ID Notify login. How do I know I can trust the email?

Your safety is our priority, and we'll help you check the email, gatehealing.

We appreciate you for bringing this matter to our attention and spreading awareness about this. We are committed to protecting and securing the personal and financial information you entrusted to us. Before opening a link in an email, make sure that it’s a trusted site like www.quickbooks.com. If it looks suspicious, search the site in your browser and don’t select any links in a suspicious email. Then, please forward it immediately to the Intuit Online Security Center. Just don’t cut or paste content to keep tracking info and delete the email from your inbox. Also, please secure an antivirus program to your computer and make sure it's up to date so that it can detect any malware or viruses.

I also added this article for you to see the updated e-mail address of the Intuit Security Team and to know more about the latest security information: Recognize and report suspicious emails (Phishing). You can also contact our Customer Care team should you need to clarify an unresolved reported case on your part. Here are articles for your additional reference: 

• Is this email I received a legitimate communication from Intuit?
• Phishing, Pharming, Vishing, and Smishing
• Online Security Center

As always, feel free to visit the Community at any time. We're here to help in any way we can.  You have a good one. 

Thank you, but in terms of the ID Notify product offered via TurboTax, what is the URL that I should use to log in with? I do NOT want to rely on an email. . .sure, I'll send it in to the security team, but I am asking how to find the safe URL??

I want to ensure this is taken care of, @gatehealing.

To fix this, I'd recommend getting in touch with the TurboTax Support team. This way, they can give you the specific URL that you can use to log in.

Please check this article to see the latest information from Intuit on how we protect your data and how you can protect yourself from email scams and other security risks: Recognize and report suspicious emails (Phishing).

Keep me posted if you have other questions. I'm always here to help. Take care!

@gatehealing Were you able to get an actual url?

Good thread. I received an IDNotify email, when I clicked the link my email (outlook) security stopped it and flagged it as suspicious 

I'm very disappointed to see that not only is there still no clear answer, neither here nor at other intuit sites with similar questions. I am even more disappointed to see that intuit is still recommended that you click a link in an email to access IDnotify and have not updated that info! See for example here: https://ttlc.intuit.com/community/account-management/help/how-do-i-log-into-idnotify/00/26907/messag...

+1 to the disappointing response to a thread raising a legitimate security concern. Boiilerplate responses about how to detect phishing are not helpful when the problem is that Intuit is sending us mail which looks like phishing.

I just had the same issue.  There should be a way to do this from within your Intuit account, there's no way I'm clicking a random e-mail about an Identity warning. 

Just had this same issue. Three emails in the past four hours from mail.idnotify.com. Can confirm, these answers suck. Why is IDNotify soo sneaky about their site and helping people?

I've been a customer for many years.

My experience today: I receive emails from IDNotify identifying a security thread.

As a user, I am asked to click a link received via email, like this thread complains about. That's already troublesome and an arcane and insecure approach to authentication.

Since there was trouble between the Turbotax/Intui API connecting with Experian/IDNotify API, I hit an error page with a phone number. When I called the IDNotify number I immediately got an automated prompt requesting their SSN and Zip Code.

To clarify -- I get what could easily be perceived as a phishing email that is followed up by a failed login, which is followed up by a support number that immediately asks for SSN. For what it's worth, I was logged into Intuit's sites in another browser tab too, so it's not that I entered an invalid password. The auth mechanism broke.

This is completely bonkers that a SECURITY product operates this way.

I'm flabbergasted that this is how you're attempting to operate and disgusted that I paid extra for this tool. Here in this community thread you're touting security as your number one priority and you're using security methods that have been proven vulnerable many years ago.

To make matters worse we're going into tax season and I can't look at my account audit trail at all presumably due to traffic throttling. So now I am concerned I've been hacked and can do very little to self-remediate other than change passwords and pray to some deity. I'm supposed to trust Intuit with all of my financial data? This is disappointing.

Totally agree.  I got a notification today that says "Your SSN was found on the Dark Web!" but then in the body of the email it says it is my driver's license number, and due to a site breach with a vendor with whom I do not have an account.  Everything about it screams phishing, but there is no way to check it except logging into IDNotify via the email link?  Hell no!!

I will NOT be spending any money this year for this crap monitoring.  

Thanks everyone for revealing the incompetency and danger of using intuit/quickbooks products and the failure of IDNotify as a supposed benefit. I can't beleive I fell for the same exact phish and wouldn't have been able to conclude anything without this VERY well presented post from gatehealing. You presented exactly the situation and they flipped all their users the bird and left us hanging.

I can't believe it is now 2023 and it seems as if nothing from this thread has changed. Intuit seems to have devolved into the mantra of "Do absolute minimum, maximize profit" mantra of most other companies. 

Same issue as everyone else above, really suspect looking email from "IDNotify" with a link absolutely stuffed with random characters and starts with garbage like "click1.mail.idnotify" at the start, and that sure doesn't look like a safe link to a secure login to me. It is utter and complete nonsense for ANY company to require you to log in to their site through an email, much less a "Security" company. 

Absolute trash. 

Your reply does not provide any help to the question being asked. 

This is still a problem people are having TWO YEARS after the initial post. 

Nobody should EVER log in through an email, that is not a legitimate expectation to have in 2020, much less 2023. 

Your response is useless and your company and all of its products are money-grubbing borderline scam pieces of trash. 

My guess is you won't though and are either a bot or just validation that my opinion of Intuit and anything it affiliates with is trash.