It was a former employee (FE) who had access to everyone's info, a person in a trusted position. I would like to think this is a mistake and I hope that it is.

They don't cross-check numbers at least on the major travel site I spoke to. You enter the number in when you get the ticket and they pass this along to the airline presumably in your PNR. The airline does not validate it either.

I think at the gate the FE would have a problem because the FF number does not match her name, but I don't know what the gate agent or ticket agent sees at the airport so I'm not sure of this. Anyone know?