Is Citi crypto friendly?

Citi’s crypto policy is best understood as two separate strategies for two different client types. For its institutional clients, large funds, multinational corporations, and other financial institutions, Citi is building digital-asset custody, tokenisation, and settlement services. It sees a future in tokenised real-world assets and is positioning itself to be a major player in that ecosystem. This institutional focus does not, however, translate into an open crypto policy for its retail and commercial banking customers.

For individuals and small to medium-sized enterprises (SMEs), Citi maintains a restrictive posture. The bank does not actively seek to bank crypto-related businesses through its standard channels. Activities like buying crypto on a personal account may be tolerated but are monitored and can trigger reviews, while running an unlicensed crypto business through a standard business account is a fast route to account closure. The bank’s primary concern is regulatory risk, including anti-money laundering (AML) and sanctions compliance, which it views as particularly acute in the context of smaller, less-established crypto ventures.

Citi’s tolerance for personal crypto activity is limited and subject to change based on internal risk assessments. Generally, using a Citi debit or credit card to purchase cryptocurrencies from a major, regulated exchange may be permitted. However, these transactions are often flagged for review. The bank is primarily looking for patterns that suggest business activity or high-volume trading, which are not appropriate for a personal account. Receiving large or frequent payments from cryptocurrency exchanges is a significant red flag that can lead to account suspension or closure while the source of funds is investigated.

The bank’s terms of service grant it wide discretion to restrict or terminate accounts for activities it deems high-risk. While buying a small amount of Bitcoin is unlikely to cause immediate issues, relying on a Citi account as the primary link to your crypto activity is precarious. Policies can tighten without notice, and what is acceptable today may not be tomorrow. Users should always consult Citi’s current account agreements and be prepared for shifts in its enforcement posture regarding crypto transactions.

Attempting to run a cryptocurrency business through a standard Citi business account is almost certain to result in account closure. The bank’s onboarding and monitoring systems are designed to detect activity inconsistent with the stated nature of a business. A software company that suddenly begins receiving large, frequent inbound payments from crypto exchanges or sending wires to offshore entities associated with digital assets will trigger an immediate compliance review.

When detected, the first step is usually a freeze on the account, followed by a request for information (RFI) about the nature of the transactions. Business owners will be asked to provide invoices, contracts, and a detailed explanation of their business model. For an unlicensed crypto business, such as an OTC desk or a token issuer, this level of scrutiny is impossible to satisfy. The likely outcome is a notification that the bank is terminating the relationship due to risk appetite, giving the business a limited time to move its funds before the account is permanently closed. This process can be highly disruptive, freezing operational capital and damaging a company’s banking history.

Citi’s dual approach to crypto, embracing institutional digital assets while restricting retail and SME access, is a direct result of its position as a globally systemic important bank (G-SIB). Its primary focus is on maintaining regulatory compliance across dozens of jurisdictions. The regulatory and compliance overhead of servicing small, high-risk crypto businesses is immense and offers little proportional reward. The risk of a money laundering or sanctions violation scandal linked to a small crypto client is a significant deterrent.

In contrast, providing digital asset custody or tokenisation services to a large, existing institutional client is a much more controlled and profitable endeavour. These clients are already subject to extensive due diligence, and the services are being built in close consultation with regulators. By focusing on tokenised real-world assets and permissioned ledger technology, Citi can explore blockchain’s potential within a contained, compliant framework. This strategy allows it to innovate and capture future market share in institutional finance without exposing the broader bank to the perceived risks of the decentralised crypto ecosystem. The bank’s crypto policy is therefore not a contradiction but a rational, risk-based allocation of its resources.

While global banks like Citi are largely closed to SME crypto businesses, a specialised ecosystem of financial institutions has emerged to serve this market. These providers have built their compliance frameworks specifically around the risks of digital assets. In Europe, Bank of Lithuania-licensed EMIs have historically been a popular choice, offering SEPA transfers for fiat settlement. Similarly, certain Liechtenstein-based institutions offer crypto-friendly banking services, benefiting from the jurisdiction’s clear regulatory framework under the Blockchain Act.

In the United States, options often involve US fintech BaaS (Banking-as-a-Service) institutions, which are fronted by state-chartered or community banks that have a specific, declared risk appetite for the sector. For businesses with international operations, Caribbean international banks and entities in the United Arab Emirates’ ADGM free zone provide robust banking solutions. Further east, Singapore MAS-licensed payment institutions are a key hub for accessing Asian markets. In the Americas, Puerto Rico’s International Financial Entities (IFEs) have also become an established part of the crypto banking landscape. Each option comes with different strengths in terms of geographic access, currency support, and regulatory oversight.

Securing a bank account for a crypto business depends entirely on presenting a compelling compliance case to an institution that is open to the vertical. The first step is to engage with the right type of institution; approaching a tier-one bank with a standard business account application is futile. Instead, target providers in jurisdictions known for clear crypto regulation who explicitly serve digital-asset companies.

A successful application goes far beyond basic company formation documents. Underwriters need to see a comprehensive, well-documented compliance program. This includes a detailed business plan explaining your revenue model, a complete anti-money laundering (AML) policy, and your Know Your Customer (KYC) and transaction monitoring procedures. You must be able to demonstrate how you screen clients, monitor for suspicious activity, and comply with sanctions lists. Providing flow-of-funds diagrams, details of your on-chain analytics provider (like Chainalysis or Elliptic), and resumes of the key principals can significantly strengthen your case. The goal is to show the underwriter that you understand the risks of your business and have built professional, robust systems to mitigate them.