untrappable

Citi text scam: is that Citibank fraud alert real?

Editorially reviewed · Last updated July 16, 2026

Yes — this is a scam. Citibank doesn't text you links to verify your account or restore a suspended card.

Text Message · Today 8:44 AM
from +1 (302) 555-0171
Citibank: Your debit card has been suspended due to suspicious activity. Verify your account to restore access: citibank-alerts.info/restore
The Text message, as received

Other versions you might get: A yes/no “did you attempt $402?” text followed by a spoofed call from “Citi fraud,” a Zelle-transfer alert, or the same play under Chase or U.S. Bank branding.

What to do right now

  1. Don't tap the link. Don't reply, even to say STOP.
  2. Check the real way: open the Citi app or call the number on the back of your card. A real hold shows there.
  3. If you entered your login or card details: call Citi on your card's number now, change your online-banking password, and ask them to watch or freeze the account.
  4. Report it. Forward the text to 7726 (SPAM), then file at reportfraud.ftc.gov.
  5. Delete the message.

How to make sure it never bites you

A spoofed bank text is the opening move — the follow-up is often a call from “the fraud department” asking you to read back a code or move money. Neither is ever real. See the bank fraud call scam for round two, and how to stop spam texts to cut the volume.

Untrappable · Public service advisory

Stop the next one at the source

You got this because your details are on lists that get bought, sold, and leaked. You can't unspill that, but you can make it useless to a scammer. Start with the free steps — they do most of the work.

Optional — if you'd rather it was handled for you

If you'd rather have it watched for you, an identity-protection service monitors your accounts, SSN, and the dark web, warns you the moment something new appears, and helps you recover if someone gets through.

See identity protection →

Affiliate link — we may earn a commission at no extra cost to you. It never changes our verdicts. Why we can still be trusted.

Keep this · forward it to someone who needs it

Frequently asked

Does Citibank text you when your card is suspended?
Citi sends real fraud alerts, but they ask a yes/no question about a specific charge — they don't declare your card suspended and link you to a “restore access” page. Any bank text with a login link on a look-alike domain is smishing. Check by opening the Citi app or calling the number on your card.
I entered my Citibank login on the linked page — what now?
Call Citi immediately using the number on the back of your card and say your credentials were phished. Change your online-banking password, review recent activity and any Zelle recipients, and ask the bank to watch or freeze the account. Then forward the text to 7726 and report at reportfraud.ftc.gov.
How do I know if a Citi fraud alert text is really from Citi?
Don't judge the text — verify around it. Real Citi alerts come from Citi's short codes, ask yes/no, and never contain login links. Whatever the text says, the safe move is the same: open the Citi app or call the number on your card. If something real is wrong, it will be waiting there.
The text came right before a call from Citi's “fraud department” — is that the bank?
That sequence — an alarming text, then a spoofed call referencing it — is the standard two-step bank scam. The caller sounds official and may know your name, but a real bank never asks you to read back a one-time code, share your PIN, or move money. Hang up and dial the number on your card yourself.

Related scams

Sources

A public service

Help protect someone else

Scams spread because people stay quiet about them. If this could have fooled you, it can fool someone you know — a parent, a friend, the family group chat. Passing it on is the easiest good thing you'll do today. It's safe to forward, and stands on its own as a record for a bank or the police.