Go Back  FlyerTalk Forums > Miles&Points > Airlines and Mileage Programs > United Airlines | MileagePlus
Reload this Page >

UA Account Hacked / Reports of Fraudulent Award Travel Redemption

Community
Wiki Posts
Search
Old Dec 29, 2014, 12:05 am
FlyerTalk Forums Expert How-Tos and Guides
Last edit by: WineCountryUA
This thread to follow reports of MP accounts that actually have been hacked / improperly accessed. If you have missing miles and beleive you have been hacked, contact [email protected]

In Suspended MP Accounts / Third Party Vendor "Security Breach?" - Dec 2014 there is discussion of a security breach of a 3rd party that UA seems to believe may lead to inappropriate access to UA accounts via the username method of logging into united.com. Let's follow the breach and log-in changes in the above thread.

A separate(?) "access denied" issue is covered in Consolidated " Is united.com or parts of it Down?" thread
Print Wikipost

UA Account Hacked / Reports of Fraudulent Award Travel Redemption

Thread Tools
 
Search this Thread
 
Old May 27, 2014, 12:48 pm
  #106  
FlyerTalk Evangelist
 
Join Date: Sep 2008
Location: Jersey Shore/YYZ
Programs: UA 1K, Marriott Plat, Hilton Diamond, Hertz PC
Posts: 12,521
Originally Posted by shengwan
I suppose UA must have this persons ID when checking in? This is on UA metal btw.
Do you think UA keeps a copy of the ID when someone is checking in? Have you seen that happen? They glance to confirm identity matches bags, and that's it. If the person isn't checking bags (and not traveling internationally) they don't ever see the ID.

If you mean UA's scan of the passport - if you think UA is going to hand that over to you, or can even access that without a court order...well....reread the advice I gave you up front.
aacharya is offline  
Old May 27, 2014, 12:48 pm
  #107  
A FlyerTalk Posting Legend
 
Join Date: Apr 2013
Location: PHX
Programs: AS 75K; UA 1MM; Hyatt Globalist; Marriott LTP; Hilton Diamond (Aspire)
Posts: 56,470
Was your contact e-mail changed in your account? If so, it seems to me that would be evidence you could show UA to support claim your account was hacked. If your contact e-mail was not changed, then you would have received a confirm and ticketing receipt when the ticket was booked.
Kacee is online now  
Old May 27, 2014, 12:48 pm
  #108  
 
Join Date: Mar 2013
Location: USA
Programs: AA, Hyatt, Marriott
Posts: 59
I have heard about these frauds on Air China, but this person who redeemed award ticket on my account is definitely not Chinese by name. I suppose there are some loopholes in UA system given the recent CA award fraud issues.

Originally Posted by dieuwer2
I asked because there is an entire thread of award flight fraud most likely originating from China.
I thought about that too, someone on internet posted thief would change email address before booking and change it back. I don't know what dept within UA should they carry out and investigation. I was told to fill out an report at united.com/feedback. I am hoping someone here with similar knowledge would provide a phone number.

http://first2board.com/willrunformil...t-compromised/

Originally Posted by Kacee
Was your contact e-mail changed in your account? If so, it seems to me that would be evidence you could show UA to support claim your account was hacked. If your contact e-mail was not changed, then you would have received a confirm and ticketing receipt when the ticket was booked.
No, I was hoping to get suggestions or at least a phone number from UA fraud department. I was wondering if a police report would help my case anyway (in UA's view).

Originally Posted by aacharya
Do you think UA keeps a copy of the ID when someone is checking in? Have you seen that happen? They glance to confirm identity matches bags, and that's it. If the person isn't checking bags (and not traveling internationally) they don't ever see the ID.

If you mean UA's scan of the passport - if you think UA is going to hand that over to you, or can even access that without a court order...well....reread the advice I gave you up front.

Last edited by FlyinHawaiian; May 27, 2014 at 6:52 pm Reason: multi-quote
shengwan is offline  
Old May 27, 2014, 12:58 pm
  #109  
 
Join Date: Mar 2005
Location: Austin, TX
Programs: CoUniHound 1K 1MM, AA EXP 2MM, DL Plat, Marriott Lifetime Titanium
Posts: 1,625
Originally Posted by shengwan
UA agent claim it was my fault to gave away my login and password
Gotta love this one. I can't count the number of times MP support (and before that OnePass support) has asked me to give them my # and PIN. Over the phone. While I'm in a public place, like an airport...
Catbert10 is offline  
Old May 27, 2014, 1:07 pm
  #110  
FlyerTalk Evangelist
 
Join Date: Sep 2008
Location: Jersey Shore/YYZ
Programs: UA 1K, Marriott Plat, Hilton Diamond, Hertz PC
Posts: 12,521
Originally Posted by shengwan
aacharya, Does UA 155 from Federated States of Micronesia (KSA) to HNL considered Intentional flight? Do you have this knowledge?
The FSM are an independent sovereign nation that is not considered part of the United States. Whether they are considered international depends on your meaning of the term. Loosely, it is international. But so is DUB-EWR, though you pre-clear customs.
aacharya is offline  
Old May 27, 2014, 1:10 pm
  #111  
 
Join Date: Aug 2006
Location: Minneapolis, MN (MSP)
Programs: DL DM, UA 1K MM, Subway Club Member
Posts: 1,988
Originally Posted by shengwan
aacharya, Does UA 155 from Federated States of Micronesia (KSA) to HNL considered Intentional flight? Do you have this knowledge?
It depends on for what purpose. For immigration/customs the FSM is a sovereign nation, so yes its an international flight.

From United's perspective, its somewhat of a hybrid (but more domestic than not). The 737 used on the route is a typical domestic first class configuration and the meal service is closer to domestic than international. You can, however, use the lounge in Hawaii and GUM. Do a search for Island Hopper for more info.
kenn0223 is offline  
Old May 27, 2014, 1:13 pm
  #112  
A FlyerTalk Posting Legend
 
Join Date: Apr 2001
Location: PSM
Posts: 69,232
Originally Posted by kenn0223
It depends on for what purpose. For immigration/customs the FSM is a sovereign nation, so yes its an international flight.
Correct. And UA would have collected and transmitted APIS data for the passenger. They have the passport details used.

What they're willing to do with them is a different discussion completely, but they have that data in their systems.
sbm12 is offline  
Old May 27, 2014, 1:14 pm
  #113  
 
Join Date: Mar 2013
Location: USA
Programs: AA, Hyatt, Marriott
Posts: 59
aacharya, Does UA 155 from Federated States of Micronesia (KSA) to HNL considered Intentional flight? Do you have this knowledge?

Originally Posted by aacharya
All UA would have is a name, e-mail address and passport (maybe).

No full physical or mailing address is needed for award redemption. Even if they did somehow have it, they're not giving it to you.

I am not defending UA at all, but you need to know what UA has/doesn't have and not make assumptions.

If you're done with contacting MPSC, call the police. (Personally, I'd call UA back, start with fraud, and force them to do something - many ways of making agents do more).
AA doesn't have for anything for award redemption (which is more scary), but EXP desk is far superior to 1k desk imo.

Originally Posted by Catbert10
Gotta love this one. I can't count the number of times MP support (and before that OnePass support) has asked me to give them my # and PIN. Over the phone. While I'm in a public place, like an airport...
Thanks, I guess local police report probably won't do me any good.

Originally Posted by aacharya
The FSM are an independent sovereign nation that is not considered part of the United States. Whether they are considered international depends on your meaning of the term. Loosely, it is international. But so is DUB-EWR, though you pre-clear customs.
Thanks

Originally Posted by kenn0223
It depends on for what purpose. For immigration/customs the FSM is a sovereign nation, so yes its an international flight.

From United's perspective, its somewhat of a hybrid (but more domestic than not). The 737 used on the route is a typical domestic first class configuration and the meal service is closer to domestic than international. You can, however, use the lounge in Hawaii and GUM. Do a search for Island Hopper for more info.

Last edited by FlyinHawaiian; May 27, 2014 at 6:51 pm Reason: multi-quote
shengwan is offline  
Old May 27, 2014, 1:15 pm
  #114  
 
Join Date: May 2009
Location: Washington, DC
Programs: UA 1K 1MM, AA, DL
Posts: 7,418
Originally Posted by kenn0223
It depends on for what purpose. For immigration/customs the FSM is a sovereign nation, so yes its an international flight.
So they should have passport info retained . . .
drewguy is offline  
Old May 27, 2014, 1:16 pm
  #115  
 
Join Date: Apr 2013
Location: NYC/WAS
Programs: UA GS, AA EXP, DL '90s PM, now FK (Flying Kettle)
Posts: 541
I would think the Visa card used to pay the taxes would provide a path to the perpetrator, and UA clearly has that, even if the res agent can't see the whole thing. For example, they can do an add/collect from the same card when there is a fare change without asking for the number again.

I would also hope that a history of your online account would show two email address changes. If it doesn't, why didn't you get a confirmation email?
AlreadyThere is offline  
Old May 27, 2014, 1:16 pm
  #116  
 
Join Date: Jun 2011
Location: Colorado
Programs: United MM (formerly 1K), Marriott Lifetime Gold
Posts: 551
Originally Posted by shengwan
No, I was hoping to get suggestions or at least a phone number from UA fraud department. I was wondering if a police report would help my case anyway (in UA's view).
Yes contact you police department and file a report. They then should be able to get the information from UA as to who actually booked the ticket. Submit the police report to UA in an effort to get your miles back.

Note sure if a a DOT complaint would work. The 4 digit PIN Protection on the UA Website is outrageous, and needs to be turned off.

Originally Posted by AlreadyThere
I would think the Visa card used to pay the taxes would provide a path to the perpetrator, and UA clearly has that, even if the res agent can't see the whole thing. For example, they can do an add/collect from the same card when there is a fare change without asking for the number again.
That could have been stolen as well. At some point, this turns into a flying public security issue....

Last edited by FlyinHawaiian; May 27, 2014 at 6:51 pm Reason: multi-quote should be used
FlyingNut724 is offline  
Old May 27, 2014, 1:27 pm
  #117  
FlyerTalk Evangelist
 
Join Date: Jan 2012
Location: Northern Calif./Eastern Ida.
Programs: Amethyst Premier Plutonium Medallion
Posts: 20,646
UA should have a fraud department that would be willing to look into this. The challenge will be finding someone who knows how (and is willing) to connect you to them. I would start with an MPSC supervisor, personally. I have great doubts that a police report is going to have any success.
PV_Premier is offline  
Old May 27, 2014, 1:37 pm
  #118  
 
Join Date: Mar 2001
Location: IAH
Programs: UA 1K/*G
Posts: 2,397
Although everyone is assuming the opposite, I'm going to go ahead and bet that the person flying was not the one who booked the ticket and the traveler has no idea about the alleged fraud.
dbaker is offline  
Old May 27, 2014, 1:41 pm
  #119  
 
Join Date: Mar 2013
Location: USA
Programs: AA, Hyatt, Marriott
Posts: 59
Possibly.

Originally Posted by dbaker
Although everyone is assuming the opposite, I'm going to go ahead and bet that the person flying was not the one who booked the ticket and the traveler has no idea about the alleged fraud.
shengwan is offline  
Old May 27, 2014, 2:02 pm
  #120  
 
Join Date: Apr 2013
Location: NYC/WAS
Programs: UA GS, AA EXP, DL '90s PM, now FK (Flying Kettle)
Posts: 541
Originally Posted by dbaker
Although everyone is assuming the opposite, I'm going to go ahead and bet that the person flying was not the one who booked the ticket and the traveler has no idea about the alleged fraud.
Doesn't really matter, he or she will know very well from whom s/he got the ticket. His or her credit card is "on the line", and since the trip was international, there can't be an identity fraud issue. Could UA allege fraud and charge the full fare to that card?
AlreadyThere is offline  


Contact Us - Manage Preferences - Archive - Advertising - Cookie Policy - Privacy Statement - Terms of Service -

This site is owned, operated, and maintained by MH Sub I, LLC dba Internet Brands. Copyright © 2024 MH Sub I, LLC dba Internet Brands. All rights reserved. Designated trademarks are the property of their respective owners.