They thought a misplaced suitcase was a small hiccup on a dream trip. What started as a quick swap at an Indonesian airport spiraled into four rapid transactions that drained $28,000 from their credit card — leaving the family stunned, fighting their bank, and scrambling to get their luggage back.
If you want to avoid the same costly mistake, learn how common airport switch-and-pay scams work, how scammers bypass security checks, and what steps actually help recover money and protect your cards.
This post will walk through how the mix-up unfolded, the financial fallout the family faces, and practical steps travelers can take to reduce risk and respond fast when fraud hits.

How a Family’s Dream Vacation Turned Into a Costly Travel Scam
A misplaced suitcase at an Indonesian airport led to a chain of events that drained $28,000 from a travel credit card. The incident involved an AirTag, a hotel WhatsApp message, an unsecured payment link, and rapid international transactions on a Qantas Titanium card.
The Mix-Up: Mistaken Suitcase and Unintended Consequences
The family landed in Jakarta on a stopover and picked up a black Samsonite that didn’t match their size. They realized the error at The Ritz-Carlton and handed the suitcase to hotel staff, expecting a simple exchange.
An Apple AirTag in the suitcase reported it stayed at the airport, so the family assumed the hotel or airport would retrieve it. Instead, the suitcase showed up at Sam Ratulangi International Airport in North Sulawesi, more than 2,000 km away, which raised immediate concern about tampering and who might have access to baggage handling.
The mix-up turned into a vulnerability. The family’s belief that the hotel would manage the return created a window for scammers to intervene. Small oversights in verifying procedures and communications set the stage for financial loss.
Tracing the Lost Suitcase at Sam Ratulangi International Airport
Tracking the AirTag gave a clear location: Sam Ratulangi International Airport. That concrete location convinced the family the bag still existed and could be recovered, which made them willing to follow guidance from whoever claimed to help.
They contacted The Ritz-Carlton and were told a local airport contact could return the bag for a fee. Hotel staff used their official WhatsApp account to pass along the airport contact details and a payment link, which lent apparent legitimacy to the request.
The family later found the bag required extra shipping to Melbourne and bore a Garuda baggage tag, indicating the suitcase passed through airline handling. That suggested the scam began within airport operations or exploited airport procedures for lost luggage retrieval.
The Unsecured Payment Link and Credit Card Fraud
The family received a payment link via the hotel’s WhatsApp account and attempted to pay with a Qantas Titanium credit card. The first three attempts failed, prompting them to try a bank debit card. During these attempts, scammers captured authentication details or redirected payments to an overseas cash app.
Within about 30 minutes, four transactions cleared against the Qantas Titanium card: $6,330, $7,832, $12,333 and $2,146, plus nearly $860 in international fees. The card’s one-time-password system was reportedly used, and the card issuer later said the required security code had been supplied during authorization.
This sequence shows how an unsecured payment link can be weaponized: it mimicked a hotel return process, collected payment data, and triggered rapid fund transfers through foreign payment channels.
Immediate Steps Taken After Discovering the Scam
Once they saw the unauthorized charges, the family called Qantas Titanium customer service and the card issuer, NAB, to block the card. They reported the fraud to local Indonesian police and lodged a formal complaint with Qantas Money and the Australian Financial Complaints Authority (AFCA).
Qantas Money reviewed the transactions and said the MasterCard Secure code had been provided, so they declined liability. NAB warned that once payments move through overseas apps, recovery is difficult. Meanwhile, the family paid roughly $1,500 to return the actual suitcase to Melbourne and began mediation with AFCA, rejecting an initial goodwill offer.
They now face ongoing interest charges and are disputing liability, while advising other travelers to avoid entering card details into unsolicited links and to verify payment channels directly with official hotel or airport numbers.
Financial Fallout and Efforts to Recover
The family faced immediate out-of-pocket losses, tangled refund attempts, and a web of competing customer-service responses. They documented every transaction, call, and email to build a clear timeline for banks, regulators, and the airline.
Dealing with the Credit Card Company and Bank
They started by notifying the issuing card about the $28,000 charge the day they discovered it. They requested a provisional credit and filed a formal dispute under the card’s fraud protections, supplying receipts, travel itinerary, screenshots of the scam contact, and the airline baggage report.
The bank placed a temporary block on further transfers and opened an investigation. Cardholders should ask for the dispute case number, the investigator’s contact, and expected timeframes. If the card was part of a premium program such as Qantas Titanium, they should also contact the card’s concierge or benefits team—these programs sometimes accelerate fraud handling or provide travel-related support.
Keep records of dates, names, and reference numbers. If the bank rejects the claim, escalate to the bank’s complaints department and prepare to take the matter to an external dispute body.
Communicating with Authorities and Support Channels
They reported the scam to local police and to the airline’s lost-baggage desk, then saved the police report number and the airline’s Property Irregularity Report (PIR). Those official documents proved essential when dealing with insurers and financial institutions.
They also filed reports with national consumer bodies and used the airline’s escalation channels, keeping copies of all replies. When contacting travel insurers, they submitted the police report, bank dispute paperwork, and receipts for emergency purchases. For scams that crossed borders, they filed a complaint with the appropriate national fraud agency and uploaded all supporting evidence.
Practical tip: use a single shared folder (cloud or local) labeled by date so every authority and company receives the same documentation quickly.
Role of the Australian Financial Complaints Authority
They lodged a complaint with the Australian Financial Complaints Authority (AFCA) after the bank’s internal avenue failed to resolve the charge. AFCA provides an independent review when a financial firm does not adequately address a dispute, and it can recommend compensation up to specified limits.
AFCA requires complainants to show they tried the bank’s internal dispute and provide a clear timeline and evidence bundle. The family included bank correspondence, the PIR, police report, and screenshots of the scam. AFCA’s investigator asked clarifying questions, then issued a determination that either upheld or dismissed the complaint. If AFCA upheld the complaint, the bank would be required to reimburse where appropriate; if not, the family could still pursue other civil remedies.
Lessons Learned for Safe Travel and Payment
They learned to limit card exposure by using a single travel card with strong fraud protections and enabling transaction alerts for large charges. Registering travel plans with the bank and setting temporary spending limits for unknown merchants reduced future risk.
They also started using documented payment methods for vendors—credit cards with dispute rights rather than direct bank transfers—and saved all travel confirmations and baggage tags digitally. Enrolling in programs tied to their card, like Qantas Titanium benefits where applicable, provided extra customer-service leverage. Finally, they recommended immediate multi-channel reporting (bank, police, airline, and AFCA) to preserve evidence and speed recovery.
More from Decluttering Mom:













