If you’re asking whether citibank.com.hk is legitimate, the short answer is yes — it’s the official Hong Kong online portal of Citibank, one of the world’s largest financial institutions. The domain was registered in 1997 and the registrant is clearly listed as Citibank (Hong Kong) Limited, leaving no doubt about who runs it. Security is impressive: the site uses modern encryption, enforces strict HTTPS, and is protected by Akamai’s enterprise‑grade content delivery network. It has never been flagged by Google’s threat detection or appeared on any blacklists. What does give us pause is that our automated scan didn’t find a privacy policy or terms of service page. For a bank handling sensitive financial data, those documents are a legal requirement. However, major banks often serve legal pages behind login walls or through dynamic JavaScript that scanners can miss. Given the overwhelming evidence of legitimacy — decades of web archive history, clear ownership, and strong technical infrastructure — we view this as a scanning artifact rather than a real risk. If you’re already a Citibank Hong Kong customer, you can continue banking here without concern. For anyone new, verify that you’re on the genuine citibank.com.hk domain (not a misspelling) before entering login credentials.
In plain English
This is the official website of Citibank Hong Kong, a globally recognized bank with a 27‑year domain history and clear corporate ownership. The technical setup is solid and the site has never been flagged for malware or phishing. Our scan didn’t find a privacy policy or terms of service page, but given the bank’s regulatory oversight and the fact that these pages are often served dynamically, this is likely a scanning gap rather than a real omission. You can safely use citibank.com.hk for online banking and financial services.
Where the score comes from
Strong security posture with a valid certificate from a trusted issuer, strict email authentication, and HTTPS enforcement. The site is clean of malware and phishing flags.
The registrant is Citibank (Hong Kong) Limited, a well‑known financial institution. The domain has been active since 1997 and the registrar is a reputable corporate domain manager.
Twenty‑seven years of web archive history, no blacklist presence, and a clean Google Web Risk report. The site ranks in the top 1 million globally, consistent with a major brand.
Clear about page, contact information, and social media links are present. The missing privacy policy and terms of service are unusual for a bank, but the scan may not have captured them — the domain’s ownership is openly disclosed.
No privacy policy or terms of service were detected, which is a significant gap for a financial institution handling personal and payment data. Regulated banks are legally required to provide these documents; their absence in the scan is a warning, though likely an artifact of how the site loads content.
Professional hosting on Akamai’s CDN, valid DNS configuration, and robust email authentication. DNSSEC isn’t enabled, but that’s not unusual for a site that relies on a strong HTTPS setup and a well‑secured back‑end.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →