Wise Hustlers — Digital Product & App Development Studio Logo
Get Consultation
/Case Study: Pointfinity Engine
Enterprise Loyalty & FinTech Architecture

Pointfinity Case Study: High-Concurrency Rewards Engine for UAE Retail & FinTech

A deep architectural breakdown of how Wise Hustlers engineered an ACID-compliant double-entry rewards ledger capable of processing sub-15ms POS point redemptions, bound to verified UAE Pass identities, integrated with Tap/Telr gateways, and compliant with CBUAE banking standards.

11.4 ms
Avg POS Redemption Latency
50,000+
Max System TPS Capacity
AED 50M+
Rewards Processed
0.00%
Points Fraud / Discrepancy

Problem Statement

The Challenge: Eliminating Points Inflation & Fraud at Scale

Traditional merchant reward apps suffered from rampant vulnerability vectors: fake referral signups via burner SIM cards, double-spending points during simultaneous online checkout and POS barcode scanning, and balance drift caused by naive single-database updates.

Identity Abuse & Bot Exploits

Users created thousands of automated accounts to harvest initial signup rewards without real identity verification.

POS Checkout Latency Bottlenecks

Cashiers at high-traffic Dubai Mall outlets could not wait 3-5 seconds for remote API validation while customer queues formed.

Multi-Merchant Settlement Reconciliation

Cross-earning points at Merchant A and redeeming at Merchant B required exact financial clearing and automated commission invoicing.

Architectural Innovations Implemented

  • Event-Sourced Double-Entry LedgerEvery point modification creates two immutable journal records (Debit/Credit), preventing unbacked point creation.
  • UAE Pass SOP3 Identity BindingEvery customer vault is cryptographically bound to their verified Emirates ID hash, reducing bot accounts to exactly zero.
  • Redis Enterprise Redlock LockingMicrosecond distributed mutex locks isolate active redemptions, ensuring zero race conditions during parallel checkouts.
  • Automated Tabby/Tamara BNPL Split HooksEarn points seamlessly on split BNPL checkout orders with immediate merchant settlement guarantee.

Interactive Diagram

Pointfinity Microservice & Ledger Architecture

Click any architectural node to inspect its tech stack, latency SLA, and security controls.

Financial Persistence

Double-Entry Accounting Ledger

ACID Compliant (0 Inflation)
Functional Overview

Guarantees debit/credit balance invariance. Every point earned or spent is recorded as a balanced financial journal entry.

Technologies Executed
PostgreSQL, Event Sourcing, TimescaleDB
Execution Spec & Security
HA ClusteringActive-Active (3 AZs)
Data SovereigntyAWS me-central-1 (UAE)
Audit ComplianceCBUAE & PCI-DSS L1

Engineering Proof

Source Code & Protocol Implementation

Production snippets demonstrating double-entry invariance, UAE Pass OIDC verification, and BNPL reward hooks.

Double-Entry Accounting Ledger Schema & Invariance Logic
// Pointfinity Immutable Double-Entry Ledger Event
export interface JournalEntry {
  entryId: string;
  transactionHash: string;
  userId: string;         // UAE Pass Verified Identity GUID
  merchantId: string;     // Dubai Mall / Mall of the Emirates Partner ID
  timestamp: number;
  
  // Double-Entry Invariance: SUM(debits) MUST EQUAL SUM(credits)
  postings: Array<{
    accountType: 'CUSTOMER_POINTS' | 'MERCHANT_PAYABLE' | 'SYSTEM_RESERVE' | 'COMMISSION_REVENUE';
    accountNumber: string;
    debitAED: number;     // AED value of points debited
    creditAED: number;    // AED value of points credited
  }>;
  
  cbuaeAuditHash: string; // Cryptographic SHA-256 HMAC for Central Bank audit
}

// Invariance Validator executed on every ledger commit
export function validateEntryInvariance(entry: JournalEntry): boolean {
  const totalDebit = entry.postings.reduce((sum, p) => sum + p.debitAED, 0);
  const totalCredit = entry.postings.reduce((sum, p) => sum + p.creditAED, 0);
  
  // Math.abs check for micro-rounding floating point safety
  if (Math.abs(totalDebit - totalCredit) > 0.0001) {
    throw new Error(`LEDGER_UNBALANCED_ERROR: Debits (${totalDebit}) != Credits (${totalCredit})`);
  }
  return true;
}

Verified Outcomes

Business & Operational Impact

11.4 ms

Sub-Second Redemption

POS checkouts at Dubai Mall and Mall of the Emirates execute instant point redemptions with zero queue delays.

0 Abuse

Identity-Verified Safety

Emirates ID identity binding eliminated bot accounts, multi-phone referral farming, and points creation exploits.

AED 50M+

Reconciled FinTech Volume

Flawless automated merchant settlement statements between participating retail brands and payment gateways.

Want to Build a High-Performance FinTech Platform like Pointfinity?

Partner with Wise Hustlers for bank-grade architecture, double-entry financial ledgers, and CBUAE compliance engineering.