OP, CX starting locking FFP change in the beginning of August Changing FFP# [2025] - it now has to be called in. I suspected back then there was at least one FFP that wasn't carrying out passenger name to FFP name checks properly, and fraudsters somewhere were changing FFPs with PNR/name on CX's website to those programs. We can now assume one of them is Qantas Frequent Flyer.

With the stolen miles (points), the fraudsters can then cash out for iPads or supermarket gift cads or something.

CX's step stops the scam going forward. Of course, it's little relief to you.

Pursuing/suing the airlines involved is hard - I don't see how you can pursue CX (much as I like to see CX pursued) because the loophole the fraudsters exploited is with QF Frequent Flyer; however I imagine you're not Australian and don't have the resources to pursue them for their negligence in Australian district court. Unfortunately with the cross-border nature of FFPs, it is hard to pursue fraudsters.

The only steps I can recommend are:
1. Notify QF directly, through https://www.qantas.com/au/en/support...back-form.html and email frequent_flyer at qantas.com.au .They need to tighten up their procedure. Also, see if they can reverse the credit and let you credit back to Asia Miles (not likely given what I know about QF Frequent Flyer...)
2. Copy to Travellers Letters at Sydney Morning Herald if they don't action on name matching https://www.smh.com.au/traveller/tra...23-h1vdph.html