Security Tips for the Web We want your online experience to be pleasant and enjoyable. Banking online can be convenient and secure - if you take a few simple precautions. Transact Only through Secure Websites Do business only with companies you know and trust. Make sure that you carefully review the privacy and security statements of the web sites on which you transact business. Verify the address of every website, known as the URL (Universal Resource Locator) - for Citibank Philippines, it is www.citibank.com.ph. Beware of phony "look alike" websites, which are designed to trick consumers and collect their personal information. If you suspect a website that is not what it purports to be, leave the site. Do not follow any of the instructions it may present to you. If you believe that someone is trying to commit fraud by pretending to be a Citigroup business, please contact us immediately. All Citibank sites asking for sensitive information such as Card number and PIN number are secure sites. The URL for these sites begin with "https://". Look for the padlock symbol at the bottom of the web page to ensure the site is running in secure mode before you input sensitive information. All Citibank sites asking for sensitive information have valid security certificates. To verify, double click on the image of a padlock at the bottom of the browser window. A security Info page will then come up with information confirming the validity of the certificate. These steps must be done before typing in any sensitive information. If any of these tests fail, please contact our CitiPhone banking at 995-9999. Protect your Passwords and Account Information Use strong passwords or PINs for your accounts. Choose passwords that are difficult for others to guess. Ensure that no one is watching you while you key in your PIN or any other sensitive information. Keep your PIN confidential and keep it separate from your card information. Your PIN should be memorized and not recorded anywhere. Never lend your card to anyone or accept advice from strangers while you are using it. If you need to use a public computer, make sure you do not save your sign-on information when logging in. Clear your browser's cache and history after each session so that your account information is removed. Always log off properly by clicking the "Sign-Off" button at the top of the screen. Ensure that your online banking session is terminated by following the secure area exit instructions to ensure your protection. Do not just close your browser. Use Software Protection Make sure that your home computer has the most current anti-virus software. Anti-virus software needs frequent updates to guard against new viruses. Make sure that you download the anti-virus updates as soon as you are notified that a download is available. Install a personal firewall to help prevent unauthorized access to your home computer, especially if you connect through a cable or DSL modem. Use the latest recommended Microsoft Internet Explorer or Netscape Browser version, or one that supports 128-bit encryption. If you use Internet Explorer, you need to deactivate the "Auto Complete" function to prevent any user ID and PIN from being stored. Launch your Internet Explorer and click on "Tools" >> "Internet Options" >> "Content" . Under "Personal Information", click on "AutoComplete". Uncheck "User names and passwords on forms" and click on "Clear Passwords". Click on "OK" to save the changes. If you are using a Windows OS, ensure File & Print sharing is disabled while online, particularly if you are linked to the Internet via any broadband connection, digital subscriber lines or cable modems. Do not install software or run programs of unknown origin. Monitor Your Transactions Monitor your transactions. Review your order confirmations, credit card and bank statements as soon as you receive them to make sure that your statements reflect your transactions. Immediately report any irregularities. Check your accounts on a regular basis and contact Citibank immediately at our 24 hour CitiPhone Banking at 995-9999 should you encounter any difficulties or irregularities. Security Tips for E-mail Do not send sensitive personal or account information unless it is encrypted on a secure website. Please note that ordinary e-mails are not encrypted. You should never disclose your ATM PIN/Cash Advance PIN via ordinary e-mail. If you believe someone is trying to commit fraud by pretending to be a Citigroup business, please contact us immediately at 995-9999. Scan any attachments you receive via e-mail and immediately delete any suspicious e-mails with attachments. Be alert for scam e-mails. These may appear to come from a trusted business or friend, but actually are designed to trick you into downloading a virus or jumping to a fraudulent website and disclosing sensitive information.