Online Threat Alerts (OTA) - Alerting you to scams and frauds.

the Citibank "Important Account Validation Required" Phishing Scam
the Citibank Important Account Validation Required Phishing Scam

The email message below with the subject: "Important Account Validation Required," which claims the recipients are required to validate their Citibank online accounts, is a fake. This spoofed email message was NOT sent by Citibank and the link in it should not be clicked on. The link goes to a phishing or fake Citibank website created by scammers to steal their victims' personal information, credit card information, username and password. Once on the fake website, the potential victims will be asked to submit their personal information, credit card information, username and password. If they follow the instructions, their information will be sent to the scammers behind the phishing scam, who will use the same information to rip them off.

The Citibank "Important Account Validation Required" Phishing Email

From: Citibank N.A citibankalerts@whitneykt.com
Date: November 5, 2016 at 6:50:31 AM CDT
To: "notifications@online.citi.com" notifications@online.citi.com
Subject: Account Validation Required

Account Validation: Important Account Validation Required

You are receiving this email because we are validating all active Citibank online account users which applies to one or more products or services you use.

Follow the service link below to get your account Validated.

Validate Account

If you fail to update your account within 48 hours, Citibank Online will be restricting its service for your account.

Thank you.

Citibank Service Center
Attn: E-mail/Internet Services
100 Citibank Drive
Building 3, 1st Floor
San Antonio, TX 78245

© 2016 Citigroup Inc. Citibank, N.A., Member FDIC. Citibank and Citibank

Although the email message appeared as if it came from a Citibank's email address, it was not. The email address was spoofed, meaning it was not sent From a Citibank's email address, but from some other email address. Citibank customers who have already followed the instructions in the phishing email message, should try changing their Citibank passwords and contact Citibank immediately.

Citibank customers should always go to directly www.citibank.com to sign into their accounts instead of clicking on a link; once signed in, they will be able to view important notifications and take the necessary actions.

waiting