How we had our Nectar Points stolen, and this is how yours will be too
UK shoppers are raising alarms over the security and privacy risks of Nectar, a major supermarket loyalty scheme whose points can be converted into real monetary discounts or goods. Commenters describe how weak authentication and batch-based systems make it easy to steal and spend points, while increasingly aggressive “cardholder-only” pricing effectively forces people into being tracked in exchange for normal prices. The conversation broadens into concerns about how loyalty and payment data can be linked, monetized, or even repurposed by governments or insurers, and many argue that points should be treated as transient perks rather than savings.
Value and Incentives of Nectar Points
- Points have real monetary value; frequent shoppers can accumulate balances equivalent to tens or hundreds of pounds and redeem for groceries, alcohol, electronics, eBay vouchers, etc.
- Individual points are nearly worthless, but balances are large enough that people save them for months or years.
- Some users advise spending points quickly: values can be devalued, promos like “double up” have become rarer, and schemes can close entirely.
Theft and System Design Flaws
- Reported fraud vectors include: in‑store staff swapping high‑balance cards for unused ones, and anyone with the 11‑digit account code redeeming points in-store.
- A historical case involved an IT insider allocating themselves fraudulent points and receiving a prison sentence.
- The article and comments describe a scenario where balances are not updated in real time, enabling multiple redemptions and even negative balances.
- Some argue this reflects poor transaction design (no proper locking). Others suggest it is a deliberate “slop” to keep terminals working offline and avoid user-visible failures.
Customer Service and Recovery
- Experiences vary: some report prompt restoration of stolen points plus goodwill compensation; others describe delayed, scripted, or indifferent responses.
- Restoring points to a new card can cause loss of personalized offers and pricing history, which takes months to rebuild.
Loyalty Programs, Pricing, and Privacy
- Many UK supermarkets now lock “normal” prices behind loyalty cards; non-members effectively pay a surcharge.
- Some users feel compelled to join due to cost-of-living pressures, seeing it as a trade of privacy for savings.
- Others avoid such schemes, use fake details, or shared phone numbers (e.g., “8675309”) to get discounts without accurate tracking.
- Concerns include detailed profiling of diet, health, and lifestyle, potential sharing with insurers or law enforcement, and broad post‑9/11 data mining.
- A counterview holds that GDPR and other rules limit abusive secondary use, and that the concrete benefits (>£50–80/year) outweigh mostly theoretical harms.
Regulation, Security, and Broader Lessons
- Some expect regulators to scrutinize loyalty-only pricing and data practices; a UK competition review is mentioned.
- Commenters stress that loyalty points and gift cards are not cash and can vanish if systems or companies fail; they should not be treated as savings.