Citibank Online Security

• privacy

• citibank.com

Q1: What is a fraudulent email?

Q2: Has this happened at Citibank?

Q3: How do I report a fraudulent email?

Q4: How can I be sure that I'm dealing with Citibank and not an imposter?

Q5: How do I safely access Citibank Internet Banking?

Q1: What is a fraudulent email?

A fraudulent email (a.k.a. spoofing, imposter, or phishing email) is one that has been forged so it looks like a legitimate email from a trusted source. This is done to trick users into providing sensitive personal information.

It's often hard to detect a fraudulent email because the email address of the sender can often appear genuine (such as support@citibank.com), as do the email design and graphics.

But there are tell-tale signs to be aware of. For example, fraudulent emails often try to extract personal information from you in one of two ways:

•	By luring you into providing it on the spot (e.g., by replying to the email)
•	By including links to a site that tries to get you to disclose personal data.

Q2: Has this happened at Citibank?

Fraudulent emails claiming to be from Citibank have been reported. While they haven't compromised Citibank's systems in any way, we take these incidents seriously and work with law enforcement agencies to investigate them.

If you receive a suspicious email, delete it immediately and notify your local Citibank customer service officer.

See some examples of fraudulent emails

Q3: How do I report a fraudulent email?

Contact your local Citibank customer service officer if you suspect that an email claiming to be from Citibank is fraudulent.

Q4: How can I be sure that I'm dealing with Citibank and not an imposter?

You can tell that you're dealing with Citibank in two ways:

•	Citibank will never send you an email asking for your password, credit card numbers, or other sensitive information.
•	Citibank login pages are always on a webpage and never in a pop-up window. Beware of pop-up windows that ask for your account number and PIN.

Q5: How do I safely access Citibank Internet Banking?

To ensure that you are going to an authentic Citibank site, type in entire Citibank website address into your browser instead of clicking on the link directly. For example, Singapore customers would type in "http://www.citibank.com.sg" into the browser address field.

After clicking on the "login" button, verify the security of the site. This depends on the type of browser you use, Netscape 4.7 and IE 5.5 does this by showing a locked padlock. Microsoft Internet Explorer displays a lock on the status bar.

Click on the unbroken lock icon on the bottom of your browser's bar. Proceed to sign on to Internet Banking only if the site shows you the Citibank certificate.

Citibank.com