I believe I may be added to the scam list. In response to seeking help in the community, I received the attached private message, called 800-845-9666, verified my info including license #, asked to download Rescue by Log Me In and gave me code. At which point I questioned to whom I was speaking. Was given a call back number of 800-597-6409 ext 209. Cannot find either # published and do not know if I was in touch with QB.

@switt123 

Ignore it. 

Just to say it happened to me as well.  Same scam after posting in these boards.  Does anyone have any aftereffects?  By the way, all Intuit employees who are referring to the [email address removed] email, I was not able to reach that one:  

Address not found

Your message wasn't delivered to [email address removed] because the address couldn't be found, or is unable to receive mail.

Any other suggestions?

No after effects here, other than some sleepless nights.  My IT dept. did run scans and removed the one file that had been placed on the desktop (showing all the "errors").  They were supposed to call back and continue the process as I didn't have time for them to run the repairs and they were going to call and do this and collect payment but they never did.   I think it was an inside job because the case number they gave me was a legitimate case number from years earlier, and they were very knowledgeable of the program.  I think they knew I had realized it was a scam and reported it and that was why they didn't call back.  Good luck to you, certainly was an eye opener.

Thanks BBTX for letting us know.  I also thought it might be an inside job because the guy (named Jacob Summers) did help me with my problem.  Also, everything looked so official - so I agree with you that these might be Quicken support people in their spare time.

I mean quickbooks support people

I want to verify this scam.

However, my scenario is a little different. In my version, a text  box popped up inside of my Quickbooks Pro Desktop. It said: 

Problem

QuickBooks Unrecoverable Error. A data issue prevents Quickbooks from continuing.

Solution

Rebuild your data now-Close all windows and choose Utilities and then Rebuild Data from the file menu.

If you see this message again, call Intuit Technical Support at [phone number removed] 

I did as instructed, but of course the window reappeared. It sits right in the middle of the screen and can't be moved by mouse. I called the number and expected a gauntlet of bot prompts, but to my surprise, "Mark" the technical support person answered right away. After conveying the situation, "Mark" asked me to allow him to remote link so he could see the problem, he used a third party viewer(not the link in Utilities) pulled up a log and pointed to the supposedly corrupt files and used the same script on me that you just conveyed. He said he would get 2 technicians working on it right away, but that I unfortunately didn't have the service pack and would need to suscribe....I felt I was being scammed right then and told him so before he got to the price. He assured me it couldn't be a scam since it originated within the QB program. I called QB Technical Support (I googled the number). I spent 20 minutes in the bot line before I got a human, and was transferred to a person in technical support. I first asked her if she could confirm that the number I had previously called (phone number removed) was associated with Intuit. She said she didn't think so. She asked me to open up a remote viewer from the Utility menu in QB and we spent the next 2.5 hrs trying to get that box to disappear. After downloading and reinstalling QB , and installing updates for the 3 rd time. The box was gone. We celebrated.

20 minutes ago, the box reappeared. I'm crushed. My feeling is it that there are bad actors inside Intuit running scams. I had my ID stolen and my tax account hacked through Intuit last year. They were less than helpful. I'm lost at this point. Who knows what they have access to and what they'll do with it.

Any advice from the community would be appreciated!

Hi there, @Mike in Florida. I appreciate you chiming in on this thread and bringing this concern to our attention.

Beforehand, please know that we apply strict guidelines and practices to protect all of your personal information. Hence, these are common security risk issues.

I'd suggest reporting this suspicious activity to our Security Team to prevent it from happening again. I’ll show you how to do it:

1. Go to this link: https://security.intuit.com/contact-us.
2. Look for Report technical support scams.
3. Click Report tech support scams.

Alternatively, you can report any suspicious calls and fraudulent acts directly to us by emailing them to spoof@intuit.com.

With regards to the unrecoverable error you've encountered, I've got this helpful guide here for the detailed step-by-step process on how to sort these out: Unrecoverable errors in QuickBooks Desktop.

If need be, you can always reach out to our QuickBooks Desktop Support. This way, they can pull up your account in a secure environment and investigate your concern further.

Moreover, I’ll be adding this article for you to review so you’ll be able to recognize official intuit correspondence and websites: Identify Suspicious Activity, Phishing Scams, and Potential Fraud.

You can always reply if you have any QuickBooks-related concerns. We're always here to guide and assist whenever you need help. Have a good one!

@Mike in Florida 

You are using QBD 2022, correct?

Can you find the following files in the same folder?

90s.trf

QuickBooksDownloader.exe.config

QuickBooksDownloader.exe.manifest

Hi there, I believe I got scammed yesterday. For the past few weeks I kept having issues where my quickbooks (desktop enterprises 2022) would crash shortly after logging on. I asked my boss , who is the admin if he was having this issue and a few others that use QB in our company and none of them were. I googled what to do when this happens and tried a few things but nothing worked. I then found another article and tried their steps. I wasn’t paying attention and thought I was on intuit reading the article but it was not intuit it was accountinghelpline that had blogs of articles how to fix these issues. Anyways a chat window popped up asking me what version of QB I was using and if I needed help. I then proceeded to give my name and number. Within two minutes I received a call and they were asking me what I’ve done so far and then asked if could remote in and to type in logmein and gave me a code do they could access the issue. Like and idiot I did this. Then they tried looking at updates to make sure everything was up to date and said that looked good. He put me on hold for like 30 seconds and came back and sad let’s try something else and asked if I was the admin I said no. He did a control 1 and pulled up program info on QB and then control 2 and showed me some errors and said we need to go to utilities and then verify data and rebuild but bc I did not have permissions for this the admin would need to call back. He gave me an 844 number and his extension and a case number, he also pulled up notepad and typed this info. The 844 threw me off so I googled and could not find anything about that number. I then called intuit and spoke with a woman and she said no case number so was not them. I alerted my iIT department and they checked my computer and had me run a malware bytes scan and then Sophos. Nothing was detected so hopefully that means I’m okay but I’m still worried. He never asked for money or anything but maybe he planned to when spoke with the admin? Anyways I’m still upset about it and so mad at myself for letting someone take control of my computer. I went back to that website too and tried asking the chat person questions about their company and they closed the chat on me so that’s just a little suspicious too ugh! Could they do anything since saw the license number ? Or could something have been placed to actually corrupt our company file and the IT scans just did not find it? Thanks for reading this long hideous story! 

Your account's security is our top priority, I2001.

Having the license number won't give them direct access to your data or account without permission. To ensure your books are secure, I'd recommend contacting our QuickBooks Support Team again. They can double-check and share other applicable suggestions to prevent any issues.

Also, our QuickBooks representative won't call you unless you initiate a callback request from the Help menu. To protect your security and privacy, I encourage reporting any suspicious calls from parties claiming to be from Intuit. 

Here's how:

1. Go to this link: https://security.intuit.com/contact-us.
2. Look for Report technical support scams.
3. Click Report tech support scams.

You can also report suspicious calls and fraudulent acts by emailing them to spoof@intuit.com.

To resolve issues that cause QuickBooks Desktop to crash or stop working, I'd suggest browsing this article: Run Quick Fix my Program from the QuickBooks Tool Hub.

Additionally, I've added an article that'll help you identify and protect yourself from tech support scams: Guard your Business against Fraud. 

We always take this matter seriously. If you notice suspicious activities in your account, please update us. We're here to lend a hand.

I had a user get the exact same message. It's done by hijacking quickbooks built-in browser. You'll find an html file that contains the error message, along with some other files like IntuitDownloadManager.exe and QuickBooksDownloder.exe in users\public\documents\Intuit, along with registry entries to launch those exes at boot. 

The malware checks to see if Quickbooks is running, then after a short delay shows the error message, and closing the error message closes quickbooks. 

Was relatively easy to remove, but I have no idea how the malware got on the pc to begin with. We did recently have the actual real quickbooks support help us about a week ago. Just sayin'. They did appear to use remote software that could only allow viewing and highlighting things, but this has me wondering. 

I had an attempted scam today via a chat room I found under my intuit search for help as invoices were all 

messed up with the printing. The chat person said he would have the data services team call me. They did. 

I actually gave them my card for the subscription fee but it didn't process correctly and I wasn't given the email - they asked me to complete the permission to charge the card forms again but by that time they were logged into my quickbooks and I was on the phone trying to find out if they were legit. 

Wish quickbooks support was quicker and more aware. Anyway it took a while but I bumped them off and cancelled my virtual card number and my credit card so they won't be able to charge it. 

In the end my problem was remote pc's new update. Not even quickbooks. I feel beaten up. Not sure if any virus seeds were planted, nor what may crop up next. I trusted the link that took me - to what I thought, was intuit. Won't make that mistake again. Spent hours of extra stress on all this today. 

Safeguarding your account is always our main priority, @Sheels.

I know how important this matter is. To secure your account and check everything up, I suggest contacting our support team through the Help icon. With our Contact feature, you can ensure representatives are legit and won’t ask for assisting fees unless you’re subject to it.

You can also report this incident to Intuit Security Center. Here are the steps to do it:

1. Visit this website: https://security.intuit.com/contact-us.
2. Click the Contact Us tab.
3. Find the Report technical support scams box.
4. Select Report tech support scams.

You can bookmark this guide to recognize official Intuit correspondence and websites: Identify suspicious activity, phishing scams, and potential fraud. This helps you spot fake emails and prevent customer support scams in the future.

Don’t hesitate to add a comment in this thread if you need further assistance or have other QuickBooks concerns. The Community is here to help. Keep safe!

This is 4 years later and Edward Lamb is still at it. 

They have a website called Data Service Solutions out of Plano TX and

did the exact same scam on me yesterday. It's awful that they are still out there and able to do this to people.

I posted about it on my facebook page and two other business owners had the same scam done to them. How can these people ever be stopped?

Thank you for this. The exact same scam perpetrated 4 years ago is still going on with the same names being used - Edward Lamb for one. Not sure what good reporting it does. I called Quickbooks during the scam while they were on my computer and it's hard to believe that after I told the technical support person what was happening to me in real time and that I needed to verify if I was being scammed and quickly, the rep asked me what problem I was having with the printing of my invoice. I had to tell her three times that I thought I was becoming a fraud/scam victim in real time and I needed her to act on that as a priority - the invoice issue would have to take a back seat. I asked for a supervisor after going through that 3 times. Since this is 4 years after the first poster, I would think quickbooks tech support would be better informed and ready to assist. Even the supervisor asked me what my invoice issue was! I had to practically lose my mind to get the focus of the call shifted to stopping a fraudulent action in real time. In the end as she finally informed me about what quickbooks legitimate data service (Plus) subscription was, she said nothing costs what they were charging, so I was able to boot them off and stop them. I was just lucky that their first attempt to process my paperwork and charge my card was not working and they had asked me to fill in the forms again. I stalled them while on the phone. Then cancelled the virtual card number and the main card it was attached to. I saved myself almost 2000.00 but just in the nick of time. Getting information on this from quickbooks on the phone as it was happening was laborious and stressful. That should change right away. Everyone there should be informed so they can take these calls, faster and better. Thank you. 

@Sheels 

This one?

https:// dataservicesolutions.com/

yes

yes same one. 

I hear you, @Sheels.

Thank you for letting us know about your experience and pointing out how 

you have interacted with the support system claiming they come from our Data Services team.

We at Intuit always ensure your data is safe and secured in the same way as the process of how we require certain information from you. Therefore I give you this information so you can identify any suspicious emails.

To spot fake emails:

• We’ll never ask for your personal info in an email
• Our emails will always come from an email address that ends with @intuit.com. This includes @e.intuit.com
• Any link we send you in an email will always be for an intuit.com address

This article explains in detail how to recognize official Intuit correspondence and websites: Identify Suspicious Activity, Phishing Scams, and Potential Fraud.

I highly recommend reporting the emails you receive if you can identify or assume they're a scam. Send your report directly through this link: How you can Reach out to us with your Privacy and Security Questions?.

Please know that I'm only a few clicks away if you have any other email questions or privacy concerns. I'll be more than willing to assist and lend you a helping hand.

@JonpriL   You stated 

• Our emails will always come from an email address that ends with @intuit.com. This includes @e.intuit.com

So do the Spoofs and scams.  Stop misleading customers.  

---

@Just_me wrote:

@JonpriL   You stated 

• Our emails will always come from an email address that ends with @intuit.com. This includes @e.intuit.com

 

So do the Spoofs and scams.  Stop misleading customers.  

---

@JonpriL 

Please don't use (or remove from your records completely) this misleading response again. When a scammer can send an invoice via QB Payments, I would say that it is a valid invoice approved by Intuit.

I have been getting the popup warning as well.  I did call the number and since they did not validate my Intuit/Quickbooks account prior to asking for control of my laptop, I hung up.  However how do I get rid of the annoying popup?  It keeps recurring.  I have tried all of my security software, reloaded Quickbooks, ran Quickbook Tool Hub tools.  Help if you can please. 

@SVP Treasurer 

You are using QBD 2022, correct?

Can you find the following files in the same folder?

90s.trf

QuickBooksDownloader.exe.config

QuickBooksDownloader.exe.manifest