My Alaska account got hacked last night and someone booked two flights using 400k miles.
What caught me off guard was how they tried to hide it. I suddenly got flooded with hundreds of random “welcome” and verification emails. Buried in all that was the actual alert from Alaska saying my account email had been changed.
Luckily I spotted it in time, logged in before they changed the password, cancelled the flights, and got my miles back.
Changed everything after that, but honestly didn’t know this “email bomb” tactic was a thing.
Worth double checking if you ever get a sudden flood of emails like that.
0