Loyalty account takeover and fraud review
How do we handle a loyalty account takeover or suspicious redemption by verifying the member, deciding the case, restoring or blocking the points, and keeping the record?
Lock first, verify the real member, then decide with the evidence. When suspicious activity is flagged (by the fraud rules, the member, or a partner), Callvu classifies the case (a takeover with a changed contact and a redemption, a fraudulent redemption on an unchanged account, a transfer-out pattern, a merge or a match abuse), applies the protections (the account locked for redemptions and transfers, the pending redemption held), verifies the real member on a contact that predates the suspicious change or with an identity document on their own device, chases what the member alone can confirm (which actions were theirs), assembles the evidence (the logins, the devices, the changes, the redemptions and their beneficiaries, the partner data), routes the case to the loyalty fraud team in the Decision Desk with only the allowed outcomes, restores or blocks the points and reverses or honors the redemptions, resets the account's credentials and contacts, and writes the case and every action to the loyalty system, the system of record.
In scopeComplex: multi-party handoffsCallvu moves: classify, chase and verify, decide, write back
Last updated November 7, 2026.
The problem today
The member learned of the takeover from the hotel confirmation for a stay in a city they had never visited, and the points were long gone.
Loyalty accounts are attacked because points are value with weaker protection than money: a password reused from a breach, a changed email, a redemption to a new beneficiary, a transfer to a fresh account. The member notices late; the agent, under pressure, either restores everything on the member's word or nothing until an investigation that takes weeks. Both are wrong, and neither leaves a record a regulator or an auditor can follow.
The case has a shape: lock the account so nothing more leaves, verify the real member on a contact the attacker did not control, establish which actions were the member's and which were not from the evidence (the logins, the devices, the changes, the beneficiaries), decide under the program terms and the fraud policy who bears what, restore or block, and reset the account so the attacker is out. The loyalty system must carry every action with its reason.
A takeover handled in that order is resolved in days with a record; handled in any other order, it is resolved by argument.
How it runs
From the requestto the system of record.
The fraud rules flag suspicious activity, a member reports a takeover or an unknown redemption, or a partner reports a suspect award. Callvu classifies the case and applies the protections.
- Member
- Verifies on a trusted contact or with an identity document, confirms which actions were theirs, and resets credentials.
- Loyalty fraud team
- Decides the case in the Decision Desk with the evidence.
- Partners
- Supply award and redemption data and act on reversals through their channels.
- Callvu
- Classifies, locks, verifies, chases, assembles, routes, acts and writes.
Classify and protect
The signals (a contact or password change followed by a redemption or a transfer, a login from a new device and location, a redemption to a new beneficiary, a transfer-out pattern, a partner's report) classify the case type and its urgency; the account is locked for redemptions, transfers and profile changes, any pending redemption or transfer is held, and the partner is asked to hold a pending award where its rules allow.
Chase and verify the real member
The real member is contacted on a channel that predates the suspicious change (the prior phone or email, the postal address) or verified with an identity document on their own device; the member confirms which recent actions were theirs and which were not, through a link listing the actions in plain terms; a member who cannot be reached is chased on the schedule while the lock holds.
Assemble and decide
The evidence is assembled: the login history with devices and locations, the profile changes with times, the redemptions with their beneficiaries and the partner data, the transfers and the receiving accounts, the member's confirmations; the loyalty fraud team decides in the Decision Desk with the evidence, the program terms and the fraud policy, and only the allowed outcomes: restore the points in full or in part, reverse the redemptions and recover from the partner where possible, block the points and the receiving accounts, decline where the member's own actions caused it, and refer to law enforcement where the policy requires.
Act and write back
The decision is executed: the points restored or blocked, the redemptions reversed or honored, the receiving accounts frozen, the credentials and the contacts reset by the member on their own device with stronger authentication enrolled, the lock lifted, and the case with every action, its reason and the evidence written to the loyalty system, the system of record; the member receives the outcome in writing, and the pattern feeds the fraud rules.
Where it ends: The account was locked before more value left, the real member was verified on a trusted channel, the case was decided on evidence by the fraud team, the points and the account were restored or blocked accordingly, and the loyalty system holds the whole case. The Decision Trace shows the classification, the verification and the decision; the Audit Trace shows the lock, the member's confirmations, each action and the reset with time.
Runtime enforcement
What is enforcedwhile the work runs.
The regulations preloaded in Callvu Studio and the bank's own policies, applied as steps that run, not lines in a binder. A step that breaks a rule does not run, so a completed run was compliant.
The handoff
Between the front doorand the back office.
The front door
The fraud rules, the member's report in any channel, or a partner's report; the member verifies and confirms on their own device.
The back office
The loyalty fraud team decides with the evidence assembled; partners act through their channels; the privacy office sees breach flags.
The Decision Desk
- Every case goes to the loyalty fraud team in the Decision Desk with the evidence and the terms, and only restore in full or part, reverse and recover, block, decline, or refer to law enforcement.
Proof
In scope.Proof at scale, not one process at a time.
The kind of process Callvu runs in production for customers in this industry. Ask for a reference on this exact process. The results below are the industry's published proof; each claim code links to its record on agents.callvu.com.
More than 1,000 processes are live across Callvu customers.
Across Callvu customers
Every run produces a Decision Trace (why each AI action was allowed) and every workflow execution an Audit Trace (the chronological governance record).
ENF-03 · Self-asserted · verified 2026-11-02
When a person must decide, the case goes to the right reviewer in the Decision Desk, with only the allowed choices, and the run waits for the decision.
CAP-07 · Self-asserted · verified 2026-11-02
Callvu classifies each request into a unit of work (work type, skill, effort, due date) the moment it lands.
HND-02 · Self-asserted · verified 2026-11-02
Questions
What buyers ask next,answered plainly.
What happens first?
The account is locked for redemptions, transfers and profile changes and any pending redemption is held, before anyone is verified, so nothing more leaves.
How is the real member verified?
On a contact that predates the suspicious change, or with an identity document on their own device; never on the email or phone the attacker added.
Are the points always restored?
The fraud team decides on the evidence under the program terms and the fraud policy: restore in full or part, reverse and recover from the partner, block, or decline where the member's own actions caused the loss; the reasons are on the record.
Related processes
Bring this process, or the one that costs you most.
We build it against your policies and your systems, train your team and stay with you through launch. You are live in weeks.