How American Express helped me when a thief stole 150K Membership Rewards points
This post contains references to products from one or more of our advertisers. We may receive compensation when you click on links to those products. Terms apply to the offers listed on this page. For an explanation of our Advertising Policy, visit this page.
It was 4:52 a.m. on Nov. 4, 2021, when I received two unexpected emails about my Platinum Card® from American Express. Unfortunately, I didn’t see the automated messages until around eight hours later, when I took a lunch break from writing. That’s when I discovered that a thief had cashed in 117,648 of my American Express Membership Rewards points for $1,000 worth of Apple gift cards.
Later, when I called American Express, I learned that around 35,000 more of my points had been stolen as well. Those points had gone toward a Saks Fifth Avenue gift card.
I’m not sure what hurt my feelings more, the theft or the fact that the thief got such a poor redemption value with my hard-earned points. (I joke. The theft was most troubling, of course. But TPG does currently value American Express Membership Rewards points at 2 cents each.)
Why I was concerned
I’m pretty sure that anyone in my position would have been concerned. No one likes to have their card account hacked or find out that their points have been stolen.
But, in my case, there were three specific reasons why I was worried about the 150,000 stolen Membership Rewards points.
First, I didn’t know how easy it would be to recover the stolen Membership Rewards points. As a credit expert, I know that the Fair Credit Billing Act (FCBA) protects me from unauthorized charges on my credit card account. But rewards points don’t necessarily receive the same federal protection when theft is involved.
Second, I’ve been banking points for a big family trip to Hawaii next summer. My goal is to treat my family of five, plus the grandparents, to a memorable vacation. So, when I saw that such a large number of my Membership Rewards points were gone, I had a sinking feeling in my stomach. In this dream trip scenario of mine, every point counts.
Finally, I recognize the value of my rewards points. You should treat the points you earn with your rewards cards with the same consideration as cash. Basically, they’re just another form of currency. I put a lot of effort into earning those rewards and I use them to lower my annual travel budget. This helps me save and invest extra dollars that I would have otherwise spent on travel.
How I recovered my stolen Amex Membership Rewards points
Luckily, I did recover my stolen Membership Rewards points in the end.
In fact, I was able to resolve my problem with a single phone call – and I didn’t even have to wait on hold. The American Express Global Fraud Protection Services team made an unpleasant situation much less stressful.
Here’s the step-by-step process I went through to recover my stolen points and re-secure my account within minutes.
Calling American Express
During the fraud incident, one of the thieves’ steps was to change my online account username and password information. This move locked me out of my account. So, when I tried to log in later, not only was I unable to access my account, I couldn’t reset the password or username without a phone call to American Express.
When I realized I couldn’t log into my account, I took my Amex Platinum Card out of my wallet and called the customer service number on the back. (I make a point never to call phone numbers found in emails, just in case the email is fraudulent.)
Amex apparently already suspected fraud had occurred on my account and my call was instantly routed to the fraud department. If it hadn’t been, I would have requested a transfer.
Username and password update
To reset my information, the Amex representative first verified my identity. I had to answer several questions to confirm that I was the legitimate cardholder, such as providing my card number and four-digit security code.
From there, the representative sent me a one-time password to access my account. When I could log in again, I set up a new, permanent password of my own choosing.
Cancellation of my Platinum Card from American Express
Next, the Amex fraud protection team member canceled my existing card. I hadn’t had any fraudulent charges on my account yet, but the hacker had access to my information. So, the thought was better to be safe than sorry.
With the cancellation, my Platinum Card was also removed from Apple Pay on my iPhone, iPad and Apple Watch. (Yes, I’m clearly an Apple fan.)
On a more convenient note, any service providers who had my card on file for recurring payments would still be able to process charges on the old account number. I was grateful to learn that I wouldn’t have to reset the payment information on several auto drafts, including the Audible membership that I set up as part of my monthly Amex digital entertainment statement credit. (I assume when the expiration date on my original account is up, I’ll need to update my card information for those sites.)
Issuing a new Amex Platinum Card
Due to the cancellation of my original Platinum Card account number, I needed a new card to use for future purchases. Here’s another area where the Amex team’s stellar customer service shined through.
The representative sent me a new Platinum card via overnight express mail. My replacement card showed up on my front porch by lunchtime the next day.
The return of my Membership Rewards points
Finally, it was time to address the issue that I was most worried about with the Amex representative — my missing points. Would he be able to quickly refund the stolen points to my account or was I in for a lengthy recovery process?
It turns out the process wasn’t difficult at all. I was grateful because recovering stolen rewards isn’t always so painless.
After politely confirming that I hadn’t redeemed any Membership Rewards points, the fraud protection representative requested a refund of my stolen points while we were on the phone. While he told me it might take some time to process (up to a few days, if I recall correctly), Amex again exceeded my expectations. The missing points were back in my account in less than an hour.
How I’m protecting myself moving forward
I’m not sure what made my account vulnerable to theft in the first place. There are many ways that criminals can steal your personal information and use it to their benefit.
For example, I’ve received more than one notification in the past informing me that my information had been compromised in a data breach. A recent data breach even compromised the data of frequent flyers with at least 11 different airlines, including United and American Airlines.
What I do know is that it’s important to take steps to avoid this type of fraud whenever possible. Here are a few precautions I took after this experience to make sure my rewards cards and other accounts are as secure as possible.
First, I changed my email password. There’s a chance the thief who hacked my Amex account gained access via my email address. While I’ll never know if that’s what happened, I changed my email address password to be safe. It’s a good idea to change all of your account passwords from time to time anyway in the interest of security.
Second, I checked my three credit reports. When a thief steals your personal information, especially if your Social Security number has been compromised, there’s a chance they can use it to apply for fraudulent accounts in your name. So, I reviewed my credit reports with Equifax, TransUnion and Experian to look for any red flags for identity theft.
Finally, I froze my credit reports. In my case, I verified that my three credit reports were still frozen. I personally opt to freeze my credit reports at all times, only “thawing” them temporarily when I want to apply for a new credit card or another form of financing. By freezing my reports, it takes them out of circulation. With a freeze in place, new creditors cannot check my credit without my knowledge, which keeps anyone from approving fraudulent applications in my name.
It’s impossible to keep your credit card rewards or even your credit cards themselves 100% safe from fraudsters. Still, you can follow some of the good habits above to reduce your exposure to theft.
If you’re unlucky like I was and one day find yourself a victim of fraud, the best thing you can do is react without delay. Reach out to your card issuer right away to let them know there’s a problem. Your notification puts your credit card company in the position to stop additional damage and, hopefully, start working to rectify the situation for you.
Featured photo by Isabelle Raphael/The Points Guy.
Welcome to The Points Guy!
Earn 90,000 bonus miles after you spend $3,000 in purchases on your new Card in your first 3 months. Offer ends 8/3/2022.
With Status Boost™, earn 10,000 Medallion Qualification Miles (MQMs) after you spend $25,000 in purchases on your Card in a calendar year, up to two times per year getting you closer to Medallion Status. Earn 3X Miles on Delta purchases and purchases made directly with hotels, 2X Miles at restaurants and at U.S. supermarkets and earn 1X Mile on all other eligible purchases. Terms Apply.
- Limited Time Offer: Earn 90,000 bonus miles after you spend $3,000 in purchases on your new Card in your first 3 months. Offer ends 8/3/2022.
- Earn up to 20,000 Medallion® Qualification Miles (MQMs) with Status Boost® per year. After you spend $25,000 in purchases on your Card in a calendar year, you can earn 10,000 MQMs up to two times per year, getting you closer to Medallion® Status. MQMs are used to determine Medallion® Status and are different than miles you earn toward flights.
- Earn 3X Miles on Delta purchases and purchases made directly with hotels.
- Earn 2X Miles at restaurants worldwide including takeout and delivery in the U.S., and at U.S. supermarkets.
- Earn 1X Miles on all other eligible purchases.
- Receive a Domestic Main Cabin round-trip companion certificate each year upon renewal of your Card. Payment of the government imposed taxes and fees of no more than $80 for roundtrip domestic flights (for itineraries with up to four flight segments) is required. Baggage charges and other restrictions apply. See terms and conditions for details.
- Enjoy your first checked bag free on Delta flights.
- Fee Credit for Global Entry or TSA PreCheck® after you apply through any Authorized Enrollment Provider. If approved for Global Entry, at no additional charge, you will receive access to TSA PreCheck.
- Enjoy an exclusive rate of $39 per person per visit to enter the Delta Sky Club® for you and up to two guests when traveling on a Delta flight.
- No Foreign Transaction Fees.
- $250 Annual Fee.
- Terms Apply.
- See Rates & Fees