|
| Home>Internet Security |
|
|
 |
| The rapid expansion of Internet has revolutionized the way we work and deal with our customers who can now do their banking online at their own convenience, 24 hours a day. |
|
| While we do our utmost to ensure security and confidentiality in our online banking systems and technology, there are steps you need to take as well to ensure your security when using the Internet and when conducting banking online. |
|
| At Citibank, information security and protection of our customers are of paramount importance. Please take the time to find out what you can do to protect yourself against these risks and understand your roles and obligations with respect to online banking. |
|
| Choose any of the links below to find out more about how you can protect yourself, your rights and obligations, Citibank security practices, reporting and handling of security incidents and the latest virus alerts. |
|
| Internet Security FAQs |
|
| Terms and Conditions |
|
     |
| Citibank Security Practices |
|
| Protecting our customers and providing a secure online banking experience is top priority at Citibank. We have implemented the best available security solutions and technology to ensure that all of our customers' online transactions are safe and secure. |
|
- 128 Bit Encryption
All data sent to and from Citibank is "scrambled" and "reassembled" between Citibank and your personal computer using 128-bit encryption, the highest level of encryption commercially available.
- Secured login using Username, Password, and Challenge Questions
Only customers with valid registered Username, Password, and Challenge Questions will be able to access Citibank Online. Challenge Questions and Responses provide an added level of security, thereby further minimizing risks. Now, customers log on to Citibank Online by entering Username, Password, and answering any one of five selected Challenge Questions. Under no circumstance does Citibank store customer's login details locally on their computers.
- Online Authorization Code
It's a 6-digit code issued for every new payee Citibank Online customer adds to make transfers. This payee can be another customer of Citibank Pakistan, or a Citibank customer abroad. You can activate payee by receiving OAC via sms on your mobile and/or email, or you can call CitiPhone at 111 222 222 to get payee activated. OAC guarantees that every new payee that you wish to make transfer to is personally authorized by you through 6-digit code given to you for that payee.
- Ethical Hacking of new functionality / service
Any new functionality / Service that is introduced on Citibank Online undergoes a hacking test, what this means is that we try and break into our own creation using latest tools and only when it passes the most stringent of tests, is a Service introduced for you.
- Automatic Time Out
When there is no activity for 5 minutes, Citibank Online will display a warning message, and upon no activity within one minute, customer's secured Citibank Online session will terminate to help protect against unauthorized access.
- Strict Protection of Customer Information
Citibank has strict standards of security and confidentiality to safeguard the confidentiality of customer information. Regular audits are conducted internally to uphold these standards.
|
|
| With the above steps taken, customers can be assured of the online security that Citibank offers and should not hesitate to use our 24x7, convenient online banking services to conduct their financial transactions. |
|
- When you login to online banking, ensure that no one is watching you while you key in your PIN or any other sensitive information.
- Always remember to immediately log out when you have finished your online banking session.
- Keep your ATM PIN confidential and keep it separate from your Card information. Your ATM PIN should be memorized and not recorded anywhere.
- Do not disclose your ATM PIN to anyone. Not even to Citibank employees.
- Do not keep your ATM PIN the same as the Telephone PIN used for accessing IVR.
- Do not change your ATM PIN to one based on your telephone number, birth date or other personal information.
- Never lend your card to anyone or accept advice from strangers while you are using it.
- Do not use a computer or a device that cannot be trusted for online banking, such as a public or Internet Cafe computer.
- Whenever you need to use the ATM PIN, please ensure that you do the following:
- Check if this is a Citibank site. The URL is www.citibank.com.pk.
- Verify the security of the site. This depends on the type of browser you use, Netscape 4.7 and IE 5.5 does this by showing a locked padlock. Microsoft Internet Explorer displays a lock on the status bar.
- Click on the unbroken lock. Input your ATM PIN only if the site shows you the Citibank certificate
- Protect yourself against computer viruses by having the latest virus checking software and firewalls installed on your computer, particularly if you are linked to the Internet via any broadband connection, digital subscriber lines or cable modems.
- Update your anti-virus and firewall products with security patches or newer versions on a regular basis.
- Clear your Browser's cache and history after each session so that your account information is removed, especially if you are using a shared computer.
- Use the latest recommended Microsoft Internet Explorer or Netscape Browser version, or one that supports 128-bit encryption. If you use Internet Explorer 5, you need to de-activate the "Auto Complete" function to prevent any user ID and PIN from being stored.
|
|
|
1. |
Launch your Internet Explorer 5 and click on "Tools" - "Internet Options" - "Content" |
|
|
2. |
Under "Personal Information", click on "AutoComplete". |
|
|
3. |
Uncheck "User names and passwords on forms" and click on "Clear Passwords". |
|
|
4. |
Click on "OK" to save the changes. |
|
|
- If you are using a Windows OS, ensure File and Print sharing is disabled while online, particularly if you are linked to the Internet via any broadband connection, digital subscriber lines or cable modems.
- Do not install software or run programs of an unknown origin.
- Scan any attachments you receive via email and immediately delete any suspicious emails with attachments.
- Check your accounts on a regular basis and contact Citibank immediately at our 24-hour CitiPhone Banking at 111-222-222 should you encounter any difficulties or irregularities.
|
|
| We want your online experience to be enjoyable and worry free. Shopping and banking online can be convenient and secure - if you take a few simple precautions. Many e-commerce websites utilize state-of-the-art encryption and other security procedures to safeguard you and your money. |
|
| Here are a few suggestions to help you have a secure online experience at home: |
|
- If you suspect a website is not what it purports to be, leave the site. Do not follow any of the instructions it may present you.
- Ask yourself if the information you are asked to provide makes sense for the activity you are engaged in. If a site or e-mail asks for information that doesn't feel right, do not respond.
- If you believe that someone is trying to commit fraud by pretending to be a Citigroup business, please contact us immediately.
- Be alert for scam e-mails. These may appear to come from a trusted business or friend, but actually are designed to trick you into downloading a virus or jumping to a fraudulent website and disclosing sensitive information.
- Don't reply to any e-mail that requests your personal information. Be very suspicious of any business or person who asks for your password, C.N.I.C. (Computerized National ID Card) number, or other highly sensitive information.
- Open e-mails only when you know the sender. Be especially careful about opening an e-mail with an attachment. Even a friend may accidentally send an e-mail with a virus.
- Be careful before you click on a link that is contained in an e-mail or other message. The link may not be trustworthy.
- Do not send sensitive personal or financial information unless it is encrypted on a secure website. Regular e-mails are not encrypted.
- Do business only with companies you know and trust.
- Be aware! Phony "look alike" websites are designed to trick consumers and collect their personal information. Make sure that websites on which you transact business post privacy and security statements and review them carefully.
- Verify the address of every website, known as the URL.
- Make sure that the URL you want appears in the "address" or "location" box on your browser window. Some websites may appear to be legitimate but actually are counterfeits. Take a few extra seconds and type the URL yourself.
- Look for the padlock symbol at the bottom right of a web page to ensure the site is running in secure mode BEFORE you input sensitive information.
- Use strong passwords or PINS for your Internet accounts. Choose passwords that are difficult for others to guess, and use a different password for each of your accounts. Never disclose your Password / ATM PIN to anyone. It is a good practice to change your Password / ATM PIN at regular intervals.
- Make sure your home computer has the most current anti-virus software. Anti-virus software needs frequent updates to guard against new viruses. Make sure you download the anti-virus updates as soon as you are notified that a download is available.
- Install a personal firewall to help prevent unauthorized access to your home computer , especially if you connect through a cable or DSL modem.
- Log off. Do not just close your browser. Follow the secure area exit instructions to ensure your protection.
- Monitor your transactions. Review your order confirmations, credit card, and bank statements as soon as you receive them to make sure that you are being charged only for transactions you made. Immediately report any irregularities.
|
|
| Print these tips and keep them handy so you can review them whenever you bank or engage in an online transaction. |
|
| If you experience anything that arouses your suspicions, please intimate CitiPhone Banking on 111-222-222. |
|
- Citibank is committed to offering our customers the highest level of support possible.
- If you suspect that there has been any un-authorized breach of your Account(s) online, or that an online transaction has taken place that you did not initiate, you should notify Citibank immediately by calling CitiPhone Banking at 111-222-222.
- Security incidents will be escalated to our technical support staff for evaluation. If any breach of security appears to have occurred, the bank will investigate it further.
- Citibank will provide you an interim update of our investigations and the status of your case. Final resolution of any incident, though, will depend on the nature and complexity of the incident, as well as the details surrounding the case.
- While we investigate, our officers may ask you to provide more details surrounding the incident to allow us to resolve your case as quickly and as efficiently as possible.
|
|
- You are responsible for keeping your password confidential and changing it immediately if you believe it has been compromised in any way.
- If you believe that your username, password and challenge answers have been compromised please contact CitiPhoneBanking at 111-222-222 on an immediate basis.
- You are responsible for reading and following the Bank's recommended security practices to ensure the safeguarding of your personal information and computer. See "How To Protect Yourself" in the Internet Security section of this Website.
- You are responsible for ensuring your computer is free from any electronic, mechanical, data failure or corruption, computer viruses and bugs.
- You are responsible for not leaving your computer unattended while you are still engaged in an online banking session or any security breach caused as the result of using a shared or "public" computer to do your online banking.
- You are responsible for abiding to the Bank's Terms and Conditions for online banking and obliged to read and agree to these prior to commencing online banking.
|
|
|
|
|
|
|
|
