Citi Mobile^® Token

Second-level authentication is required for certain online transactions. You will be asked to input OTP when performing these transactions. The OTP can be generated by the Citi Mobile^® Token or a Security Device, OR can be received from your registered mobile number via SMS.

Transaction Signing is a more sophisticated authentication process for designated online transactions that require stronger protection. You will need to perform transaction signing using the Citi Mobile^® Token or a Security Device in order to add a new payee (local payee or overseas payee).

This is for your added security protection. The One-Time Password and Transaction Signing serve as additional information on top of Card Number and PIN for authentication.

Your Citibank Online User ID and Password remains unchanged. You do not need a One-Time Password to login to Citibank Online.

One-Time Password applies to both session level (require once per logon session) and transaction level (require for certain transaction in the same logon session). Online transactions that require a One-Time Password are those that require a higher level of security. Examples of transactions requiring second-level authentication:

• • Payments and transfers
• • Enroll/view e-Statements

No, you only need to perform transaction signing for Adding a New Payee (Local Payee or Overseas Payee).

You will need to perform transaction signing using a Citi Mobile^® Token or Security Device in order to add a new payee (local payee or overseas payee). During the process of transaction signing, you will enter a Challenge Code, which will be displayed on Citibank Online when you perform the transaction, into the Citi Mobile^® Token or the Security Device to generate a Transaction Authorization Code (TAC) to authorize the transaction.
Credit card only clients will have the option to add a new Merchant payee using the authentication process of Online Authorization Code (OAC) sent to your registered mobile number via SMS. Hence it is not necessary to request for a Security Device.

Your physical security device is a personalized device. when a higher level of security is required, you can generate a 6-digit One-Time Password that works with your account only or complete a Transaction Signing with the physical security device to enhance online banking security.

Please activate your physical security device at Citibank Online before use. Logon to Citibank Online, select "My Profile" > "Security Device Activation"

No. The physical security device is free of charge.

If you lose your physical security device, please call CitiPhone Banking (852) 2860 0333.

If physical security device is damaged, we recommend you to download Citi Mobile^® App and enable Citi Mobile^® Token to enjoy a more convenient experience.

The physical security device sent to you has been assigned to your profile, and you will have to activate it in Citibank Online before use. This will prevent others from using your physical security device during delivery.

Yes, the One-Time Password (OTP) SMS can be sent to both Hong Kong and overseas mobile phone numbers.

Please click here to download an application form to update your mobile number. After successful update, the OTP will be sent to the new mobile phone number.