3 Quick Questions and Answers

Q. Why is it important for non-cardholders and AOPCs to review cardholder transaction activity, and for cardholders to review monthly statements in a timely manner?

A. It's important to ensure that account activity is both accurate and valid. Transaction activity reports and monthly statements can give pertinent clues if the cardholder's account could have been compromised, misused or abused. It's critical to notify Citi as soon as you recognize fraudulent activity on an account. And to assist with the fraud claim, it's imperative to complete and return all requested documentation.

Q. How do I reset my password on the Citi Commercial Cards website?

A. From the login screen, click Forgot Password. Then choose from two options:

• Cardholder (preselected by default) – If you are the cardholder, choose this option. Enter your user ID and the last six digits of your card, then click Continue.
  OR
• Non Cardholder/Card Applicant – If you administer the card program on behalf of your company/organization, or if you've applied for a card and have yet to receive it, choose this option. Enter your user ID, ZIP code, and email address (from your user profile), then click Continue. You'll be presented with a random authentication question. Answer that question, then click Continue.

When you've completed one of the above, the Change Password screen will appear. Enter your new password, and you'll see a message that your password change was completed successfully. You can use your new password the next time you log into the system.

Q. How do I combat "phishing" emails and "vishing" phone calls?

A. "Phishing" is an act of email fraud in which someone pretends to be from an institution you trust (such as your credit card provider) to convince you to divulge personal and financial information about yourself. "Vishing" is phishing done by phone. While these kinds of solicitations may sound reasonable at face value, be assured that Citi will never ask for your password or to update personal and/or business information via an unsolicited email or phone call. If you receive such a request, it is almost certainly fraudulent. Please forward any suspicious emails to submitphishing@citi.com, and/or notify Citi of vishing attempts. (We suggest that you also forward the email to the Federal Trade Commission at spam@uce.gov.) Don't change or retype the subject line when forwarding the suspicious email to Citi, as this inhibits our ability to properly investigate.