Guelph Aeroplan Points Fraud Highlights Account-Security Risks for Travellers

GUELPH, Ontario — A Guelph resident’s Aeroplan account was allegedly used to obtain flights after his cellphone was compromised, according to the Guelph Police Service. Police say the initial phone-related scam occurred in January 2025. The resident changed passwords afterward, but the email address associated with the loyalty account was not changed. Investigators allege that access was later used to book several Canadian flights using approximately $2,100 worth of Aeroplan points.

Police announced on July 27, 2026, that a 23-year-old man from Montreal, Quebec had been arrested in Quebec and charged with fraud under $5,000. The allegation has not been proven in court. The accused is scheduled to appear in Guelph court on Oct. 13. As of the police release and the available follow-up material reviewed for this brief, no later court outcome, revised charge, or additional accused person had been publicly reported.

Community Context and Social Sentiment

This is an account-security incident rather than a reported physical threat at a particular Guelph location. Its cross-provincial dimension is significant: the affected account belonged to a Guelph resident, while the arrest occurred in Quebec. Cases involving compromised phones, email accounts, saved credentials, and loyalty programs can span jurisdictions without an offender needing to visit the victim’s community.

Public discussion identified in broader Ontario conversations about loyalty-program fraud has generally reflected frustration with how quickly points can be redeemed and concern that victims must monitor multiple connected accounts. Those discussions should not be treated as direct commentary on this individual case, and no substantial, case-specific social-media reaction was identified in the material reviewed. The practical concern behind the reaction is clear: loyalty balances may have real monetary value even though they are not conventional bank funds.

For local context, readers can review Guelph crime statistics and safety data. Guelph is commonly characterized in available municipal and national reporting as a comparatively lower-crime midsize community, with property offences, fraud, and cyber-enabled incidents remaining relevant day-to-day safety concerns. A digital fraud report does not indicate a neighbourhood hotspot or an increased risk of street crime; it does reinforce the importance of personal account security across the city.

What This Case Suggests About Account Takeovers

The reported sequence illustrates a common account-takeover risk: changing a password is important, but it may not fully resolve a compromise if an attacker retains control of, or access to, the recovery email address or phone number tied to an account. Email inboxes can contain password-reset links, travel confirmations, and notices that allow fraud to continue after an initial security response.

Travellers and loyalty-program members can reduce exposure by using unique passwords, enabling multi-factor authentication where available, reviewing recovery email addresses and phone numbers after a suspected compromise, and checking redemption or booking histories for unfamiliar activity. If a phone number may have been taken over, users should contact their mobile provider promptly, secure their email account first, and notify the loyalty program of unauthorized redemptions. Keeping records of suspicious messages, account notifications, and booking confirmations may also assist an investigation.

Statistical Overview: A Wider Fraud Trend

Although the alleged loss in this file is below $5,000, it fits a broader Canadian pattern of cyber-enabled fraud. The Canadian Anti-Fraud Centre has repeatedly warned that phishing, credential theft, impersonation, SIM-related attacks, and account takeovers can lead to financial losses or unauthorized use of digital accounts. Fraud losses reported to authorities represent only part of the problem because many victims do not report incidents or may not recognize a compromise until after points, money, or personal information have been used.

Loyalty accounts can be attractive targets because points can be exchanged for flights, gift cards, merchandise, or other benefits. Unlike a single unauthorized card charge, a compromised email or phone number can affect several services connected to the same recovery details. The reported Guelph case therefore should be read as a community-safety reminder about digital resilience, not as evidence of a new physical-crime pattern in the city.

Residents comparing local trends may also find the Guelph-area crime statistics and safety data useful for distinguishing reported crime patterns from individual incidents. For suspected fraud, preserve evidence, report the matter to the affected company and police service as appropriate, and consider reporting it to the national fraud-reporting system.

About This Report

This safety alert was generated by aggregating data from local authorities, community reports, and open-source intelligence. Our mission at Crime Canada is to provide citizens with localized safety data and context. We are not the original creators of the underlying news reports.

Primary Source: Information in this report was initially covered by Erin Anderson for CityNews Kitchener.

Additional Research & Context

• Guelph Police Service media release outlining the investigation and charge allegation.
• Canadian Anti-Fraud Centre resources on recognizing, documenting, and reporting fraud.
• Crime Canada’s Guelph safety statistics for local context beyond this individual report.