Message from Citibank

Dear x,

You may have heard the term “phishing” in the news lately.

In case you haven't, it's not just “fishing” misspelled. It actually refers to unsolicited email that looks like it's from a trusted institution — but in reality is an attempt to lure people into providing personal or sensitive account information on phony web sites. The information collected is later used to commit fraud.

Citi Cards holds your security in the highest regard. For that reason, we're working diligently with law enforcement, industry organizations, and governments overseas to shut down these scams permanently.

But there are a few simple things you can do as well to protect yourself:

* Look for your “personal header” on all emails.
For your protection, effective immediately look for your first name, last name and the last 4 digits of your account number in an “email security zone” at the top of email we send you. Be suspicious of emails claiming to be from us that do not include this information.

* Never type account information into a pop-up window.
Don't type account information into a pop-up window, even if it looks legitimate. We never request account information through pop-up windows.

* Don't respond to emails asking you to verify information.
We'll never send you an email asking you to verify information. If we have an issue with your records, we'll contact you another way.

* Be suspicious of grammatical or spelling errors.
These are usually indications of a fraudulent message.

If you happen to receive a suspicious-looking email claiming to be from Citi Cards, please forward it to spoof@citicorp.com. We have agents on staff around the clock monitoring these reports and acting on them immediately.

If you'd like more information on phishing, please visit our “Security and You” module. Or, you can contact one of our Internet Security Specialists at 1-888-285-9696.