Originally Posted by
1worldFlyer
Now it makes sense why AA told OP they would only restore his miles if the e-mail address was changed. If the gift cards can only be sent to the e-mail address on record and assuming OP is telling the truth that he's the victim of this scam, that would seem to imply that the scammers have or had access to his e-mail account, which is not AA's fault.
Yup, op should check their email account, recover deleted items, look for someone having added a rule to auto forward emails, check login history, but an email breech is highly likely here and should if nothing also be checked into