How they work
Scammers pretend to be officers from Citi and will inform you that your credit card has been blocked due to unauthorized transactions. They will ask you to re-activate your card by clicking links in their emails or by providing your card details and One-Time PINs on a fake website.
What to do
- Check the sender’s email address to see if it’s from a public domain, like '@gmail.com', '@yahoo.com'. If yes, then this is a phishing email. Citi will NEVER send communications from public domains
- Look for the padlock icon on the address bar of the website and the underlying protocol has an added "S" (i.e., https). This confirms it is legitimate
- Our SMS OTP message now includes the ‘Merchant Name’, ‘Currency’ & ‘Amount’ for which the OTP has been shared to ensure you have all the details before executing online transactions
In addition, please report on www.uaebf.ae/en/fight-fraud