Home>Other Services>One-Time PIN (OTP) Authentication In our continuous effort to make Citibank Online a secured banking environment for you, we have introduced a second level of authentication for all online transactions. You will be required to enter a One-Time Password (OTP); a single-use random Password that will be sent to you via SMS or generated by your Online Security Device (OSD) as a second level of authentication in addition to your Citibank ATM/Debit card number and PIN to effect an online transaction at Citibank Online or Citi Mobile. 2 simple steps to start banking online: Level 1: Login to citibank.com.sg with your 16 digit ATM/Debit card or credit card and PIN Level 2: You will be required to enter the One-Time Password (OTP) generated by your Online Security Device or sent to your mobile phone to authorize online transactions. Examples of transactions that requires OTP: Account details and activity Payments and Transfers View Electronic Statements Investment Services Brokerage Services Change ATM Password Citi Alerts Enrolment Credit Line Increase COE Bidding Ways to obtain your One-Time Password (OTP): 1. Receive your One-Time Password (OTP) via SMS The Primary mode of receiving your One-Time Password (OTP) is via SMS. When you login and click on a transaction that requires the One-Time Password (OTP), a One-Time Password (OTP) will be generated to your mobile phone*. *In order for you're to receive your One-Time Password (OTP) successfully, it is important to update the bank with your latest mobile phone number. 2. Generate your One-Time Password (OTP) with the Online Security Device (OSD) A one time registration is required to activate your online security Device (OSD) click here for the step by step guide. To enhance security, the new online security tokens has been pre-registered to your profile, you can start banking immediately.   This token is compatible for transaction signing and other additional functionalities which are not available at the moment. We will inform you on instructions and procedures when the additional functionalities are available. Accessing Transactions Requiring One-Time Password (OTP) 1. Receive your One-Time Password (OTP) via SMS When you access transactions at Citibank Online that require a One-Time Password (OTP), you will be prompted with this screen. Simply enter the One-Time Password (OTP) you have received on your mobile phone or generate it via your Online Security Device (OSD) and click "Continue" 2. Generate your One-Time Password (OTP) with the Online Security Device (OSD) 1. New Online Security Device 2. Existing Online Security Device To enhance security, the new online security tokens has been pre- registered to your profile, you can start banking immediately. This token is transaction signing compatible. Transaction signing is not available at the moment but will be introduced in the near future. If you are holding the existing Online Security Device shown above, a one time registration is required to activate your Online Security Device (OSD) Please follow the step-by-step guide below. 4-Step registration process: Step 1 - Login to Citibank Online with your 16 digit ATM/Debit Card Number and PIN. Step 2 - At My Home page, click on "Account Services" under Services. Step 3 - Click on "Security Device Registration" under Account Services. Step 4 Enter the information required and click "Submit" to complete your registration. Click on to expand and on to minimise the details. What is One-Time Password (OTP)? One-Time Password (OTP) is a randomly-generated 6-digit Password. With second-level authentication, you will need an One-Time Password (OTP) each time you perform online transactions on Citibank Online. One-Time Password (OTP) can be received via SMS to your mobile phone or via your Online Security Device (OSD). How does One-Time Password (OTP) work? When you need to perform an online transaction, you will be required to enter an One-Time Password as a second level of authentication to confirm that the transaction is authorised by you. This One-Time Password will be delivered to you via SMS or your Online Security Device (OSD). Do I have to enter an One-Time Password (OTP) for every transaction or every session? You only need to enter an One-Time Password (OTP) once per online session. Once you have entered your One-Time Password (OTP) you can perform as many transactions as you like within that session. What are the online transactions that require One-Time Password (OTP)? Online transactions that require One-Time Password (OTP) are those that could potentially compromise your security or privacy as customers of Citibank. Transactions requiring second-level authentication include: Account details and activity Payments and transfers View Electronic Statements Investment services Brokerage services Change ATM Password Account alerts Credit line increase COE bidding Why is there a need for One-Time Password (OTP) ? The One-Time Password (OTP) serves as a second-level authentication when you perform protected transactions at Citibank Online. Should your Card Number and PIN be compromised for any reason, the intruder will also need to have your mobile phone or your Online Security Device (OSD) to access protected transactions via your account online. As such, you can enjoy total peace of mind when you bank online with us. When will One-Time Password be implemented for all online transactions? One-Time Password (OTP) was introduced on 10 Dec 2006. OTP will be implemented for all online transactions, including View Statement and Account Details & Activities, on 1 Feb 2007. What is Online Security Device (OSD)? Your Online Security Device (OSD) is a personalized device that randomly generates an One-Time Password (OTP) just for you when you perform protected transactions on Citibank Online. Do I need an Online Security Device (OSD) to bank online? If you have registered your Singapore mobile phone number with us, you can choose to receive One-Time Password (OTP) via SMS, thus you do not necessarily need an Online Security Device (OSD). However, if you do not have a Singapore-registered mobile phone number, then you do need an Online Security Device (OSD). Can I bank online if I don't have my Online Security Device (OSD) with me? If you don't have your Online Security Device (OSD) with you, you can request an One-Time Password (OTP) to be sent to you by SMS. Please ensure that your mobile phone number is updated with the bank in order to receive your One-Time Password (OTP) by SMS. Do I have to pay for my Online Security Device (OSD)? Your first Online Security Device (OSD) is complementary and has a lifespan of 3 to 5 years, depending on usage, before it has to be replaced. For replacement of a lost Online Security Device (OSD), a $20 charge applies. Why does Citibank deliver One-Time Password (OTP) via SMS and Online Security Device (OSD)? SMS is the primary mode for delivering One-Time Password (OTP). This gives you the most flexibility and convenience since it does away with the need for you to carry additional hardware the Online Security Device (OSD) wherever you go. However, some customers may not have a Singapore mobile phone or simply prefer to use an Online Security Device (OSD). Hence, the Online Security Device (OSD) option is also available. What if I lose or damage my Online Security Device (OSD)? If you lose or damage your Online Security Device (OSD), please call our Internet Support Hotline at (65) 6338 2228 to request for a replacement. A $20 replacement charge applies. I have received my Online Security Device (OSD) via mail. Is it safe? The Existing Online Security Device (OSD) mailed to you must be registered before it can be used. There are 2 steps to the registration process. First, login to Citibank Online with your Card Number and PIN Next, you will be asked to key in your date of birth, Online Security Device (OSD) serial number and an One-Time Password (OTP) randomly-generated by your Online Security Device (OSD) itself. Your Online Security Device (OSD) will have security value only after you complete this registration process. For customers with the new online security device, the token issued to you has been pre-registered to your profile and you can generate One-Time password each time you perform online transactions on Citibank Online or Citi Mobile What is the validity period of each One-Time Password (OTP)? One-Time Password (OTP) generated by your Online Security Device (OSD) is valid for 2 minutes. If you exceed this, you will need to turn your Online Security Device (OSD) on again to generate a new One-Time Password (OTP). One-Time Password (OTP) received via SMS is also valid for 2 minutes and only the latest SMS One-Time Password (OTP) will be valid. When do I need to register my Online Security Device (OSD)? If you are holding the existing online security device you should register your Online Security Device (OSD) when you receive it. You can only use the Online Security Device (OSD) to generate One-Time Password (OTP) after it has been registered. For customers with the new Online Security Device, the token issued to you has been pre-registered to your profile and you can generate the One-Time password each time you perform online transactions on Citibank Online or Citi Mobile How can I safeguard myself and my Online Security Device (OSD)? For customers with the new online security device. The token issued to you has been pre-registered to your profile and the one-time password will only be generated for your profile. DOs   DON'Ts Keep your Online Security Device (OSD) in a safe and secured place at all times.   Allow anyone to use or meddle with your Online Security Device (OSD). Store your Online Security Device (OSD) in a dry and cool environment, away from water or extremely high temperatures.   Leave your Online Security Device (OSD) unattended or exposed with the One-Time Password (OTP) displayed on the screen. Personalize your Online Security Device (OSD) so that it is recognizable by you.   Reveal your Online Security Device (OSD) serial number or One-Time Password (OTP) to anyone. Contact us on (65) 6338 2228 immediately if you lose or damage your Online Security Device (OSD).   Drop your Online Security Device (OSD) from great heights, step on it, or attempt to dismantle it. Inform us when the message "BATT" appears on your Online Security Device (OSD). This indicates that the battery is running low.   Label your Online Security Device (OSD) with your name, NRIC, passport number or any other information that may identify the Online Security Device (OSD) to you. Will the login to Citibank Online change? Will I need an One-Time Password (OTP) to login to Citibank Online? The login to Citibank Online remains the same. You can login with your card number and ATM/credit card Password. You only need your One-Time Password (OTP) after logging in, when you perform online transactions. Can I receive an One-Time Password (OTP) SMS to an overseas mobile number? Yes, the One-Time Password (OTP) and SMS can be sent to both Singapore and overseas mobile phone number. Can I receive One-Time Password (OTP) if I have number retention for my mobile phone? The One-Time Password SMS will not get forward to your new phone if you have number retention. So please call our Internet Support at (65)6338-2228 to update your new mobile phone number with the bank. How do I know if I need to request for an Online Security Device (OSD)? It is recommended that you have an Online Security Device (OSD) if you belong to either one of the following groups: You travel frequently You perform time critical transactions online such as COE bidding, Brokerage or Foreign Currency investments You do not carry a Singapore-registered mobile phone Will the Online Authorisation Code (OAC) be removed with the introduction of One-Time Password (OTP)? Do I still need OAC to setup a payee? The existing OAC will continue to be used for new payee setup. OAC will not be removed with the introduction of One-Time Password (OTP), it will remain as an additional level of security for payments and funds transfers. Why did I receive an Online Security Device (OSD) without requesting for one? Citibank acknowledges the time sensitivity of transactions such as online trading and investments. As such, to avoid restricted dependence on a single mode for One-Time Password (OTP), an Online Security Device (OSD) may be issued to those who actively perform such time-sensitive transactions. Are my accounts secure without OTP? Yes. We use state-of-the art encryption methods to protect sensitive data. This program simply provides an additional layer of security. Can I turn off the extra security? Certain regional regulatory agencies require two-factor authentication for processing your online accounts. Call your Internet Support team at (65) 6338-2228. I have informed the bank of a change in my mobile phone number. When can I start receiving One-Time Password (OTP)? Upon successful update of your mobile number, please allow 3 to 5 working days for your number to be effective and ready to receive OTP. Why are there 2 different Online Security Device? In our continuous effort to make Citibank Online a secured banking environment, we are committed to provide the best security you need. As a result we have introduced a new Online Security Device which is transaction signing compatible. This function is not available at the moment but will be introduced in the near future. Issuing you the new Online Security Device in advance would ensure that you are ready for transaction signing when it launches. How do I use the new Online Security Device? You can generate a One-Time Password (OTP) by pressing on the green button What is the difference between the new and existing Online Security Device? Presently, there is no difference. The functions of both the existing and new Online Security Device are similar. What is transaction signing? Transaction signing provides you with an additional level of security as you will need to input information specific to the transaction into the device to generate a security code which will then allow the transaction to proceed. We will inform you the instructions and procedures when the additional functionalities are available. What are the buttons on the new Online Security Device for? The buttons on the new Online Security Device will allow you to input information specific to the transaction into the device to generate a security code which will then allow the transaction to proceed. We will inform you the instructions and procedures when the additional functionalities are available.