If the email address ends with @intuit.com, that is legit, @AANDZLAND.
Intuit will never ask for your personal information. To learn more about how to spot fake emails, check this resource: Identify suspicious activity, phishing scams, and potential fraud.
Speaking of PCI compliance, QuickBooks requires merchants who process, handle, transmit, or store credit card data to follow a set of security standards to protect customer payment card data.
To know more about it, feel free to check this article: Learn about QuickBooks PCI Compliance.
Feel free to add a Reply below if you have more questions or concerns.