The settlement announced Thursday requires Citigroup to buy back securities from retail customers, charities and small to mid-sized businesses by Nov. 5.
Citigroup will also have to pay New York state a $50 million civil penalty, and a separate $50 million civil penalty to the North American Securities Administrators Association.
Citigroup did not immediately return a call for comment.