Although the Mastercard that you have received is a chip card it also has the magnetic stripe for overseas use. While chip technology can reduce the risks of cloning, the magnetic stripe portion of the debit card can still be cloned. As debit cards allow customers to sign off on the receipt, there is also a risk of forgery.
Some merchants allow you to make transactions below a certain value without the need to sign off on the transaction receipt. Do ask the merchant for a receipt of the transaction to ensure the correct amount is deducted. If the wrong payment amount is deducted, please contact Citibank immediately.
Your debit card details (such as name, account number, expiry date etc.) may be captured by fraudsters either through skimming or via intercepted online transactions. Fraudsters will then be able to use such information to clone a card or perform fraudulent card-not-present transactions (such as online or mail-order-telephone-order (MOTO) transactions).
However, for online purchases with merchants whose websites are enabled with the 3D Secure Technology, you will be asked to enter a One-Time Password before you can complete the transaction. This helps to protect you against online fraud and is a secure way to authenticate that you are making the purchase as the rightful owner of the debit card being used. Inform Citibank immediately if you have received a One-Time Password (OTP) but you did not make any online purchase transaction.