Although there's no foolproof formula for spotting a spoof e-mail or web site, these signs should arouse your suspicion. Spoof web sites can be more difficult to detect, because even the address bar and padlock that appear in your browser window can be faked. To make sure you're on our site, type in www.citibank.com or www.citibankonline.com and see if you get to the same place. Click here for a full list of Citi URLs. Learn more about Citibank’s e-mail and web practices. See examples of previously reported spoof e-mails.