Citi Security Centre - Security Update

On your Apple or Android device, click on the App store or Google play store icon to download the Citi Mobile^® UK App directly. Alternatively, you can download the app via one of the following methods: * Search for "Citi Mobile UK" in the App Store or Google Play on your Apple or Android device.

Citi Mobile^® UK App is supported by iOS/Android version: iOS 9.0, Android 4.4 and above.

You can remove your User ID tagged to your mobile app by clearing cache in android phone. For apple devices, you can do so by deleting and re-installing the app.

If you are unable to download the Citi Mobile^® UK App, you will still be able to complete your online transactions by following the Deeplink solution. This will require you to enter your Citi Online and Citi Mobile username and password to proceed with completing your transaction.

If you have changed your mobile phone, download the Citi Mobile^® UK App onto your new device and activate the Citi Mobile^® Token on it. This will ensure that you receive all notifications to your new mobile phone.

If your mobile phone is broken, your Citi Mobile^® Token is still activated, and you will continue to receive notifications from the system. Therefore, we recommend installing the Citi Mobile^® UK App again on an alternative mobile phone as soon as possible. If you do not have an alternative mobile phone but you are still able to deactivate the Citi Mobile^® Token, we recommend you do so before sending your mobile phone into repair. Once you retrieve the mobile phone after repair, you can reactivate your Citi Mobile^® Token.

Citi Mobile^® Token is a feature within the Citi Mobile^® App. This is used to generate a One-Time Password (OTP) which is required to authenticate online and mobile transactions. It is an alternative authentication method to SMS OTP. It is a more secure method of authentication. The Citi Mobile^® Token can only be activated within the Citi Mobile^® UK App. You can only enable their token on ONE mobile device at a time.

SECURE: You can create their own unique 6-digit unlock code.
INSTANT: You can enter their unique unlock code to instantly authenticate transactions.
EASY: Authenticates all online transactions (payments and transfers), adding a new payee and updating contact details.

A push notification is a message that pops up on a mobile device. These are sent by the Citi Mobile^® UK App and can only reach you if you have installed the App and enabled notifications; both on your device and Citi Mobile^® UK App.

‘Notification Centre', which is an in-app repository in Citi Mobile^® UK App, stores all your push notifications that were received on your mobile phone.
'Notification Centre' can be found in the Top right corner of the dashboard page.

When you enable push notifications, they will no longer receive the optional alerts they can sign up for. Mandatory alerts will continue via SMS.

Go to the settings on your phone and make sure that you have provided your consent to receive notifications for the Citi Mobile^® UK App. If you haven’t done this, enable the notifications for this application.

SMS OTP will still be an option for certain transaction types and will depend on how the merchant chooses to process the transaction. This change results from Payment Service Regulations and the introduction of Strong Customer Authentication, which aims at increasing the security of your payments. If you pay for your online shopping with a card, you will likely be asked to confirm the transaction using Citi Mobile^® Token or Deeplink Authorisation, with a single-use code received by text message gradually becoming less common.

Yes, you will need to be registered for Citibank Online to be able to authorise online purchases

No, there are various exemptions that banks can apply and not all transactions are in scope.

After entering your username and password incorrectly three times, your Citibank Online and Citi Mobile password is blocked. To unblock the password, go to www.citibank.co.uk and select the “I forgot my password” link on the login page.