Secure Socket Layers
To ensure secure transactions for our cardmembers, Citi
® uses Secure Sockets Layer (SSL).
SSL applies encryption between two communicating applications, such as your PC and our
corporate Internet server. When your data is transmitted over the Internet, it is
encrypted or “scrambled” at the sending end, then decrypted or “unscrambled” at the
receiving end. Check your browser to be sure it has the added security of 128-bit
encryption.
Secure Firewalls
We protect our secure computer servers with numerous firewalls and specialized
hardware and software that control all external communications with our computer
network. We constantly monitor these firewalls to prevent security breaches.
Check Emails for Security
The best way to verify a Citi email is to look for the Email Security Zone header at
the top of the email. Every Citi Cards email includes your first name, last name, and
the last 4 digits of your card number. Please note that Citi will never ask you for your
PIN number, and will never include your full account number in an email—only the
last four digits. If you receive an email claiming to be from Citi that includes your full
account number, do not respond to it. Instead, forward it to
spoof@citicorp.com.
Phishing Schemes
Phishing is a kind of credit and debit fraud. By pretending to email from a bank or
similar site, scammers “fish” for account numbers, passwords, Social Security
Numbers, etc. They trick consumers into divulging sensitive information so that
unlawful charges can be made on the consumers account. A number of fraudulent
email messages that claim to be from Citi Cards, Citbank, or Citigroup have been
forwarded to us by our cardmembers. These schemes change frequently and often
have links or attachments with links. Users who click on the links are taken to look-
alike or “spoofed” sites where they are asked to enter personal data.
Report Email Fraud
If you suspect that an email appearing to be from Citi is fraudulent, forward it
immediately to
spoof@citicorp.com. An internet Security Specialist will investigate. If you have replied to an email with personal information, and now think the email was
fraudulent, call us at the toll-free number on the back of your Phillips 66-Conoco-76
card. We will issue you a replacement immediately.