Somebody is using my rewards on your app for a local restaurant because you can put in any phone number without verifying it is you.