Websites that appear identical to the one used for the Aeroplan rewards program are swindling some Canadians out of their hard-earned points, experts say.
The scam is not a new one, but it has resurfaced recently with multiple reports of victims in Atlantic Canada.
By spoofing the actual Aeroplan site, the scammers are able to get their victims to unknowingly turn over their account information. That information can then be used to make purchases on the victims鈥 accounts, and the purchased items can be resold elsewhere.
鈥淎ll you have to do is click a button and then it takes you to a website that also looks very much like Aeroplan,鈥 says Ross Simmonds, a Halifax-based social media expert. 鈥淥nce you log in, that information goes into a spreadsheet. Once they have that information, it鈥檚 pretty much checkmate from there.鈥
Aeroplan customers recently received an email from the company alerting them to the danger and warning them to delete any unsolicited emails seeming to come from Aeroplan or Air Canada with the subject line 鈥淎eroplan Reward 鈥 Electronic Ticket Itinerary/Receipt,鈥 鈥淵our order # approved鈥 or 鈥淵our order # processed.鈥
鈥淒o not respond and do not click on any links or open attachments contained within the email,鈥 the warning reads.
Simmonds says people should also watch website addresses closely, looking for extra characters or letters that are slightly different from what the company actually uses.
鈥淭hat鈥檚 where you can start to figure out whether it was real or fake,鈥 he says.
An Aeroplan spokesperson says phishing scams are not the only way intruders can gain access to individual accounts, with weak and reused passwords also occasionally contributing factors.
鈥淧rotection of member information is our highest priority at Aeroplan and we have security measures in place to protect customers,鈥 Christa Poole, a senior manager with the company, said in a statement.
Aeroplan says it never requires its members to divulge personal or account information in an email.
For its part, Air Canada says it is helping to ensure that any Aeroplan customers who fall victim to the scam do not lose their accrued reward points.
鈥淲e are working closely with Aeroplan to ensure that booked reward tickets are cancelled and that miles are returned to member accounts,鈥 the company said.
The airline noted that the scam is not unique to Aeroplan, as loyalty and reward programs around the world have faced similar issues.
A 2017 report estimated that Aeroplan accounts contained $16 billion worth of unredeemed points. Experts say that sort of idle money is typical of loyalty programs, and likely explains the scammers鈥 motivation.
With a report from CTV Atlantic鈥檚 Bruce Frisko