Treasury and Trade Solutions

May 2018

Texas ExpressIn this Issue• Page 1

2018 Texas Conference Coming in October

• Page 2 The Latest Trends in Fraud

• Page 2 2018 Fraud Strategy

• Page 2 2018 Fraud Best Practices

• Page 3 2018 Best Practices Save Time and Update Online

• Page 4 Did You Know?

• Page 5 Citi Virtual Card Accounts (VCA)

The event, which takes place in three Texas cities, will offer hands-on training and presentations on the latest in Citi’s commercial card offerings, Virtual Card Accounts and program optimization.

Save the Dates for the 2018 SOTX User TrainingHere are the dates and locations for the Conference.

Houston: October 2–3, 2018 University of Houston Hilton

Dallas: October 16-17, 2018 Doubletree by Hilton Dallas

Austin: October 30-31, 2018 Commons Center J.J. Pickle Research Campus 10100 Burnet Road Austin, TX 78758 Phone: 512-471-5898

Don’t miss it! Mark your calendar now.

Citi® would like to thank Houston Community College and Texas Department of Transportation

for hosting this year’s two day system training. Thank you to all who were able to attend. We

look forward to seeing everyone in October at the Annual Conference.

2018 Texas Conference Coming in October

Citi would like to welcome Akash Desai, to the State of Texas Team. Akash Desai is an Account Manager supporting the State of Texas program. He previously held multiple roles at Citi including time with Payments and Receivables Product, North America Pricing, and North America Commercial Cards Account Management in the corporate space. Akash is excited to serve as a designated Account Manager for the State of Texas. Akash is graduate of Boston College.

2 Treasury and Trade Solutions

The Latest Trends in Fraud

Further rise in Account Takeover attacks due to abundance of PII data available on the Dark Web:

• Number of Breach events on pace to double prior years activity

• Equifax breach nearly doubled the number of records exposed via the Anthem breach (over 143MM)

• Increase in Social Engineering attacks, both to “fill in the blanks” as well as perpetrate fraud attacks

• Recent case where cardholder was contacted by someone claiming to be with US Marshal Office — convinced cardholder to charge $6k in gift cards to their corporate card

2018 Fraud Strategy

• Continue to emphasize education around the importance of not giving out PII data via e-mail (phishing and social engineering are most common methods of obtaining)

• Evaluate new biometric technologies

– Voice

– Fingerprint

– Behavioral

• Strengthen current verification tools — leveraging new Lexis Nexis feature in Fraud Early Warning (Digital ID & Verification)

• Implement and enhance dispute tool Launch mobile wallet (drive down CPP’s via utilization of Tokenization)

2018 Fraud Best Practices

1. Ensure Citi has current cardholder contact information (cell, phone, and email)

2. Validate that your entity’s email filters are configured to not block Citi email:

• Primary measure: Clients should lower the spam score on mail from .citi.com, .citibank.com and .citigroup.com domains which pass DMARC. DMARC means the mail passes SPF, DKIM and has a matching visible sender and envelope sender

• Secondary measure: You can whitelist the following IP Addresses with your email server 207.45.164.24, 207.45.164.79, 8.7.43.214, and 8.7.43.215

3. Review accounts tagged as fraud for employee misuse (liability waivers)

4. Place temporary blocks on accounts where card holders are going to be on leave for an extended period of time.

5. Cardholder education - what to expect, review transactions, etc.

6. Communicate with Citi to ensure cards with fraud are shut down immediately

7. Regularly look at your MCC’s and credit limits; Adjust velocity, credit and single purchase limits appropriately

3Texas Express | April 2018

2018 Best Practices Save Time and Update Online

We have put together a few best practices to start you off in 2018. The best practices below are items that you can easily update online and don’t have to call CAS or Help Desk to update.

Program resources save time: http://www.citibank.com/transactionservices/home/sa/2010q3/texas_mn/resources.jsp

Best Practices Citi Manager®:

4 Treasury and Trade Solutions

Did You Know?

You can Pay your business Telecommunication Providers: AT&T and other telecommunication providers accept payment from your Citibank Master Card for your business telecommunications needs. Contact your account manager for more information and for a program optimization review.

GO Paperless: Did you know that you can easily update the delivery method of your Citi Commercial Card account statements to receive them online? No more waiting for your card account statement to come in the mail — online account statements are available in CitiManager® within 48 hours from your statement date and allow you to access your card statement anytime, anywhere, 24/7!

How do I turn on paper-free statements?1. Login to citimanager.com/login

2. From the cardholder homepage, position your mouse over the Statement icon on the side navigation bar and select the Go Paperless link

3. Check the box indicating that you DO want to STOP receiving paper statements

4. Click I Agree and confirm your e-mail address

5. Click the Continue to Make Payment button to navigate to the Make a Payment screen and set up your payment options. Click the Cancel link to continue without setting up your payment options

State of Texas Smartbuy Status Is your Smartbuy membership current? Don’t let it expire; follow the link below to check on your membership status. https://comptroller.texas.gov/purchasing/members/active.php

Keep Program Administrator Entitlements Current To help ensure the security and integrity of your commercial card program, it is important to update Citi when there are changes in Program Administrators (PA).

Please follow the link for the form to add or delete a PA: http://www.citibank.com/transactionservices/home/sa/2010q3/texas_mn/docs/program_admin_form.pdf

If you need assistance with the form, please call your Client Account Specialists at 855-867-0772 and select option 2. It is a best practice to have a primary PA and at least one back-up PA during those times when the primary PA is not available

RebatesIf your organization recently changed Program Administrators (PA) or your bank information changed. Citibank will need to update that information in order to timely send out your rebates in 2018. Rebates will be paid in June and December of each year.

Please follow the links for the forms to update your information:

Banking information update: http://www.citibank.com/transactionservices/home/sa/2010q3/texas_mn/docs/rebate-bank-update.pdf

PA information update: http://www.citibank.com/transactionservices/home/sa/2010q3/texas_mn/docs/program_admin_form.pdf

2018 Best Practices Save Time and Update Online (continued)

5Texas Express | April 2018

Citi Virtual Card Accounts (VCA)Citi Virtual Card Accounts offers the flexibility, robust control and enhanced data capabilities to address a variety of needs within buying organizations. It can complement and help maximize growth of an existing commercial card program, or be used as a standalone solution to streamline purchasing. VCA’s secure capabilities make it an ideal solution for Card-Not-Present transactions made online, via phone or mail order; it also forms the backbone of Citi ePayables, a file-based solution targeting post-invoice payments managed by Accounts Payable.

Contact your Citibank Account Manager for more VCA information for your organization.

6Texas Express | April 2018

Quick Reference Guide to Your Citi Support Team

Here is a quick reference guide to Citi’s Support Team for the State of Texas. (You might want to print this out and keep it handy.)

For day-to-day card program management inquiries• To add/remove a Program Administrator

• Amendment to authorization controls (add MCC, change hierarchy)

• Additional credit for overall Program

• Urgent needs for new cards

Client Account Specialists (CAS)

Kaylen Woodard

Barb Wamsley

Ritsuko Ishigaki (Ritz)

Dominique Spruill

Call: 1-855-867-0772, option 2 Fax: 1-904-954-7700 E-mail: sotx.comcards@citi.com

For ongoing strategic management• Subject Matter Expert for Commercial Card products and

associated services

• Conducts Account Reviews

• Assists with Program Expansion and Optimization

Client Account Managers

Todd Pardee 1-512-677-5542 todd.william.pardee@citi.com

Brian Smith 1-214-579-9574 brian.d.smith@citi.com

Akash Desai 1-212-816-8951 akash.desai@citi.com

Online/Web-based Tool Helpdesk

For web tool support including assistance with building reports, navigation and functionality call 1-855-867-0772 select option 1, option 2. If you are experiencing a problem with functionality, please take a screen print and email your concern and the screen print to the associates at CCJAXL1HELPDESK@CITI.com

Tich Bellamy Team Lead Help Desk Technical Support

Erica George Help Desk Technical Support

Ysel Rodriquez Help Desk Technical Support

Call: 1-855-867-0772 and select option 1, and option 2 E-mail: CCJAXL1HELPDESK@CITI.COM

This team of technical specialists is a resource for Program Administrators and Cardholders needing technical assistance with online tools, to include reporting and reallocation.

Treasury and Trade Solutionsciti.com/treasuryandtradesolutions

© 2018 Citibank, N.A. All rights reserved. Citi and Arc Design is a registered service mark of Citigroup Inc.1691637 GTS74045 05/18