Site Security

Secure Firewalls

We protect our secure computer servers with numerous firewalls and specialized hardware and software that control all external communications with our computer network.  We constantly monitor these firewalls to prevent security breaches.

Email Safety -- Phishing and SMishing Schemes

Phishing is a kind of credit and debit card fraud. By pretending to email from a bank or similar site, scammers "fish" for account numbers, passwords, Social Security numbers, etc. They trick consumers into divulging sensitive information so that unlawful charges can be made on the consumers' accounts. "SMishing", named for SMS (Short Message Service) the technology used for cell phone text messages, is a similar kind of fraud. It uses text messages to deliver the "bait" to get clients to divulge personal financial information. Citi uses an Email Security Zone in all our email to help you recognize that the email was sent by us. Check the Email Security Zone to verify that an email you have received is from Citi and reduce the risk of your personal information being "fished."

A number of fraudulent email and text messages that claim to be from Citi Cards, Citibank, or Citigroup have been forwarded to us by our cardmembers. These schemes change frequently and often have links or attachments with links. Users who click on the links are taken to look-alike or "spoofed" sites where they are asked to enter personal data. Text message verbiage varies, but may direct users to a web site or phone number, and usually contains something that claims to require immediate attention.

Examples of Phishing Emails: 
Your Citibank account was temporarily suspended
Protect Your Citibank Account
Citibank for Your Information
Citi Identity Theft Solutions

Example of SMishing Text Message:
8772402505@citicards.com / Congratulations! Your CITI Card Cashback Bonus is ready to be redeemed! Simply call 877-240-2505 to redeem.

Security Questions Within Account Online

Citi is serious about account safety. That's why we're requiring all Account Online users to create security questions. We may periodically ask you to answer those questions in Account Online as a quick identity check. That way, when you drop in to do business, we'll know it's you.

Check Email for Security Zone

The best way to verify a Citi email is to look for the Email Security Zone header at the top of the email. Every Citi Cards email includes your first name, last name, the last 4 digits of your card number, and the last logged in date if you have logged into the website. "Last Logged In" is the last date you logged into the website prior to the date of the email from us; it is virtually impossible to steal. We update the last logged in date on Monday through Friday as of the prior weekday only; therefore, if you logged in on a Saturday, Sunday or holiday, the date shown will be from the closest weekday prior to the email delivery date. The Email Security Zone will always be in the upper right header of the email and looks like this:

If the date doesn't seem correct, double-check the last 4 digits to verify that you're referring to the correct account or check to see if an authorized user logged in to the account. If the date is still not correct send the email to spoof@citicorp.com and indicate that the last logged in information is wrong.

Please note that Citi will never ask you for your PIN number, and will never include your full account number, password or social security number in an email--only the last four digits. If you receive an email claiming to be from Citi that includes or asks for your full account number, password or social security number, do not respond to it. Instead, forward it to spoof@citicorp.com.

Report Email and Text Message Fraud

If you suspect that an email or text message appearing to be from Citi is fraudulent, forward it immediately to spoof@citicorp.com. An Internet Security Specialist will investigate. If you have replied to an email or text message with personal information, and now believe the communication to have been fraudulent, call us at the toll-free number on the back of your card. We will issue a replacement.