I received a points transfer recently in June 2021. I was conferenced in by the other owner once she got through to a CM. The CM asked to confirm my member number and account details such name, address, and phone. Nothing sensitive like social security number. The CM then reviewed the transfer information (resort, number of points, and use year) and transferred the points after the other owner and I both confirmed.