Is citigroup.com legit?
Citigroup.com is a highly trusted and legitimate website. Its long history, strong infrastructure, and clear branding establish it as a reliable online presence for a major financial institution.
Finance average: 80/100 · based on 48 sites
Checked: April 18, 2026 at 7:45 AM UTC · Refresh
Is citigroup.com a scam? Here's what we found.
The site boasts a robust security setup with a valid SSL certificate from a reputable issuer and a modern TLS version, ensuring secure communication and protecting user data. Google Web Risk also confirms no threats, which is crucial for a financial services provider.
With an impressive domain age of over 28 years and clear registration details, the identity of citigroup.com is beyond question. This longevity is a cornerstone of trust for any major brand, especially in finance.
Ranking among the top websites globally and showing a clean bill of health on DNS blacklists, citigroup.com exhibits a very strong online reputation. The lack of a Trustpilot profile is a minor note, not a significant concern for a company of this stature.
The presence of comprehensive contact information, clear legal pages like privacy and terms, and active social media channels demonstrates a commitment to transparency. The absence of a sitemap is negligible given the site's overall discoverability.
The site clearly provides essential legal frameworks through its privacy policy and terms of service pages. This is a fundamental requirement for any institution handling sensitive client information, indicating strong adherence to regulatory expectations.
The underlying infrastructure is well-managed, with multiple IP addresses, properly configured mail servers, and robust email authentication (SPF and DMARC). While DNSSEC is unsigned, it doesn't detract significantly from the overall solid setup.
Signals Detected
This is a well-known, high-traffic website
Site has structured data markup
This business has no Trustpilot presence — not unusual for smaller or newer companies
Domain created 1998-04-06T04:00:00Z (28 years, 5 months ago)
Registered through CSC Corporate Domains, Inc.
Expires in 2178 days
DNSSEC status from WHOIS
crt.sh returned status 429
Resolves to: 104.94.222.171, 104.96.178.165
Mail servers: mx-b.mail.citi.com., mx-a.mail.citi.com.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: ns1.nsroot1.com., ns2.nsroot2.com.
Not found on any DNS blacklists
Valid certificate, expires in 173 days
Certificate issued by DigiCert Inc
Connection uses TLS 1.2
Site has custom branding and social media metadata
robots.txt has 15 directives and references a sitemap
Web server: AkamaiGHost
No threats detected by Google Web Risk
Website is live and responding
Website appears to have contact information
Website has both privacy policy and terms of service pages
Website links to multiple social media platforms
No sitemap found — common for smaller sites
Could not query Wayback Machine
Average page load time
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.