Your Points Are Worth Money — and Scammers Know It

Chances are you’ve signed up for a rewards or loyalty program at some point — even if you rarely check your account. Nearly half of these accounts go unmonitored or are used infrequently, allowing suspicious activity to slip by unnoticed.
Industry experts estimate that criminals steal more than $1 billion in rewards points each year. Here’s how these scams work and how to help protect your points.
How It Works•You receive a text or email that appears to come from an airline, hotel, credit card, or other rewards program.•The message warns that your points are about to expire.•The message urges you to click a link to log in to your account and “save” your points.
What You Should Know•Criminals hack into loyalty and rewards accounts in several ways – from phishing email and text messages, malware-infected sites that collect your data, to using stolen username‑password combinations.•Once inside, scammers transfer or redeem points for gift cards, merchandise, or travel.•Rewards accounts are popular targets because they often lack the same security protections as bank or credit card accounts and users often overlook them.
What You Should Do•Use strong, unique passwords for each account so if someone compromises one account, others aren’t at risk.•Turn on multi‑factor authentication whenever possible to add an added layer of protection.•Sign up for alerts on your rewards accounts so you will see balance changes or if your email or password changes.•If you spot suspicious activity, contact the loyalty program by logging into your online or app-based account or by calling a phone number you know to be legitimate.
 reprinted from AARP Fraud Prevention Network