Skip to main content

We Protect Your Information

Bank with confidence

Citi® uses advanced technology to help protect you from fraud whether you're banking online or using your Citi Mobile® App.

Your security on browser

When you bank online with Citi, current security technologies are used to help keep your information safe:


128-Bit SSL Encryption

When you access your accounts and perform transactions on Citi Online, your information is protected by 128-bit SSL encryption. Encryption is technology that secures information transmitted over the internet by scrambling it so that it's unreadable without a secret key or password to "decrypt" it. It helps ensure that hackers or other third parties can't intercept data while it's en route.


Extended Validation (EV) SSL Certificate

The green address bar on the Citi webpage is a security feature supported by newer browsers that allows you to visually validate that the site you are transacting with – such as Citibank.com – has undergone an extensive outside security audit.


Additional Authentication

When you perform sensitive or high risk online banking transactions, such as money transfers, or if our controls determine that your login attempt may be unauthorized, Citi will ask you additional questions or send you a one-time-use passcode to verify your identity.


Date and Time Stamp

Every time you sign-in to Citi Online, we display the date and time of your last visit and the device used to sign-in. If you didn't sign-in then, you'll know there has been unauthorized account access.


Session Timeouts

If you're signed in and not using Citi Online for several minutes, your session will "time out." To resume your banking activity, you'll need to re-enter your User ID and Password.


Automatic Notifications

Citi will automatically send an email confirmation whenever your User ID or Password is changed. As an important account monitoring tool, these notifications allow a timely response for customers who did not make a change, and provide peace of mind for those who did initiate the change themselves.


Fraud Protection

If Citi determines that your login credentials have been compromised, your online and mobile access is automatically blocked, reducing the likelihood of an unauthorized person accessing your information. Citi then sends you a notification with a prompt to reset your password to safely regain access.

Banking from your mobile device

Citi uses a variety of features to protect your information while you are banking with your mobile device:


128-Bit SSL Encryption

When you use the Citi Mobile® App, your accounts are protected by 128-bit SSL encryption, just as they are when you bank online. Encryption is technology that secures information transmitted over the internet by scrambling it so that it's unreadable without a secret key or password to "decrypt" it. It helps ensure that hackers or other third parties can't intercept data while it's en route.


User ID and Password

You sign-in to the Citi Mobile® App with the same User ID and Password you use to access your accounts on Citi Online.


Account Information

The Citi Mobile® App doesn't store personal account information on mobile devices, so your accounts are not exposed if your phone is lost or stolen.


Additional Authentication

When you perform sensitive or high risk online banking transactions, such as money transfers, or if our controls determine that your login attempt may be unauthorized, Citi will ask you additional questions or send you a one-time-use passcode to verify your identity.


Date and Time Stamp

Every time you sign-in to your Citi Mobile® App, we display the date and time of your last visit and the device used to sign-in. If you didn't sign-in then, you'll know there has been unauthorized account access.


Session Timeouts

If you're signed in and not using the Citi Mobile® App for several minutes, your session will "time out." To resume your banking activity, you'll need to log back into the App.


Biometric Login

You have the flexibility to sign-in to your Citi Mobile® App using your fingerprint for fast, convenient access. Customers with devices that support facial recognition also have the option of signing in using this feature. Whichever method you choose – password, fingerprint, or facial recognition – your account information is still subject to the 128-bit encryption.


Fraud Protection

If Citi determines that your login credentials have been compromised, your online and mobile access is automatically blocked, reducing the likelihood of an unauthorized person accessing your information. Citi then sends you a notification with a prompt to reset your password to safely regain access.

// Branding Header Dropdown fix