Citi Mobile^® Token is a new feature within the Citi Mobile^® App that authenticates transactions and instructions, as an alternative to other authentication methods such as One-Time PIN (OTP) via SMS.
Please note that the Citi Mobile^® Token can only be enabled with the Citi Mobile^® App on one mobile device.

Secure – Protected by a 6-digit Unlock Code chosen by you, and is restricted to one mobile device of your choice.
Instant – Your 6-digit Unlock Code will instantly generate you an OTP for all transactions in Citibank Online. You can also use it to authorize all transactions in Citi Mobile^®.
Easy – Authenticates all transactions and instructions such as payments and transfers, adding a new payee, and updating your contact details in Citibank Online and Citi Mobile^®.

You can enable the Citi Mobile^® Token in 3 easy steps:
1) Log in to Citi Mobile^® App and go to "Profile and settings", choose "Citi Mobile^® Token".
2) Confirm Citi Mobile^® Token activation by entering OTP, which you will receive via SMS.
3) Create your 6-digit Citi Mobile^® Token PIN - from now on you can use it to authorize your transactions.

The Citi Mobile^® Token allows you to authenticate all of your transactions and instructions started in:
• Citibank Online
• Citi Mobile^® (Please note that the Citi Mobile^® Token is assigned to only one device)
• Internet (Please note that soon Citi Mobile^® Token will completely replace OTP via SMS and will be the only way to authenticate your online purchases).

The unique Unlock Code ensures that only you have access to the Citi Mobile^® Token on your device and can generate a One-Time PIN (OTP) and / or Transaction Authorization Code (TAC). Please remember your Unlock Code and do not share it with anyone.

In Citibank Online and Citi Mobile^® you will still be able to authorize your transactions with OTP sent via SMS. Please note that soon Citi Mobile® Token will completely replace OTP via SMS for online transactions and will be the only way to authenticate this type of transactions so we encourage you to learn this method as soon as possible.

Yes, you may still use your One-Time PIN (OTP) via SMS as an alternative to Citi Mobile^® Token. However, this method of authentication is only applicable for Citibank Online. If you are making transactions via the Citi Mobile^® App on your Citi Mobile^® Token enabled device, One-Time PIN (OTP) authentication is instant when you enter your Unlock Code. There’s no need to wait for OTP via SMS.

Depending on the operation, you still have the following options:

Transfer instruction – Adding a new recipient – Change of your data in Citibank Online

For these three operations you can perform a two-stage Citi Mobile^® Token authorization.

When your Citibank Online screen displays the message on two-stage authorization, perform the following steps:

1. Open the Citi Mobile^® application on the main screen of your telephone.
2. On the logon screen, click on the Citi Mobile^® Token icon and enter your six-digit Citi Mobile^® Token PIN.
3. Select the option “Two-Stage Authorization in Citibank Online”.
4. Now you need to return to the Citibank Online screen – you will find there a 10-digit confirmation code, which you have to enter in the application on your telephone.
5. The application will generate an 8-digit authorization key, which you must enter in the Citibank Online screen.

Other operations in Citibank Online

1. Open the Citi Mobile^® application on the main screen of your telephone.
2. On the logon screen, click on the Citi Mobile^® Token icon and enter your six-digit Citi Mobile^® Token PIN.
3. 3. The screen of your telephone will be display a single-use code.
4. Now you have to return to the Citibank Online screen – enter the single-use code generated in the application in the indicated place in Citibank Online.

Transactions in the Citi Mobile^® application

To perform a transaction in the Citi Mobile^® application, it is enough to enter the Citi Mobile^® Token PIN in the indicated place on the screen of your telephone.

No. You can perform a transaction only on the device on which the Citi Mobile^® Token is enabled. You can also perform a transaction Citibank Online on this mobile device.

No, you will not be able to use the Citi Mobile^® Token without installing the Citi Mobile^{® ®} App.

If you have lost your mobile phone, there are 3 ways to disable your Citi Mobile^® Token:
1. Log in to your Citibank Online account on your browser and follow these steps: → Services → My Profile → Disable Citi Mobile^® Token in your mobile device
2. By enabling the Citi Mobile^® Token on another mobile device, the Citi Mobile^® Token will automatically be deactivated on the previous mobile device.
3. Call CitiPhone at +65 6224 5757 to deactivate your Citi Mobile^® Token.

Simply enable the Citi Mobile^® Token on your new mobile device. The Citi Mobile^® Token will be automatically deactivated on the previous device.

No, for security reasons, you can register for the Citi Mobile^® Token on one device only. If you have enabled the Citi Mobile^® Token on a new device, the Citi Mobile^® Token on the previous device will be automatically deactivated.

Your Citi Mobile^® Token authentication may be unsuccessful because you have entered an incorrect Citi Mobile^® Token PIN. Please try again and note that entering an incorrect Citi Mobile^® Token PIN more than three times in a row will lock you out of Citi Mobile^® Token.
If you have forgotten your Citi Mobile^® Token PIN, you can reset it. Alternatively, you can try to sync your Citi Mobile^® Token in the Citi Mobile^® App.
Go to Settings → Citi Mobile^® Token → Sync Citi Mobile^® Token.

Press "forgot my password" on the main login screen in the Citi Mobile^® App.

You can reset your Citi Mobile^® Token by signing on to the Citi Mobile^® App by clicking on the "Profile and Settings" option and follow the steps below:
Step 1: Select "Profile and Settings"
Step 2: Select "Citi Mobile^® Token"
Step 3: Select "Reset Citi Mobile^® Token PIN"
Step 4: Enter OTP received via SMS
Step 5: Enter new 6-digit Citi Mobile^® Token PIN twice and select "Confirm"

1. I do not have the Citi Mobile^® application.
   a. Download and install the application.
   b. During the first login, consent to activation of notifications and mobile authorization.
   c. Activate the Citi Mobile^® Token service and set up the Citi Mobile^® Token PIN (a 6-digit code that you will use to authenticate the operations).
   d. You can already use the mobile authorization for operations performed in Citibank Online.
2. I have the Citi Mobile^® application, with activated Citi Mobile^® Token.
   a. During your next logon, you will be asked if you want to turn on the notifications and mobile authorization.
   b. Consent to the activation and confirm by entering your Citi Mobile^® Token PIN. Remember to consent to receive notifications from the Citi Mobile^® application on your telephone.
   c. You can already use the mobile authorization for operations performed in Citibank Online.
3. I have the Citi Mobile^® application with activated notifications, but I do not use Citi Mobile^® Token yet.
   a. After logging into Citi Mobile^®, activate the Citi Mobile^® Token service.
   b. Set up the Citi Mobile^® Token PIN (a 6-digit code that you will use to authenticate the operations).
   c. You can already use the mobile authorization for operations performed in Citibank Online.
4. I have the Citi Mobile^® application, with deactivated Citi Mobile^® Token and notifications.
   a. After logging into the application, activate the Citi Mobile^® Token service.
   b. Set up the Citi Mobile^® Token PIN.
   c. During your next logon, you will be asked if you want to activate the notifications and mobile authorization.
   d. Consent to the activation and confirm by entering your Citi Mobile^® Token PIN. Remember to consent to receive notifications from the Citi Mobile^® application on your telephone.
   e. You can already use the mobile authorization, including for operations performed in Citibank Online.

Yes, you will continue to receive notifications from Citi Alerts, but now you will receive them from the Citi Mobile^® application.

Remember that notifications received under Citi Mobile^® are free of charge, regardless of the CitiAlerts package you had so far.

If you still wish to receive SMS notifications, you can return to them by changing your settings in Citibank Online.

When you perform a banking operation, you will receive a notification regarding the operation in the Citi Mobile^® application. After opening the notification, check the details of the operation and next perform the mobile authorization, by entering the 6-digit Citi Mobile^® Token PIN.

If your time for authorization passes (you have 60 seconds to open the notification and 60 seconds to enter the Citi Mobile^® Token PIN), you can choose authorization with the single-use code, and you will return to the previous authorization method.

If you reject the banking operation you are in the course of performing, it will be cancelled. You need to repeat it and proceed in the standard manner, using mobile authorization.

• Phones with Android 6.0 or higher
• iPhone with iOS version 9.0 or higher

To receive notifications in the Citi Mobile app it should work in the background. Make sure the application is enabled.

To ensure that you will receive notifications in the future, turn off battery saving for the Citi Mobile application.

We are gradually introducing mobile authorization for all transactions made online, so it may happen that you will be asked to authorize a transaction using a different method. However, we would like to remind you that it will soon be the only method of authorizing such transactions.

We are gradually introducing mobile authorization for all transactions made online and soon it will be the only possible method of authorizing such transactions, so we encourage you to learn this method as soon as possible.

Commission Delegated Regulation (EU) 2018/389 (RTS) provides for certain exemptions from strong customer authentication, in these cases the Bank will not always require mobile authorization: recurring payments (subscriptions) of the same amount to the same payees, low-value transactions executed online – single transactions of up to EUR 30, provided that the total amount of the previous transactions does not exceed EUR 100, low-risk transactions – strong authentication may also not be applied to transactions for which a risk analysis has been carried out with an appropriate score.