Security Device

Security Device

Security Device

At Citibank, we are committed to making Citibank Online a secured banking environment for you. Additional authentication is required for designated online transactions where a higher level of security is needed. An Online Authorization Code (OAC) will be sent to your registered mobile phone via SMS when you perform such transactions.

You can also generate a One-Time Password (OTP) using a Security Device to perform the authentication. For clients with banking account, you may apply for a Security Device by calling our hotline at (852) 2860 0380(852) 2860 0380, or apply by mail or at any Citibank branch.

Features

Examples of transactions requiring OTP

  • Payments & Transfers
  • Enroll/View e-Statement
  • Stock Trading

Generate your OTP with the Security Device

Generate your OTP with the Security Device

Please activate your Security Device at Citibank Online before use.

How to activate the Security Device

Logon to Citibank Online, select “My Profile” > “Security Device Activation”


Details of Security Devices are available on Citibank's Mobile Application. Please go to official application stores and search for "Citibank HK".

The following information for your reference:

How OTP works

How to access

When you access transactions at Citibank Online that require a One-Time Password (OTP), you will be prompted with this screen. Simply enter the OTP you have generated via your Security Device and click "Continue".

How OTP works

Upon completion of authentication, you may proceed with online banking service.

How To Apply

Citibank banking account holders, please apply for a security device via any of the following channels :

Call our hotline at (852) 2860 0380(852) 2860 0380.

Send the completed request form to us by mail. Please click here to download the request form.

Submit the completed request form to any Citibank branch.


Your Security Device will be delivered to your local registered mailing address in around 5 business days via surface mail, or to your overseas registered mailing address via DHL Express.

*

Note: Security Device request is not applicable to credit card only clients.

Transaction Signing

Transaction Signing

Starting from July 26, 2015, the security device will support Transaction Signing to enhance online banking security.

Transaction Signing is a more sophisticated authentication process for designated online transactions that require stronger protection. During the process, you will enter a Challenge Code, which will be displayed on Citibank Online when you perform the transaction, into the device to generate a Transaction Authorization Code (TAC) to authorize the transaction.

Transaction Signing will be required when performing the following transaction

  • Add a New Payee (Local Payee or Overseas Payee)

Please click here to view how to perform Transaction Signing using the security device.

Credit card only clients will have the option to add a new Merchant payee using the authentication process of Online Authorization Code (OAC) sent to your registered mobile number via SMS. Hence it is not necessary to request for a security device.

To provide you with greater convenience and ease of use , upon Transaction Signing launch, you will no longer require to enter the random digits of your HKID/Passport Number into Citibank Online when you perform authentication using the Online Authorization Code (OAC) sent to your registered mobile phone via SMS.

FAQs

Your Security Device is a personalized device that randomly generates a 6-digit One-Time Password that works with your account only when a higher level of security is required. Starting from July 26, 2015, the security device will support Transaction Signing to enhance online banking security.

If you have a banking account, you may apply for a Security Device by calling our hotline at (852) 2860 0380(852) 2860 0380. Or you apply by mail or at any Citibank branch.

Please activate your Security Device at Citibank Online before use.

Logon to Citibank Online, select “My Profile” > “Security Device Activation”

Second-level authentication is required for certain online transactions. You will be asked to input a One-Time Password when performing these transactions. The One-Time Password can be received from your registered mobile number via SMS or can be generated by the Security Device.

Transaction Signing is a more sophisticated authentication process for designated online transactions that require stronger protection. You will need to perform transaction signing using a Security Device in order to add a new payee (local payee or overseas payee). For steps on how to add a new payee, please refer to FAQ#16.

One-time password applies to both session level (require once per logon session) and transaction level (require for certain transaction in the same logon session). Online transactions that require a One-Time Password are those that require a higher level of security. Examples of transactions requiring second-level authentication:

  • Payments and transfers
  • Enroll/view e-Statements

No, you only need to perform transaction signing for the following transaction:

  • Add a New Payee (Local Payee or Overseas Payee)

For steps on how to add a new payee, please refer to FAQ#16.

This is for your added security protection. The One-Time Password and Transaction Signing serve as additional information on top of Card Number and PIN for authentication.

You will need a Security Device for the following transaction that requires transaction signing:

  • Add a New Payee (Local Payee or Overseas Payee)

For steps on how to add a new payee, please refer to FAQ#16.

For other online transactions that require a One-Time Password (OTP), you can choose to receive it from your registered mobile number via SMS or it can be generated by the Security Device.

Credit card only clients will have the option to add a new Merchant payee using the authentication process of Online Authorization Code (OAC) sent to your registered mobile number via SMS. Hence it is not necessary to request for a security device.

No. The Security Device is free of charge.

If you lose or damage your Security Device, please call 24-hour CitiPhone Banking (852) 2860 0333(852) 2860 0333 to request a replacement.

The Security Device sent to you has been assigned to your profile, and you will have to activate it in Citibank Online before use. This will prevent others from using your security device during delivery.

DOs DON'Ts
Keep your Security Device in a safe and secured place at all times. Allow anyone to use or obtain your Security Device.
Store your Security Device in a dry and cool environment, away from water or extremely high temperatures. Leave your Security Device unattended or exposed with the One-Time Password displayed on the screen.
Personalize your Security Device so that it is recognizable by you. Reveal your Security Device serial number or
One-Time Password to anyone.
Contact us on 24-hour CitiPhone Banking (852) 2860 0333(852) 2860 0333 immediately if you lose or damage your Security Device. Drop your Security Device from great heights, step on it, or attempt to dismantle it.
Inform us when the message "BATT" appears on your Security Device. This indicates that the battery is running low. Label your Security Device with your name, passport number or any other information that may identify you as the owner of the Security Device.

Your Citibank Online User ID and Password remains unchanged. You do not need a One-Time Password to login to Citibank Online.

Yes, the Online Authorization Code (OAC) SMS can be sent to both Hong Kong and overseas mobile phone numbers.

You will need to perform transaction signing using a Security Device in order to add a new payee (local payee or overseas payee). During the process of transaction signing, you will enter a Challenge Code, which will be displayed on Citibank Online when you perform the transaction, into the device to generate a Transaction Authorization Code (TAC) to authorize the transaction.

Please click here to view how to perform Transaction Signing using the security device.

Credit card only clients will have the option to add a new Merchant payee using the authentication process of Online Authorization Code (OAC) sent to your registered mobile number via SMS. Hence it is not necessary to request for a security device.

Please click here to download an application form to update your mobile number.

After successful update, the OAC will be sent to the new mobile phone number.

When you access transactions at Citibank Online that require a One-Time Password (OTP), you will be prompted with this screen. Press the green button on your Security Device to generate a 6-digit OTP. Simply enter the OTP you have generated and click "Continue".

How OTP works

Upon completion of authentication, you may proceed with online banking service.

Adding a new payee (local payee or overseas payee) requires transaction signing. Please click here to view how to perform Transaction Signing using the security device.

  • Citibank Mobile. Logon with your mobile to enjoy fabulous offers.
  • e-Statement Services Simple, Safe and Secure.