Citibank fraud department calls: how to tell if it's fake

Quick answer

A call, text or email saying it's Citibank's fraud department is fake if you didn't expect it and it asks for codes, card numbers or a money transfer. Hang up and call the number on the back of your card. A bank won't ask you to move money.

All scam alerts
Comes by
Phone call, Text, Email
Pretends to be
Citibank
Last updated

How it works

Scammers say they're from your bank's fraud team. They tell you there's suspicious activity on your account and that you need to act now.

The FTC says this often ends with a caller walking you through moving money into a new account in your name that the scammer controls. Others just ask for your card number, online banking login or the passcode your bank texts you.

Caller ID is no proof: it can be faked to show a real bank name or number. The FTC's advice is that if you're worried about your account, you should call your real bank using the number on your statement or card, not the number the caller gave you.

Note that the bank is a victim here: scammers copy Citibank's name, they don't work for it.

Red flags

  • An unexpected call or text about "fraud" on your account
  • A request for a passcode or code sent to your phone
  • Being asked to move money to a "safe" account
  • Pressure to stay on the line and act immediately
  • Caller ID that shows the bank's name: it can be faked

Example message

Scam example Don't reply, call back or tap anything in a message like this.
Unknown number
This is the Citibank fraud department. We've seen a suspicious charge of $[amount] on your card. To stop it, call [phone number] now or reply YES to confirm it was you.

What to do

  1. 1

    Hang up and don't call back that number

    Look at the back of your card or your statement and call the number printed there.

  2. 2

    Never read out a code or move money

    Your bank will never contact you to tell you to transfer money or to ask for personal information or passcodes.

  3. 3

    If you gave details, tell your bank right away

    Call the number on your card. Ask them to freeze the card, check recent activity and reset your online banking login.

  4. 4

    If you sent money, say so on the first call

    Tell the bank it was fraud and ask what they can stop or recall. Speed matters.

  5. 5

    Change your passwords

    Change your online banking password and any account that shares it. Turn on two-step verification.

Report it

Serus

Check if your details are exposed with Serus

Scammers find your number and address on data brokers and people-search sites. Serus removes them.

Run a free scan

Why you got it

A caller who already knows your name, the city you live in or the bank you use sounds far more real. That information is easy to buy from data brokers and turns up in breaches.

Servus finds where your phone number, address and email are listed on data brokers and people-search sites and removes them, and alerts you when your details show up in a breach. That gives fewer scammers something to work with. Our guide on what to do after a data breach covers the next steps if your details already leaked.

Common Citibank scams

Frequently asked

Is Citibank a scam?

No. Citibank is a real bank. Scammers pretend to be its fraud department to get your money or codes.

The caller ID said Citibank. Could it be fake?

Yes. Caller ID can be faked. Hang up and call the number on the back of your card.

How do I find Citibank's real fraud number?

Use the number printed on your card or statement, or the one on the bank's own website. Don't search for it from a link in a message.

What if I already sent money?

Call your bank at once using the number on your card, say it was fraud and report it at reportfraud.ftc.gov.

Sources

Something wrong or out of date? Tell us and we'll re-check it.

Related scams

All scam alerts

Cookie preferences

Choose which categories we may use. Full details for every cookie are in our Cookie Policy.

Strictly necessary

Authentication, session management, security and fraud prevention, and saving your consent choice. Always active. The site cannot function without them.

Functional

Remember preferences such as language and settings that improve your experience.

Analytics

Help us understand how the site is used, like pages visited, interactions, and performance, so we can improve it.

Marketing & advertising

Measure our marketing and deliver more relevant ads through partners such as Google, Meta, TikTok, X, and Reddit. Used only with your consent.

Your choice is saved for 12 months and applies across serus.ai, including the app. You can change it anytime from the cookie widget or the "Cookie settings" link in the footer. Withdrawing consent does not affect processing that happened before withdrawal.