Hate to say it, but there isn't exactly a statute of limitations on ToS violations. Very likely the selling of the points is what bit you, as they probably flagged the UA account the points were sent to after seeing umpteen transfers to it, then back researched all of those transfers and are nixxing them.