Mobile authorization is a simple and secure authorization method for:
using push notifications on your phone and the Citi Mobile® app. Check how to start.
How to authorize operations using mobile authorization?
To use mobile authorization to authenticate your online transactions, it is required:
You can now use mobile authorization.
You can now use mobile authorization.
You can now use mobile authorization.
Citi Mobile® Token is a new feature within the Citi
Mobile® App that authenticates transactions and
instructions, as an alternative to other authentication methods such
as One-Time PIN (OTP) via SMS.
Please note that the Citi Mobile® Token can only be enabled with the Citi Mobile® App on one mobile device.
Secure – Protected by a 6-digit Unlock Code chosen by you, and
is restricted to one mobile device of your choice.
Instant – Your 6-digit Unlock Code will instantly generate you an OTP for all transactions in Citibank Online. You can also use it to authorize all transactions in Citi Mobile®.
Easy – Authenticates all transactions and instructions such as payments and transfers, adding a new payee, and updating your contact details in Citibank Online and Citi Mobile®.
You can enable the Citi Mobile® Token in 3 easy steps:
1) Log in to Citi Mobile® App and go to "Profile and settings", choose "Citi Mobile® Token".
2) Confirm Citi Mobile® Token activation by entering OTP, which you will receive via SMS.
3) Create your 6-digit Citi Mobile® Token PIN - from now on you can use it to authorize your transactions.
The Citi Mobile® Token allows you to authenticate all of
your transactions and instructions started in:
• Citibank Online
• Citi Mobile® (Please note that the Citi Mobile® Token is assigned to only one device)
• Internet (Please note that soon Citi Mobile® Token will completely replace OTP via SMS and will be the only way to authenticate your online purchases).
The unique Unlock Code ensures that only you have access to the Citi Mobile® Token on your device and can generate a One-Time PIN (OTP) and / or Transaction Authorization Code (TAC). Please remember your Unlock Code and do not share it with anyone.
In Citibank Online and Citi Mobile® you will still be able to authorize your transactions with OTP sent via SMS. Please note that soon Citi Mobile® Token will completely replace OTP via SMS for online transactions and will be the only way to authenticate this type of transactions so we encourage you to learn this method as soon as possible.
Yes, you may still use your One-Time PIN (OTP) via SMS as an alternative to Citi Mobile® Token. However, this method of authentication is only applicable for Citibank Online. If you are making transactions via the Citi Mobile® App on your Citi Mobile® Token enabled device, One-Time PIN (OTP) authentication is instant when you enter your Unlock Code. There’s no need to wait for OTP via SMS.
Depending on the operation, you still have the following options:
Transfer instruction – Adding a new recipient – Change of your data in Citibank Online
For these three operations you can perform a two-stage Citi Mobile® Token authorization.
When your Citibank Online screen displays the message on two-stage authorization, perform the following steps:
Other operations in Citibank Online
Transactions in the Citi Mobile® application
To perform a transaction in the Citi Mobile® application, it is enough to enter the Citi Mobile® Token PIN in the indicated place on the screen of your telephone.
No. You can perform a transaction only on the device on which the Citi Mobile® Token is enabled. You can also perform a transaction Citibank Online on this mobile device.
No, you will not be able to use the Citi Mobile® Token without installing the Citi Mobile® ® App.
If you have lost your mobile phone, there are 3 ways to disable your
Citi Mobile® Token:
1. Log in to your Citibank Online account on your browser and follow these steps: → Services → My Profile → Disable Citi Mobile® Token in your mobile device
2. By enabling the Citi Mobile® Token on another mobile device, the Citi Mobile® Token will automatically be deactivated on the previous mobile device.
3. Call CitiPhone at +65 6224 5757 to deactivate your Citi Mobile® Token.
Simply enable the Citi Mobile® Token on your new mobile device. The Citi Mobile® Token will be automatically deactivated on the previous device.
No, for security reasons, you can register for the Citi Mobile® Token on one device only. If you have enabled the Citi Mobile® Token on a new device, the Citi Mobile® Token on the previous device will be automatically deactivated.
Your Citi Mobile® Token authentication may be unsuccessful
because you have entered an incorrect Citi Mobile® Token
PIN. Please try
again and note that entering an incorrect Citi Mobile®
Token PIN more than three times in a row will lock you out of Citi
If you have forgotten your Citi Mobile® Token PIN, you can reset it. Alternatively, you can try to sync your Citi Mobile® Token in the Citi Mobile® App.
Go to Settings → Citi Mobile® Token → Sync Citi Mobile® Token.
Press "forgot my password" on the main login screen in the Citi Mobile® App.
You can reset your Citi Mobile® Token by signing on to
the Citi Mobile® App by clicking on the "Profile and
Settings" option and
follow the steps below:
Step 1: Select "Profile and Settings"
Step 2: Select "Citi Mobile® Token"
Step 3: Select "Reset Citi Mobile® Token PIN"
Step 4: Enter OTP received via SMS
Step 5: Enter new 6-digit Citi Mobile® Token PIN twice and select "Confirm"
Yes, you will continue to receive notifications from Citi Alerts, but now you will receive them from the Citi Mobile® application.
Remember that notifications received under Citi Mobile® are free of charge, regardless of the CitiAlerts package you had so far.
If you still wish to receive SMS notifications, you can return to them by changing your settings in Citibank Online.
When you perform a banking operation, you will receive a notification regarding the operation in the Citi Mobile® application. After opening the notification, check the details of the operation and next perform the mobile authorization, by entering the 6-digit Citi Mobile® Token PIN.
If your time for authorization passes (you have 60 seconds to open the notification and 60 seconds to enter the Citi Mobile® Token PIN), you can choose authorization with the single-use code, and you will return to the previous authorization method.
If you reject the banking operation you are in the course of performing, it will be cancelled. You need to repeat it and proceed in the standard manner, using mobile authorization.
To receive notifications in the Citi Mobile app it should work in the background. Make sure the application is enabled.
To ensure that you will receive notifications in the future, turn off battery saving for the Citi Mobile application.
We are gradually introducing mobile authorization for all transactions made online, so it may happen that you will be asked to authorize a transaction using a different method. However, we would like to remind you that it will soon be the only method of authorizing such transactions.
We are gradually introducing mobile authorization for all transactions made online and soon it will be the only possible method of authorizing such transactions, so we encourage you to learn this method as soon as possible.
Commission Delegated Regulation (EU) 2018/389 (RTS) provides for certain exemptions from strong customer authentication, in these cases the Bank will not always require mobile authorization: recurring payments (subscriptions) of the same amount to the same payees, low-value transactions executed online – single transactions of up to EUR 30, provided that the total amount of the previous transactions does not exceed EUR 100, low-risk transactions – strong authentication may also not be applied to transactions for which a risk analysis has been carried out with an appropriate score.