Pointfinity Case Study: High-Concurrency Rewards Engine for UAE Retail & FinTech
A deep architectural breakdown of how Wise Hustlers engineered an ACID-compliant double-entry rewards ledger capable of processing sub-15ms POS point redemptions, bound to verified UAE Pass identities, integrated with Tap/Telr gateways, and compliant with CBUAE banking standards.
Problem Statement
The Challenge: Eliminating Points Inflation & Fraud at Scale
Traditional merchant reward apps suffered from rampant vulnerability vectors: fake referral signups via burner SIM cards, double-spending points during simultaneous online checkout and POS barcode scanning, and balance drift caused by naive single-database updates.
Identity Abuse & Bot Exploits
Users created thousands of automated accounts to harvest initial signup rewards without real identity verification.
POS Checkout Latency Bottlenecks
Cashiers at high-traffic Dubai Mall outlets could not wait 3-5 seconds for remote API validation while customer queues formed.
Multi-Merchant Settlement Reconciliation
Cross-earning points at Merchant A and redeeming at Merchant B required exact financial clearing and automated commission invoicing.
Architectural Innovations Implemented
- Event-Sourced Double-Entry LedgerEvery point modification creates two immutable journal records (Debit/Credit), preventing unbacked point creation.
- UAE Pass SOP3 Identity BindingEvery customer vault is cryptographically bound to their verified Emirates ID hash, reducing bot accounts to exactly zero.
- Redis Enterprise Redlock LockingMicrosecond distributed mutex locks isolate active redemptions, ensuring zero race conditions during parallel checkouts.
- Automated Tabby/Tamara BNPL Split HooksEarn points seamlessly on split BNPL checkout orders with immediate merchant settlement guarantee.
Interactive Diagram
Pointfinity Microservice & Ledger Architecture
Click any architectural node to inspect its tech stack, latency SLA, and security controls.
Double-Entry Accounting Ledger
Functional Overview
Guarantees debit/credit balance invariance. Every point earned or spent is recorded as a balanced financial journal entry.
Technologies Executed
Engineering Proof
Source Code & Protocol Implementation
Production snippets demonstrating double-entry invariance, UAE Pass OIDC verification, and BNPL reward hooks.
// Pointfinity Immutable Double-Entry Ledger Event
export interface JournalEntry {
entryId: string;
transactionHash: string;
userId: string; // UAE Pass Verified Identity GUID
merchantId: string; // Dubai Mall / Mall of the Emirates Partner ID
timestamp: number;
// Double-Entry Invariance: SUM(debits) MUST EQUAL SUM(credits)
postings: Array<{
accountType: 'CUSTOMER_POINTS' | 'MERCHANT_PAYABLE' | 'SYSTEM_RESERVE' | 'COMMISSION_REVENUE';
accountNumber: string;
debitAED: number; // AED value of points debited
creditAED: number; // AED value of points credited
}>;
cbuaeAuditHash: string; // Cryptographic SHA-256 HMAC for Central Bank audit
}
// Invariance Validator executed on every ledger commit
export function validateEntryInvariance(entry: JournalEntry): boolean {
const totalDebit = entry.postings.reduce((sum, p) => sum + p.debitAED, 0);
const totalCredit = entry.postings.reduce((sum, p) => sum + p.creditAED, 0);
// Math.abs check for micro-rounding floating point safety
if (Math.abs(totalDebit - totalCredit) > 0.0001) {
throw new Error(`LEDGER_UNBALANCED_ERROR: Debits (${totalDebit}) != Credits (${totalCredit})`);
}
return true;
}Verified Outcomes
Business & Operational Impact
Sub-Second Redemption
POS checkouts at Dubai Mall and Mall of the Emirates execute instant point redemptions with zero queue delays.
Identity-Verified Safety
Emirates ID identity binding eliminated bot accounts, multi-phone referral farming, and points creation exploits.
Reconciled FinTech Volume
Flawless automated merchant settlement statements between participating retail brands and payment gateways.
Want to Build a High-Performance FinTech Platform like Pointfinity?
Partner with Wise Hustlers for bank-grade architecture, double-entry financial ledgers, and CBUAE compliance engineering.