In luminios city, one of the pokemon centers tells you your pokemiles when your trying to get an item for exchange of some thus confirming that its from ingame. Although if someone hacked the website for pokemiles then they could add it but that seems to stupid to do