I faced the same issue when I stayed in SO/ HuaHin. For 2K point deduction each transaction, no passcode is required and frontline staff may go for that option without bothering the client. However, when the FO manager came, he immediately sorted this out, and I told him the passcode via email/SMS.