Originally Posted by
gregleck
Those miles are gone. They are not reinstated into the account unless the fraudster also changed my email address. Which they did not, because it is still operable to me using the old password. Which was the first thing I changed.
Originally Posted by
guv1976
From the FAQ page for AAdvantage gift cards:
"Can I use AAdvantageŽ miles but send a gift card to someone else?
"No, the gift cards will be sent to the email address listed in your AAdvantageŽ account. If you choose to gift it to someone else, you will have to forward them the gift card details."
Now it makes sense why AA told OP they would only restore his miles if the e-mail address was changed. If the gift cards can only be sent to the e-mail address on record and assuming OP is telling the truth that he's the victim of this scam, that would seem to imply that the scammers have or had access to his e-mail account, which is not AA's fault.