Report to Citi

Last updated September 18, 2026

The short answer

Forward Citi phishing to spoof@citi.com as an attachment

Citi wants a phishing email sent as an attachment rather than forwarded normally. That detail is not fussiness. Forwarding strips the headers that show where the message came from, which is the part worth having.

What they handle

  • Emails and texts using the Citi or Citibank name
  • Unauthorized charges and account activity
  • Callers posing as Citi fraud prevention
  • Fake Citi login pages

How to file a report

  1. 1

    Send the email as an attachment to spoof@citi.com

    Citi asks you to forward it as an attachment, not to forward it directly, and not to change the subject line. Both make the message harder to investigate.

  2. 2

    Call for anything touching the account

    Citi gives 1-800-325-2865 for banking accounts, cards, fraud, ATMs and malware. If you have your card, the number on the back reaches the same place.

  3. 3

    Then report it to the FTC

    Citi tells customers targeted by a scammer to contact it first, then report to the FTC at reportfraud.ftc.gov.

What you'll need

  • The last four digits of the card or account
  • The date, amount and merchant for anything you are disputing
  • The original email, kept intact as an attachment

What to expect

A call opens a fraud claim and a compromised card is reissued. Disputed card charges are normally credited while Citi investigates. spoof@citi.com is intake only and does not act on your account.

Frequently asked questions

How do I forward an email as an attachment?

In Gmail, open the message, use the three-dot menu and choose Forward as attachment. In Outlook, right-click the message in the list and choose Forward as Attachment.

Company guide

Citibank scams

Knowing which scam you were hit by makes the report better. This is how scams impersonating Citibank actually work, what the company will never ask you for, and the warning signs to recognise next time.

Read the guide →