Fake Citibank fraud prevention calls: how to tell and what to do
Quick answer
A call, text or email that says it's Citibank's fraud department and asks for a code, password or card details is a scam. Hang up, then call the number on the back of your card. Citi says it won't ask for confidential details by text or email.
- Comes by
- Phone call, Text, Email
- Pretends to be
- Citibank
- Last updated
How it works
Scammers pretend to be a bank's fraud team because the story is believable: someone is using your account, so you have to act now. The FTC warns that a call about fraud on your bank account could be a scammer.
The usual script:
- A scare. You get a call, text or email about a suspicious charge or a hacked account.
- A way to "fix" it. You're asked to confirm your identity with a one-time code, your card number, your online banking login, or to move your money to a "safe account".
- A rush. The caller keeps you on the line so you can't check anything.
Citi says it may contact you about a suspicious purchase, but will never ask for confidential information by text or email. Its UK security centre says it will not call you for card numbers, security codes or one-time passcodes, and to end an unexpected call that asks for them.
The bank is the one being impersonated here. The scammer is whoever is on the line.
Red flags
- An unexpected call, text or email about fraud on your account
- A request for a one-time passcode, PIN, password or full card number
- Being told to move your money to a "safe" account
- A caller who keeps you on the line and tells you not to hang up
- A link in a text or email that leads to a login page
- A caller ID that matches the bank: caller IDs can be faked
Example message
This is the Citibank fraud prevention team. We've seen suspicious activity on your card. To stop it, reply with the verification code we just sent you, or call [phone number] now.
What to do
- 1
Hang up and don't click
Don't give any code, password or card number. Don't use the number or link in the message.
- 2
Call the bank yourself
Use the number on the back of your card or on the bank's own website, and ask whether there is a real problem.
- 3
If you shared a code or login
Call the bank right away on that trusted number. Change your online banking password and turn on any extra sign-in protection.
- 4
If you moved money
Tell the bank immediately that it was fraud and ask them to try to stop or recall the payment.
- 5
Report it
Report the scam at reportfraud.ftc.gov, and tell the bank.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Scammers need a way to reach you and a few details that make the message believable: your name, your phone number, your email, sometimes your address or the bank you use. They buy those details from people-search sites and data brokers, or pick them up from data breaches.
Serus finds the data brokers that list you and removes the listings, and it alerts you when your email or other data turns up in a breach, so fewer scammers can build a convincing message about you.
More Citibank scams
Frequently asked
Will Citibank call me about fraud?
Citi says it may contact you by phone, text or email to confirm a suspicious purchase, but it will never ask for confidential details by text or email. Hang up and call the number on your card to be safe.
Is there a Citibank fraud prevention number I can trust?
Use the number printed on the back of your card or on Citi's own website, never one from a message or a search ad.
Why does the caller know my name?
Names, phone numbers and the banks you use can come from data brokers or past breaches.
I gave out a one-time code. What now?
Call your bank on a number you trust straight away and tell them. Then change your passwords.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
