An Iranian student in South Florida named Milad Avazdavani has been charged for “hacking into the AAdvantage accounts of high-mileage customers and siphoning off enough points to charge trips and cars worth more than $260,000.”
In each case the AAdvantage accountholder’s email address was changed and transactions were made from a computer at the same IP address. Changing email address is a flag for potential fraudulent activity made soon thereafter when redemptions are being made in the name of someone other than the accountholder. When a single IP address is linked to name changes and third party redemptions across a number of accounts that’s a pretty good giveaway.