Use of Spyware – Citigroup Security and Investigative Services i.e. ‘keyloggers’ and ‘trojans’ Fraud Management Program Office Criminals are also responsible for the use of spyware (‘keyloggers’ and ‘trojans’) – software that is secretly installed onto your computer and is Virus protection capable of capturing your keystrokes or searching your computer for Protect your computer by ensuring account details or credit card details. you have an effective virus protection program that you regularly keep ‘Phishing’‘Phishing’ The criminals embed spyware in a updated. webpage, e-mail, spam mail or plus attachments, and when you open the infected item, the software is secretly For further installed onto your computer. information SpywareSpyware Delete suspicious e-mails without Visit www.citibank.com and click on opening them and don’t open the section marked “about e-mail suspicious attachments, even if they fraud .” Additional information can be i.e appear to have come from someone found at www.antiphishing.org you know. ‘keyloggers’ How to report a and ‘trojans’ ‘phishing’ attack related to Citibank Go to www.citibank.com, click on “about e-mail fraud”(bottom of homepage) and go to “report a spoof .” Alternatively, you can visit your local Citibank website. rev0704

© Citigroup Inc. 2004 What is ‘phishing’? What you need The more you use the internet, the more to know you rely on its convenience for services such If your PC is not adequately protected with as banking, online shopping and others. up-to-date virus and firewall software, or is Unfortunately, the internet is also exploited not regularly ‘patched’ with software fixes, by criminals who send out e-mails that be wary of clicking on a hyperlink embedded purport to come from one of those services. in an e-mail. If you need to go to your These e-mails look surprisingly genuine, and banking or online shopping service, ensure are commonly called ‘phishing’ e-mails. that you manually type their advertised web address into the web address line. How to recognize Delete suspicious Your bank will never ask for information a ‘phishing’ e-mail or your confidential PIN via an e-mail e-mails without You may receive an unexpected e-mail instruction, so don’t panic. Resist the opening them. from your bank or one of the other services temptation to reply or follow the e-mail you use, but actually it will be someone instructions – even if you are being told that posing as your bank or service. It usually your account has been frozen or cancelled, asks you to send your account details or that you may incur a financial penalty. and sometimes your PIN either by return BEWARE: If you are suspicious, contact the company Although secure website mail, or through a website. You could be cited in the e-mail using a telephone number addresses begin with encouraged to navigate to that you know to be genuine and verify the https: (“s” indicating they website via an embedded hyperlink e-mail – do not reply to the possible are secure) and have the within the e-mail. padlock icon on the bottom right, these ‘phishing’ email. criminals have been able to “spoof” these The criminals cleverly attempt to trick features, and you cannot rely on them totally. you by using words such as “security When you double click the padlock icon, and maintenance” or “investigation of a dialogue box will appear indicating Protect your irregularities.” They might say things like who owns the license, e.g., "Issued to computer with www.citibank.com." However, criminals use “your account has been frozen”, “we need to fraudulent pop-ups with legitimate web reconfirm your details”, “your credit card has up-to-date virus sites (pop-ups are windows that suddenly been cancelled” or even “you have a large appear and contain a menu of commands) sum of money in your account, please verify software. to capture personal information, and the withdrawals.” This is intended to sometimes the pop-ups appear to be log-in increase the likelihood of you clicking on the screens. Therefore, absolute reliance on the padlock icon can be risky. hyperlink to log in or complete a set of questions.