Use the same merchant and campaign naming that appeared in the original reward communication. Explain what information support needs and why, without inviting sensitive details through an insecure channel.
Acknowledge that the recipient may no longer have the original message or may be using a different device.