Catch ‘Trusted Device Added’ on Loyalty Accounts Before Points Disappear

That “trusted device added” notification on your airline, hotel, grocery, or coffee rewards account is not just an FYI—it can be the earliest sign that someone has taken control and is preparing to drain your points. Loyalty programs hold real value, and criminals know it. This guide explains what a trusted device is, why attackers add one, how to audit and remove unknown devices, and how to prevent future takeovers across all your rewards accounts.

What “Trusted Device Added” Really Means

Most loyalty programs let you mark a phone, tablet, or computer as “trusted” after a successful login and multi-factor check. Once trusted, that device:

• May bypass some security prompts or receive priority push approvals.
• Can receive one-time codes via SMS or app prompts tied to the account.
• May be able to approve redemptions or profile changes more easily.

When a device you don’t recognize gets trusted, it’s a red flag: someone likely already has your password and has passed at least one verification step. From there, they can quietly transfer or redeem points, change your contact info, and block your access.

Common Ways Attackers Add a Trusted Device

• Password reuse: Your reused password was exposed in a breach and works on your rewards account.
• Phishing and fake login pages: A lookalike email or site captured both your username and password.
• SIM swap or number recycling: If your phone number was taken over or reassigned, attackers can receive SMS codes.
• Malware or session hijacking: A compromised device lets them intercept login sessions and add a trust entry.
• Leaked recovery info: Publicly exposed personal data helps them pass knowledge-based checks.

Immediate Actions If You See “Trusted Device Added”

Move quickly. Every hour can mean lost points.

1. Try to lock the account: If your program offers “Lock account” or “Temporarily freeze,” toggle it on. Some airline and hotel apps provide this under Security or Privacy.
2. Sign out of all sessions: Look for “Log out of all devices” or “End all sessions.” This forces reauthentication for every device, including the attacker’s.
3. Remove unknown trusted devices: Open the Security or Devices section and remove anything you don’t recognize. Delete all devices if unsure, then re-add your own later.
4. Change the password immediately: Use a long, unique passphrase (at least 14 characters). Do this after you’ve signed out all sessions so the attacker loses their foothold.
5. Rotate recovery channels: Update the email address and phone number if you suspect they’ve been tampered with or intercepted.
6. Enable stronger MFA: Prefer an authenticator app or passkey over SMS. If passkeys are available, set them up on devices you control.
7. Check recent activity and redemptions: Review point transfers, gift card redemptions, and partner activity. Screenshot anything suspicious.
8. Contact support and request a security review: Ask the program to:
   • Reverse unauthorized redemptions and transfers.
   • Verify and purge all trusted devices.
   • Force a credential and MFA reset.
   • Flag the account for enhanced monitoring.
9. File a case number: If significant value is missing, request a written case ID. This helps with reimbursement and timelines.

Where to Find Device Trust Settings on Popular Programs

Names vary, but look for these terms in your account:

• Security, Login & Security, Privacy, or Account Protection
• Devices, Recognized Devices, Trusted Devices, or Remembered Browsers
• Sessions, Active Sessions, or Sign out everywhere
• Two-Step Verification, Two-Factor Authentication, Passkeys, or Authenticator

If you can’t find them, search the program’s help center using “trusted device,” “recognized device,” or “sessions.”

How Attackers Monetize Your Points

Understanding the playbook helps you spot fraud faster:

• Quiet conversions: Move points to airline or hotel partners, then redeem for travel within days.
• Gift cards and digital codes: Convert points into instantly delivered e-gift cards.
• Family pooling abuse: Add a fake family member, then transfer value.
• Address or email switch: Change the contact fields to intercept alerts and confirmations.
• Companion accounts: Link to ride-share, food delivery, or fuel programs and spend from there.

Proactive Setup to Prevent Future Takeovers

Hardening each account once will save you from repeated lockouts.

• Use unique, strong passwords everywhere: A password manager generates and stores them so you never reuse.
• Prefer app-based MFA or passkeys: Disable SMS MFA if the program supports stronger options. Add multiple authenticators if allowed and store backup codes securely.
• Review trusted devices quarterly: Remove anything older than 90 days or you don’t recognize. Avoid “trust this browser” on shared or work computers.
• Set up account alerts: Turn on notifications for new device sign-ins, redemptions, points transfers, email or phone changes, and password resets.
• Limit recovery vectors: Remove backup emails you don’t control. For phone-based recovery, use a number with SIM-swap protections from your carrier.
• Harden your email first: Your email inbox approves password resets for nearly every loyalty account. Secure it with a strong password, app-based MFA, and phishing-resistant login if available.
• Reduce public data exposure: Opt out of data brokers and delete unneeded profiles that list your addresses, phone numbers, and family relations. Less exposed data means fewer successful account recovery attacks.

How to Audit Every Loyalty Account You Care About

Create a checklist and run it once per quarter:

1. Inventory your programs: Airlines, hotels, rental cars, pharmacies, groceries, coffee, gas, travel portals, gaming and electronics rewards, and cash-back apps.
2. Security baseline for each:
   • Unique password and app-based MFA or passkey enabled.
   • All unknown trusted devices removed.
   • Recovery email and phone verified and up to date.
   • Alerts enabled for redemptions, device additions, and profile changes.
3. Review activity and points balance: Look back at least 90 days. Flag transfers to new partners, gift card conversions, or unusual purchase categories.
4. Document support contacts: Note the phone and email for rapid recovery if something looks off.
5. Store backup codes safely: Keep them in your password manager’s secure notes or a physical safe.

If You’re Already Locked Out

Act as if it’s an ongoing takeover:

• Attempt account recovery from a clean device: Use a device you control, updated OS, and private network connection (no public Wi‑Fi).
• Contact support immediately: Provide screenshots of the “trusted device added” alert and any unusual activity. Ask them to freeze redemptions while verifying your identity.
• Prove identity safely: Supply only what’s required. Be cautious with sending ID documents over email; use official portals when available.
• Escalate with case numbers: If value is high or time-sensitive (upcoming travel), request escalation to a fraud or risk team.
• Monitor financial identity: Because loyalty account compromise sometimes follows broader credential theft, keep an eye on new accounts, credit pulls, and suspicious changes.

If you see parallel warning signs—password reset emails you didn’t initiate, unfamiliar devices on other services, or SIM issues—treat this as a wider incident and secure email, phone, and financial accounts first.

When to Involve Law Enforcement or Regulators

Most loyalty providers will handle reimbursement internally, but consider formal reports when:

• Losses are substantial or tied to a larger breach of your other accounts.
• Your government ID, passport, or travel plans were exposed through the account.
• You suspect SIM swap, large-scale phishing, or organized fraud targeting many users.

Document all activity, case numbers, dates, and screenshots. Formal records can speed reimbursement and help investigators trace patterns.

Privacy Tips That Reduce Takeover Risk

• Clean up exposed data: Remove your phone, address, and family ties from people-search sites to reduce successful account recovery attacks.
• Harden your mobile number: Ask your carrier to add a port-out PIN and SIM-change lock to your line.
• Segment email addresses: Use a dedicated email for travel and rewards that isn’t public or used on forums and newsletters.
• Beware public Wi‑Fi: Avoid logging in to rewards accounts on shared or public networks. If necessary, use a trusted VPN and ensure HTTPS.
• Turn off “stay signed in” on shared devices: Public or workplace computers should never be trusted or remembered.

Recognize the Subtle Signs of Ongoing Fraud

Even without a clear “trusted device added” alert, these signals deserve attention:

• Login alerts from unfamiliar cities, devices, or times of day.
• Redemption confirmation emails you didn’t request.
• Profile changes reverting after you fix them.
• Partner program links appearing that you didn’t authorize.
• Missing or delayed notifications, suggesting contact info was changed.

Set a recurring reminder to check balances and redemptions—especially before trips, sales events, or major point transfers.

Why Credit and Identity Monitoring Still Matters

While loyalty points aren’t credit lines, the same stolen credentials that let someone add a trusted device can also be used to open accounts, change addresses, or attempt financing with your identity. Complement account hardening with broad monitoring so you’ll catch new-account applications, score changes, or identity-related alerts quickly. If you don’t have a monitoring solution, consider adding one that ties privacy, credit, and identity alerts together so you’re not blindsided by related fraud. Learn how to use these tools effectively here: SmartCredit for privacy, credit monitoring, and identity protection.

Build a Rapid-Response Plan You Can Use in Minutes

Create a short playbook and keep it in your password manager:

• Step 1: Lock account or freeze redemptions.
• Step 2: Sign out all sessions and remove trusted devices.
• Step 3: Change password and enable app-based MFA or passkeys.
• Step 4: Review activity and contact support for reversal and a case ID.
• Step 5: Check other accounts and your email for crossover compromise.

Practice once so you’re comfortable navigating each loyalty site’s security menus before a real incident.

Conclusion

A “trusted device added” alert is your chance to stop loyalty fraud before your points vanish. Treat it like an active threat: lock the account, kick out all sessions, remove unknown devices, strengthen MFA, and review activity immediately. Then harden your broader privacy posture—unique passwords, reduced public data exposure, strong email security, and identity monitoring—so future takeover attempts fail. With a simple playbook and quarterly checkups, you can keep your rewards safe and ready for you, not for attackers.