untrappable.Check

Citi text scam: is that Citibank fraud alert real?

Yes — this is a scam. The illustrated Citi message uses a look-alike verification link and an account scare. Check the claim with the bank independently.

Exhibit · Text message

Text Message · Today 8:44 AM
from +1 (302) 555-0171
Citibank: Your debit card has been suspended due to suspicious activity. Verify your account to restore access: citibank-alerts[.]info/restore

Other versions you might get: A yes/no “did you attempt $402?” text followed by a spoofed call from “Citi fraud,” a Zelle-transfer alert, or the same play under Chase or U.S. Bank branding.

What to do right now

  1. Don't tap the link. Don't reply, even to say STOP.
  2. Check independently. Open Citi’s official app or call the number on your card. Review the claimed activity and ask support if it is unclear; a missing alert or transaction does not automatically prove there is no account problem.
  3. If you entered your login or card details: call Citi on your card's number now, change your online-banking password, and ask them to watch or freeze the account.
  4. Report it. Forward the text to 7726 (SPAM), then file at reportfraud.ftc.gov.
  5. Delete the message.

Reduce the risk of another scam

An impersonation text may be followed by a call, but the sequence alone does not identify the caller. Do not share credentials or follow a transfer instruction from an unverified contact. Call the bank through the number on your card and secure the account promptly if details or money were exposed.

● Public service · free steps first

Take the free protection steps first

A suspicious message does not tell us how someone found your details. If you shared personal information, start with the official recovery guidance. You can also freeze your credit for free.

Decide what protection you need

Start with the free controls above. Compare what a paid service would add only after deciding which problem remains.

Frequently asked

Does Citibank text you when your card is suspended?
Citi can send genuine alerts, and scammers imitate them. A sender name, short code, link, or reply prompt alone does not settle authenticity. Do not use a suspicious message’s link or callback number. Open the bank’s app yourself or call the number on your card to check the activity.
I entered my Citibank login on the linked page — what now?
Call Citi immediately using the number on the back of your card and say your credentials were phished. Change your online-banking password, review recent activity and any Zelle recipients, and ask the bank to watch or freeze the account. Then forward the text to 7726 and report at reportfraud.ftc.gov.
How do I know if a Citi fraud alert text is really from Citi?
Open Citi’s app or official website independently, or call the number on your card. A short code, yes/no prompt, or login link is not enough to establish authenticity. Ask about the specific activity instead of trusting the text’s sender or format.
The text came right before a call from Citi's “fraud department” — is that the bank?
A text followed by a call can be used in a scam, but that sequence alone does not prove the caller is fake. Hang up and call Citi independently. Do not give an unexpected caller your PIN or sign-in code, or send money to an account they say will protect your funds.

Sources

  1. 01How to recognize and report spam text messages— Federal Trade Commission
  2. 02Phone scams— Federal Trade Commission
  3. 03What To Do if You Were Scammed— consumer.ftc.gov

Pass it on

Help protect someone else

If this could have fooled you, it can fool someone you know — a parent, a friend, the family group chat. It's safe to forward, and stands on its own as a record for a bank or the police.