diff --git a/apps/scandic-web/app/[lang]/(partner)/(sas)/(protected)/sas-x-scandic/otp/page.tsx b/apps/scandic-web/app/[lang]/(partner)/(sas)/(protected)/sas-x-scandic/otp/page.tsx
index e10bd8a1d..f7085a83a 100644
--- a/apps/scandic-web/app/[lang]/(partner)/(sas)/(protected)/sas-x-scandic/otp/page.tsx
+++ b/apps/scandic-web/app/[lang]/(partner)/(sas)/(protected)/sas-x-scandic/otp/page.tsx
@@ -248,7 +248,7 @@ async function handleTransferPoints({
 
   cookieStore.delete(SAS_TRANSFER_POINT_KEY)
 
-  if (!pointsCookie || !points || isNaN(points)) {
+  if (!pointsCookie || !points || isNaN(points) || points <= 0) {
     return {
       url: `/${lang}/sas-x-scandic/error`,
       type: "replace",
diff --git a/apps/scandic-web/components/Blocks/DynamicContent/SAS/TransferPoints/TransferPointsFormClient.tsx b/apps/scandic-web/components/Blocks/DynamicContent/SAS/TransferPoints/TransferPointsFormClient.tsx
index c4fc1be4d..c0b09da27 100644
--- a/apps/scandic-web/components/Blocks/DynamicContent/SAS/TransferPoints/TransferPointsFormClient.tsx
+++ b/apps/scandic-web/components/Blocks/DynamicContent/SAS/TransferPoints/TransferPointsFormClient.tsx
@@ -53,7 +53,7 @@ export function TransferPointsFormClient({
   const calculatedPoints = parsedPoints * (exchangeRate ?? 0)
 
   const handleUpdatePoints = (points: number | null) => {
-    setPointState(points)
+    setPointState(points ? Math.min(Math.max(points, 0), sasPoints ?? 0) : null)
   }
 
   const hasNoSasPoints = !sasPoints || sasPoints === 0