Has anyone had their invoices intercepted requesting an alternative account should be paid

Richard247 · ‎March 10, 2023

Customers sent a follow up email by someone with an email address different by only 1 letter so easily missed, requesting that they pay into an alternative account. It seems that this originated from Iceland! What I don't get us that the invoice would have been sent through Quickbooks

paul72 · ‎March 10, 2023

Hi @Richard247

Most likely is the customer's email account has been hacked / password has been compromised. Tell them to change their password(s).

Do you cc the invoices to another address?

That email could have been hacked - change password.

The other two options are that your email account has been hacked / password has been compromised (change password) or your QBO account password has been compromised (change password).

Given that the scumbag used an alternative email address (you say one letter different) it's unlikely that it's your email or your QBO account that's been hacked.

(if they had access to these, they could send an email from your account and/or amend your invoice template which would have even more chance of 'success').

Hope this helps.

View solution in original post

CharleneMaeF · ‎March 10, 2023

This is unusual, Richard247.

Please keep in mind that your privacy is our top priority. QuickBooks Online only sends the invoice email to the address that you've added in the system or in the BCC field of the message. I'd recommend reporting the phishing or fake emails your customer received.

Here's how:

Go to the Online Security Center page.
Click Contact Us.
Look for Report a fake email (or phishing email) and click on it.

You can also reach out to our support team who can help you determine if the email is from Intuit or a possible phishing email that needs to be forwarded to our security team for assessment.

Additionally, I've added these articles that'll help you learn more about recognising official Intuit correspondence and websites and keeping your data secure:

How We Keep Your Data Safe (US article but works UK)
How To Recognize And Report Suspicious Emails

Please let me know if you have any other issues or concerns. I want to make sure everything is taken care of for you.

paul72 · ‎March 10, 2023

Hi @Richard247

Most likely is the customer's email account has been hacked / password has been compromised. Tell them to change their password(s).

Do you cc the invoices to another address?

That email could have been hacked - change password.

The other two options are that your email account has been hacked / password has been compromised (change password) or your QBO account password has been compromised (change password).

Given that the scumbag used an alternative email address (you say one letter different) it's unlikely that it's your email or your QBO account that's been hacked.

(if they had access to these, they could send an email from your account and/or amend your invoice template which would have even more chance of 'success').

Hope this helps.

Topics

Training

Community

Resources

Has anyone had their invoices intercepted requesting an alternative account should be paid