Online Threat Alerts (OTA) - Alerting you to scams and frauds.

Citibank "Important Information - Please Validate Your Account Information" Phishing Scam
Citibank Important Information - Please Validate Your Account Information Phishing Scam

The email message below with the subject: "Important Information: Please Validate Your Account Information," which claims the recipients are required to validate their account information to enable our new Secured Socket Layer (SSL), is a fake. This spoofed email message was NOT sent by Citibank and the link in it should not be clicked on. The link goes to a phishing or fake Citibank website created by scammers to steal their victims' personal information, credit card information, username and password. Once on the fake website, the victims will be asked to submit their personal information, credit card information, username and password. If they follow the instructions, their information will be sent to the scammers behind the phishing scam, who will use the same information to rip them off.

The Citibank Phishing Email

From: Citi© Bank Online vzez8dxl@verizon.net
Subject: Important Information: Please Validate Your Account Information
Date: June 28, 2016 at 11:46:12 AM MDT

EMAIL SECURITY ZONE.

Dear Customer:

Thank you for using Citi Bank Online. You are required to validate your account information to enable our new Secured Socket Layer (SSL). Please validate your account Now. Click the link below to start your validation process.

To Validate Your Account Click Here

Thank you for being a valued customer. You can view this Policy Update by logging in to your account.Once you are logged in, look at the Notifications section on the top right side of the page for the latest Policy updates.

Sincerely,

Account Online Management.
2016 Citi© Bank Online N.A. Member FDIC.

Although the email message appeared as if it came from a Citibank's email address, it was not. The email address was spoofed, meaning it was not sent From a Citibank's email address, but from some other email address. Citibank customers who have already followed the instructions in the phishing email message, should try changing their Citibank passwords and contact Citibank immediately.

Citibank customers should always go to directly www.citibank.com to sign into their accounts instead of clicking on a link; once signed in, they will be able to view important notifications.

waiting