Scammers are stealing points and miles from travel reward accounts. But often times, people aren't finding out they're been hit until they book a trip.