I suppose one good thing in this is that Citi caught this error on its own and not as a result of a class action suit. So customers will receive the full value of their overpayment, rather than a puny voucher dictated by a court where a large chunk goes to the lawyers bringing suit.