Report to Citi
Last updated September 18, 2026
The short answer
Forward Citi phishing to spoof@citi.com as an attachment
Citi wants a phishing email sent as an attachment rather than forwarded normally. That detail is not fussiness. Forwarding strips the headers that show where the message came from, which is the part worth having.
What they handle
- Emails and texts using the Citi or Citibank name
- Unauthorized charges and account activity
- Callers posing as Citi fraud prevention
- Fake Citi login pages
How to file a report
- 1
Send the email as an attachment to spoof@citi.com
Citi asks you to forward it as an attachment, not to forward it directly, and not to change the subject line. Both make the message harder to investigate.
- 2
Call for anything touching the account
Citi gives 1-800-325-2865 for banking accounts, cards, fraud, ATMs and malware. If you have your card, the number on the back reaches the same place.
- 3
Then report it to the FTC
Citi tells customers targeted by a scammer to contact it first, then report to the FTC at reportfraud.ftc.gov.
What you'll need
- The last four digits of the card or account
- The date, amount and merchant for anything you are disputing
- The original email, kept intact as an attachment
What to expect
A call opens a fraud claim and a compromised card is reissued. Disputed card charges are normally credited while Citi investigates. spoof@citi.com is intake only and does not act on your account.
Frequently asked questions
How do I forward an email as an attachment?
In Gmail, open the message, use the three-dot menu and choose Forward as attachment. In Outlook, right-click the message in the list and choose Forward as Attachment.
Company guide
Citibank scams
Knowing which scam you were hit by makes the report better. This is how scams impersonating Citibank actually work, what the company will never ask you for, and the warning signs to recognise next time.
Read the guide →