Yes, I think that's it. And I think he linked it, but didn't give his password, but I don't know more than that. DH has "issues" right now, (job problems, working late, his DM in the hospital again) so I'm not getting much help with points at the moment). I do know that it was the link on the AMEX page and he was either logged in or had to log in, but didn't fill out a form with his log in info. I don't fully understand, but he felt like it wasn't the same thing in terms of security risks. It helped that my friend's DH was talking one evening about how he was raking in the MRs through Rakuten and we knew we would be spending a lot in December. I'm sorry I can't be more specific, but it was a couple months ago.