Depending on the amount of points you give out, there is a way to generate quite a bit of points through post flooding. That is you have a high character post allowance and give points for each character. Then again if someone want points badly enough and determined may find a way.
If you catch anyone circumventing your rules you can set the individual points/bank to a specified amount.
Click here for the SQL Queries. I've used it on several occasions. I'd also set the user(s) to a different Usergroup that has points disabled.