I. Unauthorized use of Accounts
Will an unauthorized person be able to access
my accounts with Citibank Online?
Only the Account Holder, using a user ID and password will
be able to access the account. It's important to remember
that your ATM Card is valuable and should be kept in safe
places. It is highly advisable not to hand your card to anyone
and never accept advice from strangers while you are using
it. For your own protection, kindly keep your PIN confidential
and do not share with anyone.
What are Cookies? What is Citibank's policy regarding the
A Cookie is a small piece of information that an Internet
site sends to your browser to hold onto until it is time to
read it. Computers other than those on the Internet can also
send Cookies. Cookies can contain expiration dates and specific
instructions on which web sites can read them.
Citibank uses Cookie technology as a means to store only
the user profiles you create to connect to Citibank Online.
This information is stored on your computer's hard drive and
is encrypted to prevent an unauthorized party from accessing
What is encryption?
Encryption technology helps provide secure transmission of
information along the Internet by encoding the transmitted
data using a mathematical formula to scramble the data. Without
a corresponding "decoder," the transmission would
look like jumbled text and would be unusable.
Encryption technology can be used for a host of applications,
including electronic commerce (sending credit card numbers
for orders or transmitting account information), e-mail messages
and sensitive documents.
Basic encryption involves the transmission of data from one
party to another. The sender encodes the data by scrambling
it, and then sends it on. The receiver must decode the data
with the correct "decoder" in order to read and
How secure is encryption?
The effectiveness (or level of security) for encryption is
measured in terms of how long the key is -- the longer the
key, the longer it would take for someone without the correct
"decoder" to break the code. This is measured in
bits (e.g., 40-bit encryption, the level of encryption used
with many browsers, versus 128-bit encryption, the level of
encryption required to use Citibank Online)..
What level of encryption protection does Citibank Online
All financial transactions are secured by 128-bit encryption,
which is currently the strongest available for commercial
use. In case your browser supports a lower level of encryption
we suggest you upgrade your browser.
How can I be sure that my information and account data
are securely sent through Citibank Online?
Citibank currently offers 5 levels of security to help safeguard
your financial information:
Strong Encryption (128-bit)
All data sent to and from Citibank is "scrambled"
and "reassembled" between Citibank and your personal
computer to protect your personal and financial information.
128-bit encryption, the highest level of encryption commercially
available, means there are 128 possible combinations of "keys"
but only one that will "unlock" the information.
User ID & Password
There is a new enhanced Secure Sign-on process for Citibank
Online that does not require customers to continually re-enter
the ATM/Debit or Credit card number and the 4-digit cash withdrawal
PIN. It has changed to a user name and password, both are
chosen by the customer.
In addition to a user name and password, the customer will
be requested to choose 4 Challenge questions and their answers
during the sign-on process, then randomly only 1 question
will appear during log-in (after entering username & password)
as a second level of authentication.
In addition, the password can only be entered using a virtual
keyboard, thereby reducing the risk of fraud due to hacking.
Automatic Time Out
When there is no activity for 5 minutes, Citibank will terminate
your secure Citibank Online session to help protect against