Internal Accounting Services-fraud

Hello there, @diaf.

I know why you'd be upset with our support team and how important to get your account secured to protect your financials. Let me provide instructions here to get this settled.

Once you are subscribed to QuickBooks Payroll you will get unlimited support. QuickBooks does not charge an additional amount to get you support.

As always, please don't hesitate to report suspicious calls, emails, or notifications from parties claiming to be from Intuit. You can do so here: QuickBooks Security team. Please provide more details so the security team has the complete situation.

If you have concerns, you can post them here in the community. Community is a 24/7 support that can help you achieve your goals inside QBO. We have the Community QBO experts who can assist you with your other concerns.

If you need assistance from our support, please ensure the phone number is from us. I'm adding the article for your reference: Contact QuickBooks products and services support.

I'm always around to help if you require further assistance with QuickBooks-related concerns. You can click the reply button below and enter your queries. 

@diaf 

Is the phone number the same?

https://www.internalaccountingservices.com

I fell for this scam today. I am also horrified but we have alerted our employees to be aware and to change their bank account passwords. I will be disputing the transaction with my credit card once it's posted (it's in a pending status now).

I keep trying to think back through the conversation and the reason I was calling Enterprise was to ask about about my renewal as I got a message saying it was expiring. My first mistake was not going through Quickbooks Help to have them call me back. I just googled a number for Enterprise and stupidly didn't pay attention to the website it was on. When I brought up my renewal question to the person who answered he seemed to very quickly direct me to allow him access my computer remotely by Team Viewer. I should have known that something was phishy when he quoted me the price.

Has anyone else found out more detail on whether or not their files were actually compromised? That is what I am most worried about.

I forgot to add that I had not mentioned anything about errors or problems with updates and that's what the guy started showing me with a bunch of code and saying I was reaching my limit percentage. Once the tech "finished" his work he had a supervisor call me and that person said for me to call them every 30-40 days to do a maintenance check and make sure everything was running smoothly.

@sanders-melody 

Can you access CAMPS and find your license code there?

https://camps.intuit.com

I fell for this scam!  I could not update my QB, and I could not do payroll.  I called the service number and was connected to this;  Again, I knew I was talking to people in India, but I have connected with other countries in dealing with QB before.  They diagnosed my problem and fixed it, but charged 6749.99.  I am horrifed.  They took over my computer, and all of my employee information is now in their possession.  Is there nothing I can do? 

We recognize the urgency of this situation, @kbwbbi. I'll route you to the team that can help you with this situation. 

It's understandably important to address this matter promptly, especially that your employee's sensitive information is involved. With that said, we urge you to promptly contact our technical team to report this issue. They're equipped to handle such matters with the utmost care and confidentiality, ensuring that your concerns are addressed efficiently.

To do so, here's how:

1. Visit this website: https://security.intuit.com/.
2. Go to Contact Us, then scroll down to navigate to the Security section.
3. From the Report technical support scams, click the Email security@intuit.com button.
4. You'll be redirected to an email website.
5. From there on, write your concern to inform our technical team about this scam.

On the other hand, you may also contact using the Help panel of your QuickBooks product. For more information about this process, please visit this article: What can we help you with?

I'll include this article you can read to learn how to protect yourself from any fraudulent activities in the future: Identify suspicious activity, phishing scams, and potential fraud.

It's our utmost priority to ensure that our users are well-protected and informed, @kbwbbi. You can always post or reply in this forum if you need further assistance regarding this matter. We'll be sure to help you anytime. 

 

@kbwbbi 

Can you access CAMPS and find your license code there?

Hi, i got scammed today as well by these same people. Were there any fiture consequences as a result. Such as identity fraud or them accessing your banking? I am so worried! Thank you for posting.

To report this issue immediately, and check if there's unusual activities happening in your QuickBooks account. We recommend to contact our technical team as soon as possible. They are ready to help with confidentiality and care, making sure that your concerns about suspicious activities are resolved and your account is protected from any unauthorized access.

Here's the steps on how to report:

1. Visit this website: https://security.intuit.com/.
2. Go to Contact Us, then scroll down to navigate to the Security section.
3. From the Report technical support scams, click the Email security@intuit.com button.
4. You'll be redirected to an email website.
5. From there on, write your concern to inform our technical team about this scam.

I'll also including this article to learn how to recognize official Intuit correspondence and websites: Identify suspicious activity, phishing scams, and potential fraud.

QuickBooks is dedicated to keeping your account safe. If you have any further concerns, please feel free to reply to this thread. We’re here and ready to help you immediately and ensure everything is secure. 

This happened to me today… since your experience happened a few months ago, can you tell me if you or any employee have had any fraud or scam issues as a result? 

This happened to me as well. I've spent all day online with Quickbooks online to no avail.

Here are my 4 case numbers:

XXXXXXXXXXX

XXXXXXXXXXX

XXXXXXXXXXX

XXXXXXXXXXX

How is this happening? I contacted support through my QBO account, they told me via the official QBO chat that this was a data file issue.  Theypassed me off to a third-party service which took over the remote session from my original representative,  actually fixed my initial issue, then bounced.  

Ian

I’m wondering the same question. The same thing happened to me in December. How do we know if our information was compromised??? How is QuickBooks going to help resolve this issue. Why have they not notified people that use this program. Obviously this is a big deal and every reoccurring issue for many.  

I too got scammed by them yesterday.  Almost the same scenario. I got the contact number off the Help field in Quickbooks.  Makes me feel like I got scammed twice.  I have spent the day changing passwords, but I feel the damage has been done.  I have also tried contacting the security team as outlined in this thread, but it doesn’t seem to be working.

the number for technical support needs to be taken off the help screen.

That's really unfortunate.  Intuit is certainly aware of this issue, but I was told that even though we are logged in, we should know that the help screen goes out to unprotected Internet where they can't be liable for what's out there.  Sounds insane and why they would allow external access through an encrypted financial software is beyond me.

I contacted my bank and blocked the charges.

Intuit, please fix your very obvious exploit point within your software. You know about it. Please fix it and please take legal action against the fraudsters.  Their website is: http://internalaccountingservices.com/

Thank you.  I’m going to dispute the charges as soon as it posts to my credit card.

did you have any issues with malware being installed on your computer or anything else abnormal?

I can't say for sure, but I think all they did was clear my cache to 'fix my broken database'.  They pulled up a Terminal screen and had some sort of Mac task manager running.. My thought is that was just for show.  I didn't see them add anything but I did step away for a few minutes.  Can't believe I fell for this... but you kinda have to assume that a help phone number, within the secure section of a financial software company's app, would be safe to call. 

When this happened to me, a member of Intuit reached out, was very compassionate, and told me that this was a matter that was very important to them.  The fact that the SAME THING happened to you is insane.

INTUIT!!!! TAKE DOWN THE PUBLIC INTERNET LINKS FROM WITHIN YOUR SECURE SOFTWARE AND SUE THE COMPANY THAT'S COMMITTING FRAUD AGAINST YOU AND SCARING YOUR CUSTOMERS!!

Thank you.  This makes me feel a little better.  I obviously, like others I presume, thought that a telephone number in the secure program would be a good phone number.  QB may have just lost my business over this.  I saw something running on the screen too, but it concerned me when my company info screen was opened and the person almost changed my information, but they didn’t do anything while I was watching.   No one from QB has reached out to me thus far.

I appreciate you responding.  QB needs to get their act together.

I too was scammed by the same company on Thursday 3/20/25

And now they keep contacting me to confirm the work was done so they can charge my credit card. Very strange. I've since changed all passwords and had my tech scour my machine to make sure they didn't leave any spyware etc. on it. Have any of the victims out there experienced any loss of data, theft etc. or just scammed out of the payment?

So sorry this happened to you too.  They have called and emailed me.  I’ve blocked them.  So far the charges have not gone through on my card.  I can’t tell that they did anything to my computer and I too have changed all my passwords.

I was scammed on April 30th.  They posed as part of QB’s Priority Circle.  The pattern was the same as described in other posts,. They build a big false straw man - like your files are corrupted,  and then they wrestled with the straw man doing and killed it so they can claim they did the work you retained them to do all the time know there was an easy fix.    They did remotes on employee’s computers which were not necessary.  After “fixing” employees computers then tried to do a remote on the admin’s computer to fix  the payroll program.  We finally woke up.  We worked with our hosting company to fix our “corrupt files” .  All that was needed was to uninstall and reinstall to get a new payroll service key which only took about 15 minutes.  They have an “ F” BBB rating because they do not respond to inquiries.  I should have been suspicious about the hard sell they used but like others our payroll system was down and we were panicking about the problem.  

Update:  My credit card was charged even though they continued to contact me saying they needed my authorization to charge my card.  I disputed the charge and I had a credit memo from Internal Accounting Services and a credit on my card within 12 hours of the dispute.  I have not noticed any security concerns as a result of this incident.