Originally Posted by colpuck

so my parents are infrequent travelers but they have a onepass account. Due to having the debit card they have collected around 75k in miles. Due to co.com online security being what it is, some one hacked into my father's account.

Now parents may not travel, but they do monitor the accounts regularly. However, the hacker seeing no reward travel for sometime decided it would be a good time to book himself a standard award to Paris, using my father's miles.

Now as a good FTer my first question was how did the hacker get a standard award to paris during the summer and my second was what happened next. Well the OPSC redeposited the miles to my father's account but not the fees.

Why not the fees, well because the hacker used his own credit card, matching the name on the ticket.

Bonehead.