Medium riskEmail Scams

Airline Miles Expiry Email Scam

This scam emails that your airline miles, hotel points, or loyalty rewards are about to expire unless you log in to claim or redeem them, leading to a fake page that captures your account and card details.

Quick verdict

Risk level
Medium risk
Scam type
Loyalty impersonation phishing
Main red flag
An email says your miles or points expire soon and links you to log in to claim them.
What to do first
Do not use the link. Check points in your loyalty account's official app or site.

What this scam usually looks like

This scam emails that your airline miles, hotel points, or loyalty rewards are about to expire unless you log in to claim or redeem them, leading to a fake page that captures your account and card details.

Example message pattern

Example pattern — not a real report
Example pattern: 'Your 25,000 miles expire in 48 hours. Log in now to keep them active: [suspicious link]'

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

Red flags to watch for

  • An expiry warning urging you to log in via a link
  • A login page that is not the official programme
  • Pressure that points expire imminently
  • A request for account or card details
  • A generic greeting with no membership number

What to do

  • Check your points in the loyalty programme's official app or site
  • Log in by typing the address yourself
  • Report the email as phishing and delete it
  • Enable two-factor authentication where available

If you already clicked or replied

  • If you entered your login, change it immediately from a trusted device
  • Watch for unauthorised redemptions of your points
  • If you entered card details, contact your bank
  • Update the password anywhere you reused it

What not to do

  • Do not log in through expiry-warning links
  • Do not share account or card details via the link
  • Do not let expiry pressure rush you

Similar scams

Frequently asked questions

Do loyalty programmes email login links about expiry?
You should check and redeem points by logging in to the official app or site directly, not via an email link. Treat such links as phishing.
My points really might expire. What do I do?
Log in to your official account to check the genuine expiry and redeem there, rather than acting on the email link.
I logged in through the link. What now?
Change your password from a trusted device, watch for unauthorised redemptions, and contact your bank if you entered card details.
Why target loyalty accounts?
Points have real value and can be redeemed or transferred, and the accounts often hold personal and card details scammers want.

Last reviewed: June 2026

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.