Is that email from citibank.com or citíbank.com?
If you think that last sentence was a mistake, take another look, as you may be the next phishing victim.
Cybercriminals are using internationalized domain names (IDN) to register domain names with characters other than Basic Latin. While the purpose of IDNs are to facilitate a multi-lingual Internet, scammers find ways to register and use domains that look very similar to legitimate ones. If the domain looks convincing enough, users fall prey to attacks involving ransomware, malware, and, eventually, data breaches.
Refer Here for Original Post and Source https://blog.knowbe4.com/homographic-domains-make-phishing-scams-easier