Authorise online transactions seamlessly and securely via the Citi Mobile® App and Citibank Online.
Sign On
Enhanced Security through the Citi Mobile® App
How does it work?
-
Authorise your Citi Debit/Credit Card online transactions
-
Authentication on Citibank Online
Authorise your Citi Credit/Debit card online transactions via the Citi Mobile® App
How do I enrol for Enhanced Security on the Citi Mobile® App
If you are not a registered user, please download the Citi Mobile® App, if you have not done so.
Log in to the App and you will be prompted to register for Citi Mobile® App with enhanced security.
Alternative Authentication Methods
| Enhanced Security through the Citi Mobile® App | Online Security Device (OSD) | SMS | |
|---|---|---|---|
| Access to Citibank Digital | ✓ | ✓ | ✓ |
| High Risk Transaction | ✓ | ✓ |
Please ensure your mobile number is updated if you are authentiating via SMS OTP
Authenticating via OSD
- One-Time PIN (OTP)
- Transaction Signing
When required to enter an OTP, a single-use random set of numbers will be generated by the OSD as an added level of authentication to access Citibank Online and Citi Mobile® App services. Alternatively, you may also request for the OTP to be sent to your mobile number* via SMS.*In order for you to receive the OTP successfully, it is important to update the bank with your latest mobile number.
Using your OSD to generate OTP
Step 1: Login to Citi Mobile® App or Citibank Online.
Step 2: Press and hold the 
button (right bottom button on the OSD) to generate an OTP when prompted
Transaction Signing uses transaction-specific information to generate a secure TAC. It is required when performing certain online transactions such as:
- Adding of Payee for Transfer & Payment
- High Value Transfer & Payment
- Telegraphic Transfer
- Change of E-mail Address
Using your OSD to generate TAC
Step 1: Press and hold the 
(left bottom button on the OSD) to begin
Step 2: Enter the transaction-specific information (Challenge Code) as instructed on the Citi Mobile® App or Citibank Online transaction screen.
Step 3: Press and hold the button again to obtain a TAC
Disclaimer:
Kindly note that your Citibank Online access may be disrupted if you do not use your OSD for a prolonged period. If you experience problems using your OSD, kindly reach out to your Relationship Managers, or contact CitiPhone.
FAQs
- Enhanced Security with the Citi Mobile® App
- Online Security Device (OSD)
- One-Time PIN
- Transaction Signing - Transaction Authorisation Code (TAC)
We have updated the Citi Mobile® App with enhanced security capabilities to provide you with a more convenient and seamless mobile banking experience. This will enable you to proceed with your transactions seamlessly and securely on this device without having to enter the Unlock Code or SMS OTP. Please note that you may deregister the enhanced security capabilities on your Citi Mobile® App at any time via ‘Enhanced Security Capabilities Deregistration’ (under ‘My Profile’) in Citibank Online.
When you log in (using biometrics authentication or UserID and Password) to your Citi Mobile® App with the enhanced security capabilities, we will be able to recognise and authenticate you seamlessly. You will no longer be required to enter an Unlock Code or SMS OTP for your transactions on Citi Mobile® App after such registration for enhanced security capabilities, unless we require additional verification. This means lesser steps, lesser waiting time and faster processing for your banking transactions.
Yes, the registration for enhanced security capabilities on your Citi Mobile® App needs to be performed separately for your biometric authentication and password. The specific prompts for registration (biometric or password) would be shown once you login to your Citi Mobile® App using your fingerprint or face profile or password. That is, if you login using your password, the Citi Mobile® App would prompt for registering the enhanced security capabilities using password authentication. If you enable biometric authentication on your Citi Mobile® App, then you would also be registered for the enhanced security capabilities using biometric authentication.
Yes. We use advanced security capabilities to perform the necessary authentication that complies with the industry requirements.
Yes, you will still be able to access the Citi Mobile® App and you will continue to receive SMS OTPs to authenticate your transactions on the app. However, you will not be able to perform high-risk transactions (adhoc Payment and Transfer, Personal Information update, high value funds transfer, etc.) unless you register for enhanced security capabilities on your Citi Mobile® App.
You will still be able to register and benefit from the enhanced security capabilities. However, to ensure a more seamless customer experience, you may enrol for biometric authentication and enjoy the benefits of enhanced security capabilities on your Citi Mobile® App.
If you are a registered user of Citi Mobile® App with enhanced security and you wish to access your account details or perform transactions on Citibank Online, you will be prompted to authenticate your transaction securely by scanning the QR code on screen via the Citi Mobile® App and performing Biometric or Password authentication. You will no longer be required to key in your Transaction Authorisation Code or SMS One-Time PIN (“OTP”), unless Citi requires additional verification.
After registration of your Citi Mobile® App with enhanced security capabilities, you should receive a notification on your registered email address and mobile number.
You can de-register from the enhanced security capabilities via Citibank Online. This may be done through the “Enhanced Security Capabilities Deregistration” feature under Services > My Profile.
Yes, you will still be able to register for the enhanced security capabilities on your Citi Mobile® App. Just log out from your current session and log in again to see the registration prompt.
Please try to restart your device or check your airplane mode setting to ensure it is not activated. If the issue persists, please call CitiPhone Hotline for further assistance.
Regardless of your location, you will be able to register for enhanced security capabilities on your Citi Mobile® App if you are able to receive the SMS OTPs. Make sure to update your mobile number before travelling overseas and enable international roaming services on your Singapore mobile number. If you are using a different SIM card while travelling overseas, you might not be able to register for enhanced security capabilities.
We only allow registration for enhanced security capabilities on your Citi Mobile® App on a single device. You need to register for enhanced security capabilities on your new device again. Upon such successful registration, your previous device will be deregistered for enhanced security capabilities.
Yes. Since you re-installed the app, you will need to register for the enhanced security capabilities again.
For your security, you need to register for the enhanced security capabilities again as your password was changed.
Upon your login to Citi Mobile® App, you will be prompted to register for the enhanced security capabilities.
No, the new OSD has already been pre-registered for you.
To display the OTP or TAC, you must press and hold the respective OTP button or TAC button.
If you do not use your OSD for a prolonged period, access to Citibank Online using your OSD may be disrupted.
If nothing is displayed on the OSD screen, please use reach out to your Relationship Managers or contact CitiPhone.
No. The OSD cannot be shared between different Citibank Online customers. Each customer will receive one OSD, which will be associated with only one user (together with their Citibank Debit/ATM Card Number and PIN).
You should inform us by contacting our 24-Hour CitiPhone Banking to deactivate your lost or stolen OSD immediately.
The OSD is battery-powered with a lifespan between three to five years, depending on the frequency of the usage.
Keep your OSD in a dry and safe place at normal room temperature. Please also do not leave your OSD near objects that emit strong magnetic fields (e.g. mobile phone).
No, you will have to authenticate using the OTP function on the OSD.
OTP generated from the OSD synchronizes with our servers each time you login. OSDs not utilized for long periods of time will be made to go out of sync with our servers. If you encounter errors while login in with a correct OTP generated from your OSD, please contact your Relationship Manager or call our 24-Hour CitiPhone Banking to re-synchronize your OSD.
To protect your information, your Citibank Online access will be disabled if you make too many incorrect entries for OTP.
Yes, the OTP via SMS can be sent to both a Singapore and overseas mobile number. Ensure that you have updated the bank with your latest mobile number.
The OTP via SMS will not be forwarded to your new mobile number. Please update your new mobile number with the bank.
Upon successful update of your mobile number, please allow 3-5 working days for your number to be effective and ready to receive OTP.
TAC is required when performing certain online transactions, such as:
- Adding of Payee for Transfer & Payment
- High Value Transfer & Payment
- Telegraphic Transfer
- Change of E-mail Address
No, TAC can only be retrieved using a OSD with Transaction Signing capability.
To clear the last number you have entered in your OSD, you can press the right bottom button on the OSD button (right bottom button on the OSD). To clear the entire entry, you must press and hold the hold the button.
Please ensure the TAC you have entered matches the TAC displayed on your OSD.
If the TAC matches the security code on your OSD, the transaction-specific information (Challenge Code) entered previously may be incorrect.
Please follow the on-screen instructions and repeat the process to generate a TAC. If the TAC is still not accepted, please call our 24-Hour CitiPhone Banking for assistance.
To protect your information, your Citibank Online access will be disabled if you make too many incorrect entries for TAC.
Important Notes
All payments and transfers are subject to the Citibank Online User Agreement. Some or all of the services (including payments and transfers) that may be accessed through Citi Mobile or Citibank Online may not be available during our scheduled maintenance times. In the event of such unavailability, you may call our CitiPhone Banking or visit a Citibank branch to conduct your banking transactions. Citibank exercises no control and assumes no responsibility for any delay, misconnection, variation in response times and connectivity of any Internet Service Provider (whether local or overseas) through which access to Citi Mobile and/or Citibank Online is effected. Citibank full disclaimers, terms and conditions apply to individual products and banking services.
Additional Information:
^“3DS” refers to the 3-Domain Secure protocol which is an added layer of security for online credit and debit card transactions. “3DS merchant” refers to a merchant that has adopted/enabled 3DS. When a cardmember transacts with a 3DS merchant, he/she will be prompted to authorise the transaction before the transaction is completed.
*If you are a registered user for Citi Mobile® App with enhanced security capabilities and have enabled push notifications on the Citi Mobile® App, we will progressively avail this new feature to you.
The information provided on this website does not constitute the marketing or offering of any products or services to individuals resident in the European Union, European Economic Area, Switzerland, Guernsey, Jersey, Monaco, San Marino, The Vatican, The Isle of Man, the UK, Brazil, New Zealand, Jamaica, Ecuador or Sri Lanka. The content on this website is not, and should not be construed as, an offer, invitation or solicitation to buy or sell any of the products and services mentioned herein to such individuals.
Download the Citi Mobile® App now
Download the Citi Mobile® App
Citibank Singapore Ltd Co.Reg. No. 200309485K
Copyright © 2024 Citigroup Inc.