British Airways Avios Accounts Hacked, What to Do

Disclosure: We get a commission for links on the blog. You don’t have to use our links, but we’re very grateful when you do. American Express, Barclaycard, Capital One, Chase, Citibank and US Bank are Million Mile Secrets advertising partners. Opinions expressed here are the author's alone, and have not been reviewed, approved or endorsed by our partners. Here’s our Advertiser Disclosure.

Update:  Many folks on FlyerTalk report their British Airways Avios points have been returned!  So check your account!

Check your British Airways frequent flyer account!  Today, many folks are reporting that they’ve been locked out of their accounts and had their British Airways Avios points balances drained to zero.

This appears to be a result of a security breach or hack.  The details are not yet clear, but some folks are speculating that British Airways is temporarily shutting down accounts and removing points to prevent further fraud.

British Airways Avios Accounts Hacked What To Do

Have You Been Locked Out of Your British Airways Account? Or Lost ALL Your British Airways Avios Points?

I checked my account and can confirm I’ve been locked out too!  I reset my password, but I’m missing all my Avios points.  😮

What to Do?

Link:   FlyerTalk British Airways Hack Thread

Link:   British Airways Executive Club

1.   Sign-In to Your British Airways Account

You should sign-in to your British Airways frequent flyer account right away to see if you’ve been affected.  If you’re able to access your account, I strongly suggest you change your password!

But if you’re locked out (like I was!), you can click the “Forgotten PIN / Password” link on the British Airways sign-in page.  They’ll send you an email with instructions to reset your password.

British Airways Avios Accounts Hacked What To Do

If Your Membership Number or Password Aren’t Recognized, Use the “Forgotten PIN / Password” Link to Reset Your Account

I hope your British Airways Avios points balances are intact when you access your account.  My account shows ZERO points (it wasn’t zero before!).

British Airways Avios Accounts Hacked What To Do

Noooo! Where Are My British Airways Avios Points?

If your points are missing, do NOT panic.  You’re not the only one!

2.   Call British Airways or Wait It Out?

If you want to make a British Airways Avios points award booking soon, call British Airways at 800-452-1201 to verify your identity and have your points reinstated.

Folks on FlyerTalk report some agents have told them it will take a few days for the points to reappear in their accounts.

British Airways Avios Accounts Hacked What To Do

This Could Be Bad for Folks Who Want to Make Bookings Right Away

And don’t be surprised if you have to wait on hold for a LONG time.  So I wouldn’t call unless you urgently need to book a flight (they should be able to do this for you over the phone, and waive the phone booking fee).

Otherwise, relax.  There’s no reason to panic and spend hours on hold if you don’t need your points right away.

British Airways Avios Accounts Hacked What To Do

Even Though It’s Unnerving to See NO Points in Your Account, Try to Calmly Wait for British Airways to Fix This

Hopefully British Airways gets to the bottom of this soon.  Because so many folks are affected, I’m sure British Airways will send an email or post information about these issues once they have more details.

Would AwardWallet Help?

In this case, it’s unlikely AwardWallet users got advance notice of this issue, because they use the same username and password to check your British Airways account balance as you do.  So they’d be locked out of your account, too.

AwardWallet is a service that tracks all your miles and points in 1 place.

British Airways Avios Accounts Hacked What To Do

AwardWallet Returned an Error When I Tried to Update My British Airways Account Balance

That said, I like using AwardWallet because it usually notifies you if your account balances change.  So you might notice unusual activity in your accounts sooner.

If you change your British Airways account password, don’t forget to change it with AwardWallet!

Bottom Line

Many folks have reported being locked out of their British Airways frequent flyer account today.  And when they change their password and regain access to their account, their British Airways Avios points balances are ZERO.

Don’t panic.  This is a large-scale issue affecting many of us!  If you want to make a British Airways Avios points booking right away, call British Airways at 800-452-1201.  But expect to be on hold for a long time.

Otherwise, it’s best to change your account password and wait for British Airways to sort out the problem.  I’ll update you all when there’s more information!

* If you liked this post, why don’t you join the 25,000+ readers who have signed-up to receive free blog posts via email (only 1 email per day!) or in an RSS reader …because then you’ll never miss another update!

Editorial Disclaimer: Neither the responses below nor the editorial content on this page are provided or commissioned by the bank advertisers, and have not been reviewed, approved or otherwise endorsed by the bank advertisers. Opinions expressed here are the author’s alone, not those of the bank advertisers. It is not the bank advertisers’ responsibility to ensure all posts and/or questions are answered.

Leave a Reply

Your email address will not be published. Required fields are marked *

19 responses to “British Airways Avios Accounts Hacked, What to Do

  1. I’ve tried several times to do the password reset but they never send me the e-mail. Nothing I can do but wait it out.

  2. Somebody did themself a “favour” and took my points lol…

    27-Mar-15 Ex-Gratia 0 -77,800
    19-Jan-15 Redemption 0 -45,000
    23-Dec-14 Avios 0 107,800
    26-Aug-14 Avios 0 15,000
    View all transactions

    Ex-Gratia?? Ex gratia (/ˌɛks ˈɡreɪʃiə/;[1] also spelled ex-gratia) is Latin for “by favour”, and is most often used in a legal context. When something has been done ex gratia, it has been done voluntarily, out of kindness or grace. In law, an ex gratia payment is a payment made without the giver recognising any liability or legal obligation.

  3. Forget the points, do you have the phone number of the girl in the picture taking a nap? =)

  4. I had 100k avios taken ex-gratia too. From what I’ve read it sounds like when its ex-gratia it is BA proactively taking the avios out to prevent hackers from getting them.

    Another rumor I read is this is related to a Trip It hack, which I am a user of.

  5. I have tried too and not getting an email. Also for my DHs account I am getting an error that the account number is invalid

  6. Point balance zero, also the “ex-gratia”. I hope MMS is right that this BA being proactive. I would want to hear from them very soon.

  7. Thanks for the heads up, I went into my account, was locked out, reset the password, and found my balance to be zero. BA is closed now, so will contact them in the morning!

  8. Thanks for letting us know about this, Daraius. You’re the best!

    I checked my account and everything was OK.

    I agree, this is a good time for all Avios account holders to check our accounts, change our passwords, and make our new passwords rugged. Don’t use “abc123” or “password”.

  9. Yesterday morning I did an Award Wallet update and saw my BA account balance reflected a change to zero. My BA account did not recognize my account number so I did request the reset email, which I never received. Later, checking Award Wallet again, this time account not found. so Award Wallet did update my account to a zero balance before being locked out of my BA account.

  10. Mine says account number invalid

  11. Hi Had same issue and finally spoke to a rep. They have frozen accounts under a “maintenance schedule” (right!). The rep verified my information, gave me the correct number of avios points and said in 3-4 days the account should be back on line, not to worry. Hoping he is right but the fact that he had my correct balance sitting inside my account (even if I could not see them) made me feel a bit better.

  12. They warned us of an imminent devaluation 🙂

  13. I cannot log into my BA account, so I have to click “forget password“ following the instructions here. However, I haven’t got any reset email (even in my spam). Does everyone know what to do? Thanks!

  14. My 83k BA points were gone yesterday … I called them and thankfully BA took the points out of precaution.

    They said they’ll be returned in a week. I guess no award flight for my buddy to Las Vegas

  15. My Avios are back in my account today…

  16. I just checked and my account had been locked. After the reset my points were there. My wife’s account was just fine. No reset required. I checked on Award Wallet and it looks like I only have my account on there and not my wifes account. I wonder if the problem has anything to do with Award Wallet.

  17. My account had apparently been compromised, and thanks to this blog’s forewarning I didn’t have to panic when I discovered it for myself. I reset the password, but refrained from calling. My points just automatically re-posted to my account a couple days later. So all seems good there.

    BA’s communication on this has left a lot to be desired though. I received an email apprising me of the matter days AFTER I had reset the password and already had my miles back. It contained no useful information about what had actually prompted this. It also arrived on April Fool’s Day. Maybe the British don’t practice that tomfollery (LOL), but sending an unusual, cryptic message on A.F.D. is a great way to fall prey to skepticism. If I didn’t already know the issue was real, I would have dismissed this as a joke or phishing scheme. Bad timing. Anyway, does anyone actually KNOW what was compromised here? Was it Award Wallet, or TripIt (as I’ve heard both mentioned, but only in speculation)? If either, then honestly why has the breach only exhibited with BA so far? The intruders would have presumably been able to harvest a broader swath of saved password from AW. Very odd, and not comforting how little information has been forthcoming from BA.

  18. Oh, one other follow-up query: Has anyone else noticed whether this has spilled over into any account you might also have with Iberia? I found that my Iberia PIN was no longer being accepted, and had to reset it. I only took note of this today, as I rarely access that account, so it may or may not have coincided with the BA account lockout. But since they are both facets of the Avios program, I have a suspicion that both may have gone under lockout simultaneously. Can anyone confirm?

  19. AwardWallet is likely to be the cause.
    It seems after some accounts got compromised BA locked all account which had been accessed by automated systems (this includes AwardWallet and TripIt as well as malicious ones).