Your district can request that anyone wishing to link to a student must enter a valid registration code. Currently, if sufficient student personal information is entered, a parent can look up their child without knowing the registration code. The personal information required to find a student without the registration code includes all of: date of birth, first name, last name and the student ID. However, if you believe this is not enough, you can request that PushCoin always requires the registration code.
The downside of this is protection is that families who do not know their student registration codes will contact the school office, which means more emails for the business office to respond to. A viable option is to turn the requirement for the code off during the start of a busy season such as a new school year and later instructing PushCoin to put the requirement back on.