Hi david_levine7,

We've become aware of an issue with this email and our team are currently investigating this. If you still have this email in your inbox, please delete the email and don't click on any links or attachments within this. If you have already clicked on a link or downloaded something from the email please delete this immediately. Please see our security notice linked below for further information on this. 

https://intuit.me/2SZdLnT

In which case is there a chance that it has been compromised - I've received two emails this morning from this address with what appear to be rogue/phising emails with attachments which I don't intend to open or respond to.

Hi DWHI, thank you for updating this thread, we've since been made aware of an issue with this email domain and our team are currently investigating. Please delete any emails you have received from this address without clicking on any links or attachments contained within this - please refer to our security notice linked here for further information on this. If you have any queries or concerns, please reach out to us below. 

Received this today.  I am sure it is part of this scam. Did not click anything.  

GeekSQUAD

Dear Customer,

Thank you for your Subscription!
Here is renewal confirmation of Your Invoice No : #113-5416138.
We have successfully renewed your service.
Review your receipt and get started using your product.
For any assistance call us on +1 802 214 2006

Product ---------------- Quantity ---- Term ---------- Price
Computer Protection -------- 1 ------ 3 Years ---- 325.99 USD

InvoiceNo: #113-5416138
Date: 04/26/2022
Total: 325.99 USD

The amount has been already charged and will show up within 24 hours in your bank statement. If you wish to cancel your subscription and claim for your refund then call us on +1 802 214 2006 make sure your computer is on when you call.

Sincerely,
GeekSQUAD

+1 802 214 2006

email dated 5/31/2022 from [email address removed] stating they renewed my service  for  360 PC protection total $239.99.  they stated the amount was already charged and will show w/i 24 hours in your bank statement.  i called the number they listed 1 802 317 1559 (they said to make sure the computer was on when i called which was not on).

told them  i had not ordered what they were selling and what charge card were they using.

they hung up the telephone.

ned shepard.

Hi there, ned shepard.

I want to make sure this charge gets checked, and I'd like to redirect you to the best support group available to get this reviewed.

Please know that, aside from your subscription, QuickBooks does not charge for any other services, such as 360 PC protection. To confirm, I highly recommend reaching out to the 360 PC protection customer support or your bank. They can verify if the amount was really charged to your bank account.

In addition, if you receive another suspicious email, I suggest not clicking any links. Then, check out our security notices to verify if the email received is included in the reported suspicious Intuit emails.

I'm also adding this article to help you know how to recognise official Intuit correspondence and websites: Identify suspicious activity, phishing scams, and potential fraud.

As always, you can visit our QuickBooks Community help website if you need tips and related articles in the future.

The information I shared should help you avoid any suspicious emails from Intuit, ned shepard. If you have other questions regarding QuickBooks, I can help you out with them. Just leave a reply below, and I'll get back to you. 

Yea, I also got similar phishing mails recently. Knowing for sure it's not you but it really bring inconveniences to users: it circumvents my Email rules, and if I mark it as junk or block this address, I may miss actual notifications from your company. Plus this really discredit your company, people probably won't believe Intuit is secure anymore. Please check if your mail account and/or server is compromised.

I received an e mail invoice for 564.98. I did not r3equest to extend or buy add'l Norton  products. Is this a bogus bill or what?

Thanks for reaching out to us regarding this billing invoice you received, @doug1952.

I want to help you reach out to the right department to verify if the charge you received is a valid transaction. For now, this forum does not handle Account Management and billing concerns.

Calling or chatting our support is the best option to actually get the details of your account you have with us before. Here's how to get in touch with out agents:
 

1. Go to the Help menu then choose the Search tab.
2. At the bottom click on Contact us.
   
3. Enter the keyword Account Management and Billing in the What can we help you with? box.
   
4. On the next screen, scroll down to How would you like to connect with us section.
5. Choose your contact option to initiate a discussion with a live agent.
   

Let me know if you have other concerns about your QuickBooks account. I'll be right here if you need further assistance. Have a nice day.

I replied to the email. Am I compromised?

Thanks for joining this thread, @Your. I'll share some information about suspicious emails.

To begin, here are a few things to look for if you’re not sure whether an email came from Intuit or not.

• We’ll never ask for your personal info in an email.
• Our emails will always come from an email address that ends with @intuit.com. This includes @e.intuit.com.
• Any link we send you in an email will always be for an intuit.com address.

If you suspect that you have acquired a phishing email targeting the Intuit brand, proceed to the Intuit Online Security Center and click Go to security notices for further information. If you didn't see a matching email within the Security notices, choose the Report a suspicious email option to file a report.

Additionally, I've attached these links to learn how to recognize official Intuit correspondence and websites: 

• Identify suspicious activity, phishing scams, and potential fraud
• Intuit Fraud Prevention

Don't hesitate to comment below if you received suspicious emails. I'll be happy to help you. Keep safe!

Received an email from this email address I am pretty sure this is a scam as I have not subscribed to Norton lifelock.

 appreciate you for bringing this concern here, put Uluru. 

I've seen the attachment you added. Since the email indicates that it's coming from Norton life lock, I'd recommend contacting Norton Support Team first to verify the email. Contact them using their accurate contact details to avoid any fraudulent activities.

In QuickBooks, we can report any suspicious emails. If you encounter fake emails, you immediately report it by following these steps:

1. Go to this link; https://security.intuit.com/.
2. Click Contact Us.
3. Look for Report a fake email (or phishing email) and click on it.

Here's an article that'll help you recognise fake emails: Identify suspicious activity, phishing scams, and potential fraud.
 

Securing and keeping your account safe is our priority. If you have other concerns about receiving unnecessary emails, please don't hesitate to report them or post them here. I'll be around to help.

The issue happened again Several users in my company got some phishing emails coming directly from 

[email address removed]

The following information was in the email along with an attachment.

The invoice is now paid.
------------------------ Sales Receipt Summary ---------------
------------
Receipt # : 
Receipt Date: 4/7/2023 6:30:42 a.m.
Total: 12,525.00
The complete version has been provided as an attachment to this
email.

Thanks for bringing this to our attention, @ydelacruz.

It's our top priority to secure and keep your account safe. We have a website where you can report phishing emails and other security issues. 

Please take note of the following information to easily spot fake emails:  

• We’ll never ask for your personal information in an email
• Our emails will always come from an email address that ends with “@intuit.com”
• Any link we send you in an email will always be for an “intuit.com” address

Any time you have security concerns, you can send the information directly to our security team. Here's how:

1. Go to the Online Security Center page.
2. Click Contact Us.
3. Look for Report a fake email (or phishing email) and click on it. 

Additionally, let me also share these articles on how you can better protect and secure your account: 

• How to Recognize And Report Suspicious Emails
• How We Keep Your Data Safe

Please let me know if you have any other issues or concerns about your Intuit account. I want to make sure everything is taken care of for you.

We received same email this week regarding the GEEK squad with this in the body:

Hello Jenny04, if you don’t use Greek and you think It is a spam email then please forward it to our team here thanks

One of my users also received an email spoofing this email address today 4/19/23. There was an attachment, which was not opened obviously. Very concerning. I reported it to [email address removed].

The message reads as follows:

Subject: Your Invoice 366598 ~Payment Processed

I'm aware of how crucial account security is, @jnbanda. We will exert every effort to stop these phishing emails.

Sending these phishing emails to our security team is a smart first step toward putting a stop to this as soon as feasible. I appreciate you doing so. 

If you or your users have more security issues, you can contact and report them to our security team. Rest assured that your concerns have been heard and will be dealt with accordingly. This way, they can take action on it as early as possible. You can follow the steps outlined by my colleague. 

Additionally, let me also share these articles on how you can better protect and secure your account: 

• How to Recognize And Report Suspicious Emails
• How can you help protect your business from fraud

If you have any further questions about data privacy and security in QBO, please leave them in the comments section below. I'll make every effort to resolve it as soon as possible. Keep safe, @jnbanda. 

Thank you for your comment. I sent the email headers to the security team as well. Glad to know that you all are actively checking the forums and reviewing security concerns.

Got an email from [email address removed]

In the email they are blackmailing me and telling to pay them $400 in bitcoin. Please fix your stuff…

Welcome, and I appreciate the attachment you included, @Buitragon. To ensure this email gets investigated, I recommend contacting our Support Group that best handles this situation.

QuickBooks prioritize your security and protect your data. Since this suspicious email includes links, I encourage you not to open or click them. Please see this page for the list of email scams: Security notices.

You can get in touch with our Security Team and report this. From there, we'll address your fraudulent email experience on time. I'll show you how:

1. Go to this link; https://security.intuit.com/.
2. Click Contact Us.
3. Look for Report a fake email (or phishing email) and click on it.

My colleagues shared above the few indicators to look for if you're unsure whether an email originated from Intuit. To recognize official Intuit correspondence and websites, visit this article: Identify suspicious activity, phishing scams, and potential fraud.

Feel free to read through these blogs to learn more about how we safeguard your data and prevent fraud:

• How we keep your data safe
• Small business fraud prevention tips

This information should help you avoid any suspicious emails moving forward. I can also help you with any other QuickBooks-related tasks. Stay safe.