How can you protect yourself?

Read the basic security rules, make sure to protect your data and money when using online banking and don't be fooled.

Select banking type

  • Basic principles of secure online banking

    • Use anti-virus software and a firewall

      Use the latest versions of anti-virus software and firewall on all devices used to access online banking, and update your operating system and web browser on a regular basis.

    • Do not disclose confidential information

      Do not share your card number, login and access passwords with anyone and do not save them in files or on a piece of paper. If you need to save such information, do it in an encrypted form that prevents other people from reading it.

    • Do not store the PIN and card together

      Do not store the PIN, e-PIN, CitiPhone PIN and card numbers in one place and do not share your data such as the expiry date and the last 3 digits of the number given on the reverse side of the card with anyone.

    • Verify the correctness of the transaction with SMS

      If you use the SMS service to approve transactions, always verify whether the last digits of the recipients’ account number and the transaction amount are the same as the last digits of the account number and the amount included in the activation SMS.

    • Set a strong access password

      Make sure that your password and codes are difficult to guess and change them on a regular basis. Do not use the same password for different online platforms.

    • Contact the bank if you suspect your login data have been compromised

      If you suspect or discover that your login data have been lost or intercepted, please contact the Bank immediately via CitiPhone (+48) 22 692 2484 to block your account.

    • Beware of fake emails

      Do not respond to emails which ask you to provide your personal data or access codes.

    • Secure your PIN

      Before you use your PIN, e-PIN or CitiPhone PIN, make sure it is not going to be disclosed to anyone who could be looking over your shoulder or overhear it.

    • Do not click suspicious links

      Do not open any suspicious links or attachments in received email, SMS and MMS messages.

    • Report your device missing

      If you lose your device used to access online banking, contact the Bank immediately via CitiPhone at (+48) 22 692 2484.

  • Before you log in to the transaction platform

    • Check your anti-virus software

      Check if your anti-virus software and firewall are active and valid. Check the rating of your anti-virus software in independent tests and make a conscious decision which one to choose.

    • Report suspicious activities

      If you see atypical or suspicious activities, immediately report them to the Bank.

    • Do not use an unknown Internet connection

      Do not use electronic banking via unknown or insufficiently secured connections (e.g. public WiFi). It is better to use mobile data on your phone provided by the telecom operator than a third-party WiFi. You can also use your smartphone as an Internet access point for your computer.

    • Avoid using unknown devices.

      Logging in on an unknown computer, in the office, when travelling or in a car showroom to make a transfer is a bad idea. Your password could be intercepted.

    • Check whether the certificate description of the website is the same as the description below if you have doubts about its credibility:

      - issued for www.online.citibank.pl
      - issued by DigiCert EV RSA CA G2
      - valid from 01.10.2024 until 01.11.2025
      - owner: Citigroup Inc.
      - digital fingerprints (SHA-256):
      Certificate: 6ea97874c4dc9887c774db12f0800d989b90445e5e28b7dd78756512a2293ffa
      Public key: c150c7ff0ba17c21015b1ac4cdd482e890d845cde11552f1f6dedbc438833d31

      If the certificate description includes different data, please contact the Citibank Online customer service team (technical support) at the phone number: (+48 22) 692 24 84.

  • Security when logging in to the transaction platform

    • When logging in, enter your username and password only

      When logging in, remember to enter only your Username and Password – if you are prompted to enter any other data on the login screen, stop the process and report this incident by calling (+48 22) 692 2484.

    • Do not use the banking platform in public places

      Do not use the banking platform in public places (at an Internet café or library), where there could be crowds of people. There is a risk that someone might see your sensitive data and confidential information.

    • Protect your login data

      Make sure nobody can see your Username or Password when logging in.

    • Remember to log out

      Log out after you have finished your work. Never close the browser window without confirmation that you have been correctly logged out.

    • Change the access password

      Change your login password for the e-banking system on a regular basis. Your password is much more secure when changed periodically.

  • Security when executing transactions

    • Check the correctness of the account number

      Before confirming the transaction, always verify whether the account number to which you are making a transfer is consistent with the recipient’s number provided in the SMS message or in the push message if you have an active Citi Mobile Token service.

    • View the account history

      View the account and operations history on each payment card in terms of suspicious transactions. You can view your transactions on a regular basis if you turn on the Citi Alerts Premium service offered by the Bank.

    • Do not copy account numbers

      When using online banking, do not copy bank account numbers for transfers (“copy-paste”), but enter them manually and, next, check them very carefully.

    • Change your confidential data if they may have been compromised

      Immediately change your confidential data such as PIN code, Password to Citibank Online or Username if you suspect someone else knows them.

  • How to secure your computer

    • Update your anti-virus software

      Update your anti-virus software on a regular basis. This way you will significantly protect your computer from viruses and Trojans. If possible, set automatic update of the virus base and a regular scanning of the computer.

    • Update your computer operating system

      Remember to update the operating system of your computer, tablet and phone. This will help you avoid gaps in your system that can be exploited by hostile individuals or programs. Moreover, update your web browsers and mobile applications for online banking.

    • Use only legal software

      Make sure to only use software from legal and trusted sources. If you use mobile applications, make sure they come from the official application stores (App Store, Google Play).

    • Have a firewall

      Make sure your computer has a firewall. Above all, firewall prevents unwanted Internet connections – both outgoing and incoming. It is also a useful tool that reinforces the protection of your privacy from persons who may steal your confidential data.

  • What to do when you lose your computer, phone or tablet.

    • Contact the bank or change your password and username

      If you lose your device on which you receive single-use activation codes / which you use for online banking / on which you have activated the Citi Mobile Token service / which stores your authentication data for the banking platform, please contact the Bank immediately at the phone number (+48 22) 692 2484 in order to block your account or change the Username and Password for logging in to online banking.

      If you are unable to contact the Bank, make sure to change the Username and Password via Citibank Online (after logging in go to the section Products and Services -> My Citibank Online, and then Change Username or Change Password). Make sure to change this type of data only on a trusted and well secured device. The Citi Mobile Token service assigned to the stolen phone can be deactivated after logging in to Citibank Online, in the tab Services and Profile – My Profile.

More about safety