Hi there, rjsneltzer.
Let me share some info to know if someone is using a phishing email in QuickBooks.
Before we proceed, can you tell me if you're using QuickBooks Payments? This feature allows you to add links to invoices so customers can pay online. All they need to do is follow the link in the email. For additional reference, check out this article: Take and process payments in QuickBooks Online with QuickBooks Payments.
In addition, customers can't do anything with the invoices that you've sent. All they can do is review the transaction and pay it.
If you suspect your customer's email account is used for phishing, I'd suggest going to our Intuit Online Security Center page and selecting Go to security notices. This will help you spot scammers and see the updated list of fake Intuit emails and customer support scams.
Moreover, you can check these articles for additional guides on how to protect your account and how we keep your data secure:
Don't hesitate to post again if you have other questions or concerns about phishing campaigns or handling customer payments. I'm always around ready to help. Take care and stay safe!
