Online payments

All the offered payment methods are equally secure, and the choice depends on the client’s preferences. However, if you decide to make a card payment, we recommend that you use Mobile Authorization to confirm the payment.

This change results from the PSD2 and the introduction of Strong Authentication, which aims at increasing the security of your payments. If you pay for your online shopping with a card, you will most probably be asked to confirm the transaction using Mobile Authorization or Internet Authorization, and not with a single-use code received by text message anymore.
Remember that you also have a Quick Transfer "Pay with Citi Handlowy" at your disposal - there are no changes in this payment method, and you will confirm the transaction with your login details and an SMS code.

The range of available payment methods depends on the shop. The bank does not impose any one payment method for online shopping, but it can impose the payment confirmation method – say, Mobile Authorization instead of a simple text message.

Any and all fees charged by the Bank comply with the Table of Fees and Commissions for Citibank Credit Cards and the Table of Fees and Commissions: Accounts and loan in the payment account Credit Line for Individual Clients available on the website https://www.citibank.pl/en/documents/

In order to make online payments, you should have the Citi Mobile® app with the activated Mobile Authorization or login data to Citibank Online electronic banking.

To use BLIK service, you also need to have the newest version of Citi Mobile® app downloaded.

We also recommend to confirm, that you have appropriate transaction limits setup.

You can also use the solution using ePIN and a one-time code from SMS. You can set your ePIN in Citibank Online, in My Profile section.

Remember that you also have a Quick Transfer "Pay with Citi Handlowy" at your disposal - there are no changes in this payment method, and you will confirm the transaction with your login details and an SMS code.

It is required to have current login data for Citibank Online to use a Quick Transfer “Płacę z Citi Handlowy” (I pay with Citi Handlowy), Internet Authorization, Mobile Authorization or BLIK.

If you want to pay with your card for online purchases, make sure your card is active and make sure you have the appropriate transaction limits for online payments by credit and debit cards. In the case of a debit card, activate online payments in Citibank Online.

If you want to authorize card payments in the mobile app, activate Mobile Authorization. Mobile Authorization requires you to install the mobile app, set up Citi Mobile Token PIN and agree to receiving push notifications. More details on activating and using Mobile Authorization can be found on this website.on this website.

You can also pay by card or from account using BLIK service. BLIK is available in latest version of Citi Mobile® app. More details about BLIK can be found on this website.

If you don’t want to use the mobile application, you can also confirm card transactions using Internet Authorization. Then, you need to have an active payment card, your current phone number registered in Bank’s system and ePIN set in Citibank Online.

In order to use a Quick Transfer “Płacę z Citi Handlowy” (I pay with Citi Handlowy), you need to be registered in Citibank Online (this transaction authorization method is available to the clients who have an account and credit card).

In order to use Google Pay or Apple Pay, you need to have an appropriate phone and an active card added in the electronic wallet. More information on Google Pay and Apple Pay can be found on this website. on this website.

If you make an online payment with a card and don’t have a smartphone, you can use Internet Authorization. Then, to authenticate a transaction you need to enter a one-time code sent via SMS and ePIN.

You can set your ePIN in Citibank Online, in My Profile section.

Remember that you also have a Quick Transfer "Pay with Citi Handlowy" at your disposal - there are no changes in this payment method, and you will confirm the transaction with your login details and an SMS code.

ePIN is set in Citibank Online, in My Profile section. Such ePIN will be valid for all your debit and credit cards.

If you have a business account, you need to set a separate ePIN on your business account. You can do it by logging in to Citibank Online using your business credentials and enter My Profile section.

If you don’t remember your ePINu, you can reset it in Citibank Online, in My Profile section.

First 5 attempts to authenticate a transaction using Internet Authorization will be possible using your Card PIN and one-time SMS code, unless you set your ePIN first. We encourage you to set your ePIN as soon as possible in Citibank Online, in My Profile section.

First 5 attempts to authenticate a transaction using Internet Authorization will be possible using your Card PIN and one-time SMS code, unless you set your ePIN first. We encourage you to set your ePIN as soon as possible in Citibank Online, in My Profile section.

The possibility to use Card PIN to authenticate online card transactions is limited only to 5 attempts. Afterwards, you will need to set your ePIN or turn on Mobile Authorization.

Although you are using Mobile Authorization, we recommend you to set your ePIN, that will be your fallback method in case Mobile Authorization is not available.

Setting your ePIN will not change the authentication method from Mobile Authorization to Internet Authorization.

If you haven’t received your push notification, enter the Citi Mobile® app and click on the Citi Mobile Token icon on the login screen. This should trigger the pending authorization.

If you have your ePIN set, you can also wait 2 minutes and you will be automatically redirected to Internet Authorization using ePIN.

We recommend checking that you have appropriate payment limits set for online transactions

If you block the possibility to authenticate online card transactions, you can unlock it by resetting your ePIN.

If you have a business account with the Bank, you can confirm a card transaction using Internet Authorization. To do that, you need to have an active payment card, your current phone number registered in Bank’s system and ePIN set in Citibank Online.

You can also use Quick transfer “Citibank Online”, in which case you also need to register in Citibank Online electronic banking.

To be sure that the SMS you have received is safe, check the following steps:

1. The SMS should come from the Citi gateway
2. The text begins with the words Citi Handlowy: / CitiHandlowy:
3. The content should include the name of the store where you are making the purchase, as well as the amount, date and time of purchase

Commission Delegated Regulation (EU) 2018/389 (RTS) gives the possibility to apply certain exceptions when applying strong authentication, in these cases the Bank will not always require authorization: Subsequent transactions as part of a series of recurring transactions (e.g. subscriptions), Low-value transactions in Internet - single transactions up to a value of EUR 30 and the total amount of previous transactions will not exceed EUR 100, Low-risk transactions - strong authentication may also not be used for transactions for which a risk analysis will be performed and the result will be appropriate.