Skip to navigation

Deposit Accounts

Retrieve a customer's checking and savings accounts, including product details, account numbers, and status.
View as Markdown

Overview

The Deposit Accounts API returns the checking and savings accounts a customer holds with Citi. Use it to power account dashboards, onboarding flows, and any experience that needs to know which accounts a customer has.

Each account includes its product name, a masked account number, currency, and current status — everything you need to display an account list without handling sensitive data directly.


What you can do

Show an account overview — List every deposit account a customer has linked, with nicknames and masked numbers.

Personalize experiences — Tailor offers and insights based on the products a customer already holds.

Verify ownership — Confirm a customer owns a given account before initiating a transfer or payment.


List a customer’s accounts

1

Authenticate

Obtain an access token with the accounts:read scope. See the Authentication guide.

2

Request accounts

Call the endpoint to retrieve all deposit accounts linked to the customer.

3

Use the account reference

Each account returns an accountRef — a durable alias to use in Balances and Transactions calls.

{
"accounts": [
{
"accountRef": "acct_884201",
"productName": "Citi® Access Checking",
"type": "CHECKING",
"nickname": "Everyday",
"displayNumber": "XXXXXXXX7721",
"currency": "USD",
"status": "OPEN"
},
{
"accountRef": "acct_884202",
"productName": "Citi® Accelerate Savings",
"type": "SAVINGS",
"nickname": "Emergency Fund",
"displayNumber": "XXXXXXXX3390",
"currency": "USD",
"status": "OPEN"
}
]
}

Account numbers are always returned masked. Use the accountRef alias — never the raw account number — in subsequent API calls.


Account types

TypeDescription
CHECKINGEveryday spending accounts
SAVINGSInterest-bearing savings accounts
MONEY_MARKETTiered-rate money market accounts
CDFixed-term certificates of deposit

Security requirements

Citi uses OAuth 2.0 access tokens to authorize every request. Request the accounts:read scope and the customer will be asked to consent before your app can view their accounts. See the Authentication guide for details.