originally Posted by
johnathomese16
Hi, just a warning that my account had all of the Avios cleared out of it by a hacker. Although, I have two factor authentication on my account and was receiving text after text with expiring verification codes, BA don’t put a hold on the account to protect it or have a readily accessible method of saying this is fraudulent activity.
I know BA’s IT has a bad rep, but allowing multiple 2FA attempts and an e-mail address change followed by immediate withdrawal of almost 400k Avios, really does show that it isn’t even up to the most basic level of account protection!
Beware and don’t think two factor authentication will protect your account!
I had the same thing back in June 24. I got texts over night for 2FA and thought someone might have attempted access but just shrugged it off that nothing could have happened. A few days later I see I’ve been cleaned out. BA did fix the problem within less than a week but my repeated asking how it was possible even with 2FA went on deaf ears. No answer so I just moved on. Situation prompted me to get a proper password manager app though