Maximise your Avios, air miles and hotel points

British Airways suspending Executive Club accounts after suspected hacking attack

Links on Head for Points may support the site by paying a commission.  See here for all partner links.

I had a tweet on Friday from a HfP reader who suddenly found himself locked out of his British Airways Executive Club account.  The call centre were not willing to enlighten him further.

Over the weekend, more details have trickled out.

This email from British Airways was posted by a user at Flyertalk:

Dear Customer

British Airways has become aware of some unauthorised activity in relation to your Executive Club account.

This appears to have been the result of a third party using information obtained elsewhere on the internet, via an automated process, to try to gain access to your Executive Club account.

We understand this was login information relating to a different online service which you may have also used to access your Executive Club account.

We would like to reassure you that, although it does appear that the login attempt was successful, at this stage we are not aware of any access to any subsequent information pages within your account, including your flight history or payment card details.

We have now locked down your online account to protect it from further access. As part of the lock-down process we have also changed your password and you will need to reset it before you are able to use your account.

If you use the same login details for your Executive Club account as you do for your online accounts with any other organisations, we would also recommend that you change the passwords for these accounts, as well as exercising vigilance regarding any unusual or suspicious use of your personal data.

For a short period of time, as a precaution, we have also suspended the use of Avios on your account. We will let you know when this suspension period is over.

In the meantime, however, if you wish to spend your Avios please contact us via your local Executive Club service centre. We will be able to reactivate your account by asking you some additional security questions.

We are sorry for the concern and inconvenience this matter may have caused you and would like to reassure you that we are taking this incident seriously.

British Airways Executive Club team

It is not clear what the ‘online service’ is that he is meant to have used which has led to his account being compromised.  It seems that it is NOT AwardWallet which would be the obvious suspect because it is the biggest of the online account management apps.  None of the four people on Flyertalk who received this email report having shared their details with ANY third party apps.

It seems that fraudulent use of accounts is linked to both hotel bookings with Avios and flights.  Russia appears to be a common thread among the flight routes and hotel guest names.  This sort of behaviour is hugely risky of course since it relies on the account holder not noticing that his account balance has dropped.  (This is why it would be stupid to hack AwardWallet, since you would be alerted as soon as your balance moved!)

One Flyertalk poster even found that the name on his BA account had been changed – heaven knows how that was done.

The moral of this story is to keep an eye on your balances – ironically, this may involve giving your details to a service like AwardWallet – and treat account security in the same way you would treat bank account security (which, in some ways, it is).


How to earn Avios from UK credit cards

How to earn Avios from UK credit cards (April 2024)

As a reminder, there are various ways of earning Avios points from UK credit cards.  Many cards also have generous sign-up bonuses!

In February 2022, Barclaycard launched two exciting new Barclaycard Avios Mastercard cards with a bonus of up to 25,000 Avios. You can apply here.

You qualify for the bonus on these cards even if you have a British Airways American Express card:

Barclaycard Avios Plus card

Barclaycard Avios Plus Mastercard

Get 25,000 Avios for signing up and an upgrade voucher at £10,000 Read our full review

Barclaycard Avios card

Barclaycard Avios Mastercard

5,000 Avios for signing up and an upgrade voucher at £20,000 Read our full review

There are two official British Airways American Express cards with attractive sign-up bonuses:

British Airways American Express Premium Plus

25,000 Avios and the famous annual 2-4-1 voucher Read our full review

British Airways American Express

5,000 Avios for signing up and an Economy 2-4-1 voucher for spending £15,000 Read our full review

You can also get generous sign-up bonuses by applying for American Express cards which earn Membership Rewards points. These points convert at 1:1 into Avios.

American Express Preferred Rewards Gold

Your best beginner’s card – 20,000 points, FREE for a year & four airport lounge passes Read our full review

The Platinum Card from American Express

40,000 bonus points and a huge range of valuable benefits – for a fee Read our full review

Run your own business?

We recommend Capital on Tap for limited companies. You earn 1 Avios per £1 which is impressive for a Visa card, along with a sign-up bonus worth 10,500 Avios.

Capital on Tap Business Rewards Visa

Huge 30,000 points bonus until 12th May 2024 Read our full review

You should also consider the British Airways Accelerating Business credit card. This is open to sole traders as well as limited companies and has a 30,000 Avios sign-up bonus.

British Airways Accelerating Business American Express

30,000 Avios sign-up bonus – plus annual bonuses of up to 30,000 Avios Read our full review

There are also generous bonuses on the two American Express Business cards, with the points converting at 1:1 into Avios. These cards are open to sole traders as well as limited companies.

American Express Business Platinum

40,000 points sign-up bonus and an annual £200 Amex Travel credit Read our full review

American Express Business Gold

20,000 points sign-up bonus and FREE for a year Read our full review

Click here to read our detailed summary of all UK credit cards which earn Avios. This includes both personal and small business cards.

Comments (69)

This article is closed to new comments. Feel free to ask your question in the HfP forums.

  • James Hartman says:

    This has just happened to my BAEC account too. Except that I have received no email from BA advising what they have done.
    I contacted Exec Club by phone and spoke to a lady who advised that she has received an email from one of the BA back office teams advising that customers must go through data protection over the phone and change their online password. The lady within Exec Club has emailed this back office team back to tell them that I have done all of this and apparently they will reinstate my Avios to my account ‘shortly’.
    Does anybody know how long this takes, as I am talking a relatively large amount of Avios here.

  • 1967stuart says:

    Mine also locked out (and so were my wife and children’s accounts)
    Spoke to a really helpful person. Seems that BAEC has locked down all accounts that had activity in the past few months (as a general precaution / audit) following a few people who had their accounts hacked when they got caught out by a fake email asking them to reset their passwords (or at least that is what he told me).
    So they have manually wiped out the points to stop them being hacked by the real hackers whilst they complete the audit and then ask people to change their account details and log in etc

    • pol says:

      except I have no activity on mine since September 2014 so not sure why mine was frozen!

  • Andy says:

    Well that’s what’s happened to me then – my account and my wife have been zeroed but its really frustrating because I need to book flights for Easter 2016 soon so I hope they reinstate shortly. I’ve changed our passwords online and can get in but just see the Ex-gratia deduction. If they have done this for everyone, hopefully they will be running a job to reinstate points once you change your password.

    Can’t get through on the phone – says they are experiencing “extremely’ high call volumes!

  • Mikee says:

    Same for me too…..zero avios balance due to “ex gracia” payment.

    Silver line permanently engaged

    • Peter Bambridge says:

      Unfortunately, I am also the same = 0 balance !
      Also can’t reach anyone at BA !
      Not happy !

  • Chris says:

    Just received an email and so have reset password. Balance is zero so waiting to see what happens.

  • Simon says:

    Same problem. Account is zeroed and I do not use any third party programs to access my BA EC account. Lines are down and no way to contact. Clearly they are being swamped with this. Must be a lot of people affected.

  • Bruce M says:

    Ex – Gracia payt so my Avios is down to 0 – been on hold for 30 mins – about to give up and try later

  • mkcol says:

    So I get the following email from BAExecutiveClub_GB@my.ba.com which isn’t a “normal looking” email address for BA & they ask me to click a link in it – don’t think so!! That looks more dodgy than anything!

    Dear Customer

    British Airways has become aware of some unauthorised activity in relation to your Executive Club account.

    This appears to have been the result of a third party using information obtained elsewhere on the internet, via an automated process, to try to gain access to your Executive Club account.

    We understand this was login information relating to a different online service which you may have also used to access your Executive Club account.

    We would like to reassure you that, although it does appear that the login attempt was successful, at this stage we are not aware of any access to any subsequent information pages within your account, including your flight history or payment card details.

    We have now locked down your online account to protect it from further access. As part of the lock-down process we have also changed your password and you will need to reset it before you are able to use your account.

    Please click here and follow the password reset process.

    If you use the same login details for your Executive Club account as you do for your online accounts with any other organisations, we would also recommend that you change the passwords for these accounts, as well as exercising vigilance regarding any unusual or suspicious use of your personal data.

    For a short period of time, as a precaution, we have also suspended the use of Avios on your account. We will let you know when this suspension period is over.

    In the meantime, however, if you wish to spend your Avios please contact us via your local Executive Club service centre. We will be able to reactivate your account by asking you some additional security questions.

    We are sorry for the concern and inconvenience this matter may have caused you and would like to reassure you that we are taking this incident seriously.

    British Airways Executive Club team

This article is closed to new comments. Feel free to ask your question in the HfP forums.

The UK's biggest frequent flyer website uses cookies, which you can block via your browser settings. Continuing implies your consent to this policy. Our privacy policy is here.