Online Security

helping to protect

you from fraud

How to Protect Yourself Online

To help protect your accounts on an ongoing basis, there are a few measures we recommend you take.

How to Stay Current

Man seated at computer

Online User ID and Password. Your sign on credentials are exclusively for accessing your accounts online--don't share them with anyone. Change your Password periodically and remember: No one from Citibank will ever need to ask you for your PIN and Password when servicing your account. To change it, sign on and go to the Account Profile menu and select Edit Account Preferences.

Create a hard-to-guess password and make it unique--it should not be the same as the one you use to access your e-mail account.

Keep your browser and operating system up to date. New versions and updates often include important security enhancements and can be downloaded--usually for free--on the vendor's web site. Some vendor sites even scan your computer (with your permission) to see if the software on your computer needs to be upgraded.

Update your anti-virus software regularly. Anti-virus software needs frequent updates to guard against new viruses, so be sure to download updates as soon as they're available. Some anti-virus software will even check for virus updates whenever you connect to the Internet.

Use a personal firewall. Many internet service providers (ISPs) offer this feature, which protects your home computer against unauthorized access by hackers.

Password Tips

Password tips checkmark

Do use a combination of at least 6 characters and 2 numbers.

Good Passwords:


Do not use single words that can be found in any dictionary.

Bad Password:


Do not use your name, spouse's name, pet's name, birthday, favorite food, or any personal information that others can easily obtain.

Bad Passwords:

Fido (pet's name)

Do not use a password that contains part of your Online User ID or e-mail address.

Bad Passwords:

jimmy (if your ID is jimmyinjersey)

Stay Alert

Person typing

No one is as familiar with your accounts as you are. That's why regularly monitoring your account activity is one of the best ways to safeguard yourself against fraud.

Set up banking alerts. Account alerts delivered to your cell phone or e-mail address--about your balance or bill payments, for example--can help you flag suspicious activity.

Set up a login cookie. Many web sites including offer to "remember" your User ID. This way, when you return to the site to sign on, your User ID will be visible in the Sign on box. A spoof web site will not be able to display your User ID. Note: Never set up a login cookie on a public or shared computer.

Look for special site features. For example e-mails you receive from Sears card have an "E-mail Security Zone" with your first and last name, and the last 4 digits of your credit card. Be suspicious of any e-mail claiming to be from us that does not include it.

Check your credit report regularly. See if there are any activities you did not initiate--like someone applying for credit in your name--so you can act before any damage is done. For a copy of your credit report, contact:

  • Equifax: 1-800-685-1111
  • Experian: 1-800-397-3742
  • TransUnion: 1-800-916-8800

Security Tip
At the top of your home page, we display the date and time of your Last Visit. If you didn't sign on then, it could mean that someone else has accessed your account.

How We Protect Our Website


Here are key ways that Citi helps to safeguard your information when you bank online:

128-Bit Encryption
When you access your accounts and perform transactions on Account Online, your information is protected by 128-bit encryption.

Additional Authentication
When you perform sensitive online banking transactions, such as money transfers, Citi will sometimes ask you additional questions to verify your identity.

Date/Time Stamp
Every time you sign on to Account Online, we display the date and time of your last visit. If you didn't sign on then, you'll know if there has been unauthorized account access.

Extended Validation (EV) SSL Certificate
The green address bar on Citi sites is a security feature supported by newer browsers that allows you to visually validate that the site you are transacting with — such as — has undergone an extensive outside security audit.

Secure Firewalls
The computer servers that run Citi sites are protected by numerous firewalls to help prevent unauthorized access to our network, and Citi monitors these firewalls to prevent security breaches.

Session Timeouts
If you're signed on and not using Account Online for several minutes, your session will "time out." To resume your banking activity, you'll need to re-enter your User ID and Password.