A Citigroup subsidiary failed to detect fraudulent invoices and work estimates in a receivables factoring program for an oil industry provider.