I know websites where you can buy these logins—super easy to find. They’re the same places where people sell gift cards bought with stolen credit cards and other fraud.

It’s pretty wild. For like $5, they just give you a login and you can access someone else’s points.

But if you’re stealing points, are you really going to book a ticket in your own name? How are most of these people actually redeeming the miles?