Poor IHG account security

[Jousams]

So I've been dealing with IHG over the last few days relating to an unauthorised redemption on my account. The redemption was 10000 points to a British airways avois account in 'my name'.

After doing a bit of digging on the website, I found out that FF point redemptions require contact to IHG to be made. I asked IHG what they received from me to authorise the transaction and they advised that they received an email (not from any emails ever associated with my account) with my member number requesting the transfer (yes that is all)

Have escalated this with IHG and am awaiting a response, however just a heads up to keep an eye on your account, because apparently all you need to access it is a member number...

 

[drron]

Unfortunately virtually all hotel and airline programs are very insecure and probably only a matter of time before something happens.
I was fortunate the only time it has happened to me-I was accessing my account and noticed points disappearing.A quick phone call and I believe they got the perpetrator

 

[OzEire]

Appalling. Every hotel bill has ample info required to pull this scam.

As I've had another guest's bill slid under my door in the night before they were due to checkout, it's not hard to lose track of a bill.