A new Citibank application lets users pool rewards points via social media. It could prove attractive to customers and scammers alike.