Does calling the Laravel
$userPoints = UsersPoints::where('user_id','=',\Auth::id())->first();
To answer this (helpful for future readers): the problem you are asking about depends on database configuration.
Most MySQL engines: MyISAM and InnoDB etc.. use locking when inserting, updating, or altering the table until this feature is explicitly turned off. (anyway this is the only correct and understandable implementation, for most cases)
So you can feel comfortable with what you got, because it will work correct at any number of concurrent calls:
-- this is something like what laravel query builder translates to UPDATE users SET points += 5 WHERE user_id = 1
and calling this twice with starting value of zero will end up to 10