Mobile Authorization

In order to activate Mobile Authorization you need to:

1. have a smartphone with the downloaded Citi Mobile app
2. have an account in electronic banking, i.e. register in Citibank Online or Citi Mobile.

You can use the same Username and password both in Citibank Online and Citi Mobile.

If you don’t meet the required criteria, these are the alternative methods of authentication:

1. For operations in Citibank Online – SMS notifications or Two-factor authorization
2. For operations in Citi Mobile – SMS notifications
3. For online card transactions – payment with the “I pay with Citi Handlowy” (Płacę z Citi Handlowy) service, payment via Apple Pay or Google Pay

There are several reasons why you may not be asked to turn on notifications:

1. If you have an Android-powered phone, Mobile Authorization is activated automatically upon setting your Citi Mobile Token PIN
2. Mobile Authorization may be already activated
3. Try logging out of the app and logging in again
4. The question to turn on notifications is displayed only a limited number of times. To make sure that Mobile Authorization is activated, go to Settings and Profile in your app (icon in the upper-left corner with your first name), go to the tab Citi Mobile Token, and turn off and then back on the Citi Mobile Token. Check if the question to turn on notifications pops up when logging in the next two times. If it doesn’t, Mobile Authorization is activated.

Go to Settings on your phone and check if you have consented to receiving notifications for Citi Mobile app. If not, turn on notifications for this application.

You are currently not able to check if Mobile Authorization is activated. What you can do is try to execute an operation in Citibank Online (e.g. check transactions concluded over 90 days ago) and see if you receive a notification from the app.

If you have uninstalled the application, Mobile Authorization is still activated and you will continue to receive notifications from the system. Therefore, we recommend installing Citi Mobile app again as soon as possible.

If your phone is broken, Mobile Authorization is still activated and you will continue to receive notifications from the system. Therefore, we recommend installing Citi Mobile app again on an alternative phone as soon as possible.

If you don’t have an alternative phone but you are able to deactivate Mobile Authorization, we suggest you do so before sending the phone for repair. Once the phone is fixed you should activate Mobile Authorization again.

You can turn off Mobile Authorization by deactivating your 6-digit Citi Mobile Token PIN in the Settings of your Citi Mobile app.

If you have changed your phone, download Citi Mobile app to your new phone and activate Mobile Authorization on the new phone. Then, you will receive notifications on your new phone.

Launch the application and click the Citi Mobile Token icon on the login screen. The application will trigger the pending authorization. Manual authorization will be possible only when the transaction is waiting for authorization.

For proper functioning of Mobile Authorization make sure that Citi Mobile app is running in the background (there is no need to log in) and that your phone isn’t set to the power saving mode.

If you still don’t receive notifications, wait a second – sometimes notifications are delayed. Alternatively, try executing the transaction again.

If you wish to use a different authorization method, these are the alternatives:

1. For operations in Citibank Online – SMS notifications or Two-factor authorization
2. For operations in Citi Mobile – SMS notifications
3. For online card transactions – payment with the “I pay with Citi Handlowy” (Płacę z Citi Handlowy) service, payment via Apple Pay or Google Pay

If your application is blocked, unblock your account by resetting the password.

You will not be able to use Mobile Authorization as long as your account remains blocked.

Make sure that you return to the transaction screen after entering your Citi Mobile Token PIN – confirm authorization of the transaction there.

If you have forgotten your Citi Mobile Token PIN, change your Citi Mobile Token PIN immediately. You can do it by going to Settings and Profile in the app (icon in the upper-left corner with your first name) and selecting “reset Citi Mobile Token”.

You have 3 attempts to enter your Citi Mobile Token PIN before it is blocked. If you are not sure about your Citi Mobile Token PIN, reset it.

Citi Mobile® Token PIN is a 6-digit code used to confirm operations in Citi Mobile app, on the Citibank Online platform and online card transactions. This way you can enter one code on your phone instead of entering single-use SMS codes.

Security – Mobile Authorization is protected with a unique Citi Mobile® Token PIN set by you, and known only to you. Moreover, the service is assigned to only one mobile device.

Easy use – with Mobile Authorization you can use one and the same method to authorize all your transactions and instructions in Citibank Online and Citi Mobile®: payments, transfers, adding new recipient or updating your contact details, as well as online card payments.

Quick confirmation – with Mobile Authorization you no longer have to enter single-use SMS codes – just click on the notification on your phone, enter your 6-digit Citi Mobile Token PIN and that’s it.

The Citi Mobile® Token service allows you to authenticate selected transactions and instructions:

• in Citibank Online
• in the Citi Mobile® application (Note: Citi Mobile® Token service is assigned to only one device.)
• online (Note: Mobile Authorization is the main authentication method for online transactions).

With Citi Mobile® Token PIN you are the only person who can access Mobile Authorization on your device and generate single-use authentication codes for transactions in Citibank Online or use them to confirm transactions in Citi Mobile® app.

Remember your Citi Mobile® Token PIN and don’t make it available to anyone.

You will still be able to authenticate transactions using a single-use SMS code in Citibank Online and Citi Mobile® app.

For online payments we recommend using the payment method “I pay with Citi Handlowy” (Płacę z Citi Handlowy), or Apple Pay and Google Pay.

Yes, you can still use the authentication method of your choice.

If you wish to use a different authorization method to authorize your transactions, these are the alternatives:

1. For operations in Citibank Online – SMS notifications or Two-factor authorization
2. For operations in Citi Mobile – SMS notifications
3. For online card transactions – payment with the “I pay with Citi Handlowy” (Płacę z Citi Handlowy) service, payment via Apple Pay or Google Pay

No, you can’t. You will be able to execute transactions only on the device with the active Mobile Authorization. If you wish to confirm a transaction on a different phone, you have to download the Citi Mobile app to that phone and activate Mobile Authorization there. Note: if you do so, Mobile Authorization will be deactivated on the previous phone.

No, Mobile Authorization is only available after installing the Citi Mobile® app.

There are two ways to deactivate Mobile Authorization:

1. Log in to your Citibank Online account and follow the path: Services → My Profile → Turn off Citi Mobile® Token on a mobile device.
2. Activate Mobile Authorization on a new mobile device – the service will be automatically deactivated on the previous device.

After downloading the Citi Mobile® app to a new device, simply activate Mobile Authorization, turn on Notifications and activate the Citi Mobile® Token service by setting your 6-digit Citi Mobile Token PIN. Activation on a new device will cause the service to be automatically deactivated on the previous device.

No, for security reasons Mobile Authorization can be activated only on one mobile device.

Click on the password reminder on the login screen of the Citi Mobile® app.

Log in to the Citi Mobile® app and follow the steps below:
Step 1: Click on “Profile and Settings”.
Step 2: Select “Citi Mobile® Token”.
Step 3: Click on “Change Citi Mobile® Token PIN”.
Step 4: Enter a single-use code received via SMS.
Step 5: Enter the new 6-digit Citi Mobile® Token PIN twice and click “Confirm”.

1. I don’t have the Citi Mobile® application
   a. Download and install the application.
   b. During the first login, consent to the activation of Mobile Authorization and Notifications.
   c. Activate the Citi Mobile® Token service and set your 6-digit Citi Mobile® Token PIN (the code you will use to authenticate operations).
   d. Now you can use Mobile uthorization.
2. I have the Citi Mobile® app with deactivated Citi Mobile® Token
   a. Login to the application.
   b. Go to Profile and Settings (icon in the upper-left corner with your first name) and go to Citi Mobile® Token section.
   c. Create your Citi Mobile® Token PIN following the on-screen instructions.
   d. During your next login, you will be asked if you want to activate Mobile Authorization and turn on Notifications. If the question doesn’t pop up, it means Mobile Authorization has already been activated.
   e. Consent to the activation and confirm your consent by entering your Citi Mobile® Token PIN. Remember to consent to receiving notifications from the Citi Mobile® app on your phone.
   f. Now you can use Mobile Authorization.
3. I have the Citi Mobile® app with activated Citi Mobile® Token
   a. During your next login, you will be asked if you want to activate Mobile Authorization and turn on Notifications. If the question doesn’t pop up, it means Mobile Authorization has already been activated.
   b. Consent to the activation and confirm your consent by entering your Citi Mobile® Token PIN. Remember to consent to receiving notifications from the Citi Mobile® app on your phone.
   c. Now you can use Mobile Authorization.

Yes, you will continue to receive notifications from CitiAlerts, but now you will receive them from the Citi Mobile® application.

Remember that notifications received in Citi Mobile® are free of charge, regardless of the CitiAlerts package you had so far.

If you still wish to receive SMS notifications, you can return to them by changing your settings in Citibank Online.

When you execute an operation, you will receive a notification regarding the operation in the Citi Mobile® application. After opening the notification, check the details of the operation and next perform mobile authorization, by entering the 6-digit Citi Mobile® Token PIN.

If your time for authorization passes (you have 60 seconds to open the notification and 60 seconds to enter the Citi Mobile® Token PIN), you can choose authorization with a single-use code, and you will return to the previous authorization method.

If you reject the banking operation you are in the course of performing, it will be cancelled. You need to repeat it and proceed in the standard manner, using Mobile Authorization.

1. Android-powered phones, version 8.0 or later
2. iOS-powered iPhones, version 13.0 or later

In order to receive notifications, the Citi Mobile app should be running in the background. Make sure the application is turned on.

In the future, make sure not to set the power saving mode to receive notifications.

We are gradually introducing Mobile Authorization for all online transactions. Therefore, it can happen that you will be asked to authorize a transaction using a method other than Mobile Authorization.

Yes, you will still be able to execute transactions using the “I pay with Citi Handlowy” (Płacę z Citi Handlowy) service or via Apple Pay or Google Pay.

Commission Delegated Regulation (EU) 2018/389 (RTS) provides for certain exemptions from strong customer authentication, in these cases the Bank will not always require mobile authorization: recurring payments (subscriptions) of the same amount to the same payees, low-value transactions executed online – single transactions of up to EUR 30, provided that the total amount of the previous transactions does not exceed EUR 100, low-risk transactions – strong authentication may also not be applied to transactions for which a risk analysis has been carried out with an appropriate score.