Air Miles alerts members someone is stealing cash miles
Air Miles says it shut down in-store miles redemption option to protect members
Air Miles is warning members that thieves have managed to steal cash miles from some collectors. The theft happened in a "small number" of cases when points were used to buy products in stores, says the rewards program.
Air Miles reports that it's now in the early stages of investigating the theft. "We are working diligently to resolve the situation and have already contacted our retail partners, the police and the Canadian Anti-Fraud Centre," it said in a statement to members.
To protect collectors, Air Miles has temporarily halted the option that allowed members to use their cash miles to buy products at participating retailers, such as gas at Shell, groceries at Sobeys or drug store items at Rexall. Collectors can still use their cash miles to buy gift cards online for participating stores.
Air Miles is also advising members to protect themselves by keeping private both their collector and PIN numbers for their account.
The program says members' personal information remains protected and has not been compromised as part of the theft.
Rewards expert Patrick Sojka believes the breach was waiting to happen to Air Miles. He says shoppers aren't required to enter a password or PIN number when using their miles towards store purchases. Instead, he says they can opt for automatic check-out, input someone else's account number and buy products.
"I'm surprised this hasn't come about sooner that people have started using peoples' Air Miles numbers to redeem cash rewards," says Sojka, of Calgary-based resource site Rewards Canada.
"There's no true way to kind of prove that you're actually the person who's holding that Air Miles account."
Air Miles says it has protections in place to help customers using cash miles. They include putting a daily cap the amount of instant cash redemptions, alerting members by email when a transaction has been made, and requiring members to use a PIN number when setting up a cash miles account.
When members collect miles, they can designate them as either dream or cash miles. Dream miles can be used to get rewards like vacations and merchandise. Cash miles are used solely to get products from participating retailers. Typically, 95 reward miles equals $10 off a purchase.
Air Miles says that the rewards program has more than 11 million active collector accounts.
In February, Loblaw experienced a similar problem with points theft.
The grocery store giant warned PC Plus rewards collectors to beef up their passwords after points were stolen from some members' accounts.
Loblaw said the breach stemmed from people using weak username and password combinations.
ABOUT THE AUTHOR
With files from Meegan Reed