Not sure I would personally give out my account number to someone I don't know, but regardless of whether you feel comfortable about this or not, worth knowing that the T&Cs from Ultimate Rewards (I assume that's where the points are coming from) say points can only be transferred to a spouse or household member's account, and that Chase has closed accounts before for improper points transfers. Not sure if they can confiscate any previously transferred points to an external, but is something you might want to think about.