Expiring Rewards Points Scams
What is a "Expiring Rewards Points" Scam?
An "Expiring Rewards Points" scam is a phishing scam where criminals claim that a person's loyalty points, airline miles, credit card rewards, hotel points, or store rewards are about to expire. The scam usually creates urgency by saying the victim must act immediately to keep, redeem, transfer, or reactivate the points. The message often includes a link to a fake login page that looks like a real rewards portal. Once the victim enters their username, password, card details, security code, or one-time passcode, the scammers can steal the account or make unauthorized purchases. Some versions ask the victim to pay a small fee to "release" or "extend" the rewards, which is used to capture payment information. Other versions may install malware through a fake rewards app, attachment, or website. The goal is usually account takeover, identity theft, payment fraud, or theft of the actual reward balance.
How the Scammers Target New Victims:
Scammers usually contact victims through text messages, emails, social media ads, direct messages, robocalls, or fake app notifications. The message may appear to come from an airline, hotel chain, bank, credit card company, supermarket, gas station, pharmacy, restaurant, or online store. Many messages use spoofed sender names, copied logos, and links that look similar to the real company's website. Some scams are sent after data breaches or public promotions, making the message seem more believable to people who actually have rewards accounts.
Who the Scammers Impersonate:
Expiring Rewards Points scammers may impersonate:
- Cable/Internet Providers (Verizon, Comcast, Spectrum, etc)
- Phone Providers (Verizon, T-Mobile, Sprint, etc)
- Airlines and frequent flyer programs
- Hotels and travel rewards programs
- Credit card rewards portals
- Banks and financial institutions
- Retail stores and supermarket loyalty programs
- Gas station and pharmacy rewards programs
- Restaurant, coffee shop, and delivery app loyalty programs
- Online shopping platforms and membership clubs
- Customer support or rewards account security teams
How to Spot a "Expiring Rewards Points" Scam:
What the Scammers Say (Scam Narratives / Fake Storylines):
Scammers often say that the victim's rewards points, miles, credits, or cashback balance will expire today or within a few hours. They may claim the account has been locked, the points are pending, the rewards must be verified, or the victim has qualified for a bonus redemption. Some messages say the victim can receive a gift card, free flight, hotel upgrade, fuel credit, shopping voucher, or cash reward by clicking a link. Others claim that recent account activity must be confirmed before the rewards are lost. The storyline is designed to make the victim act quickly without checking the real account directly.
Information the Scammers Ask For:
Scammers may ask for the victim's rewards account login, email address, password, phone number, full name, mailing address, date of birth, credit card number, debit card number, CVV code, banking details, account PIN, or one-time verification code. They may also ask the victim to download an app, open an attachment, pay a small processing fee, or provide identity documents to "verify" eligibility. In account takeover versions, scammers may pressure the victim to read back security codes sent by text or email.
Scam Warning Signs and Red Flags:
Common red flags include urgent language, threats that points will expire immediately, suspicious links, spelling errors, unusual sender addresses, requests for payment information, and messages asking for one-time passcodes. A real rewards program usually allows customers to log in through the official website or app rather than through a random text or email link. Be suspicious of messages offering unusually large rewards, free travel, or gift cards in exchange for quick action. Also watch for web addresses with extra words, misspellings, strange domain endings, or shortened links that hide the real destination.
Victim Experiences and Scam Reports:
Victims often report receiving a convincing text or email that appears to come from a company they recognize. After clicking the link, they may be taken to a fake rewards portal where they enter login credentials or payment details. Some victims later find that their rewards points were drained, their loyalty account was locked, their credit card was charged, or their personal information was used for additional fraud. Others report that scammers used stolen login details to access linked travel, shopping, or payment accounts. Many victims only realize the scam after checking the official company website or contacting customer service directly.
Protect Yourself from "Expiring Rewards Points" Scams:
Dangerous Actions to Avoid:
Do not click links in unexpected messages about expiring rewards points. Do not enter passwords, payment details, one-time passcodes, or identity information on a website reached through a text or email link. Do not pay a fee to redeem, extend, or unlock rewards unless you have confirmed the request through the official company website or app. Do not download apps or attachments from reward messages. Do not call phone numbers included in suspicious reward alerts, because they may connect to the scammers.
Best Practices to Stay Safe:
Go directly to the official website or app by typing the address yourself or using a trusted bookmark. Check your points balance, expiration date, and account notices inside the real account dashboard. Use strong, unique passwords and enable multi-factor authentication on rewards, banking, travel, and shopping accounts. Report suspicious texts, emails, or calls to the real company through its official customer service channel. If you entered credentials on a fake site, change your password immediately, secure any linked accounts, monitor payment cards, and contact the company to freeze or recover the rewards account.
Key Takeaways to Stay Safe:
Expiring rewards points scams rely on urgency, familiar brands, and fake login pages. Treat unexpected messages about expiring points, bonus rewards, or account verification as suspicious until confirmed through the official website or app. Never provide passwords, card details, or one-time passcodes through a link sent by text or email. The safest response is to avoid the message link, log in independently, and verify the account status directly with the real company.
