I am a server administrator for ServerMatter and I have dug in on this issue for our clients.  Since we host email AND we use QuickBooks online our own clients were saying they never got our invoices.  That's a real problem.

However, since we actually host the email for some of those clients,  we are able to see both sides of the coin.  So we created a bogus email account on our server a bogus Invoice on QuickBooks Online which we them emailed within QuickBooks and as expected - never got the email.  

We figured out why and hopefully it will help some of those on this post.

In case Intuit will not allow the post of the video, you can searching youtube for the words servermatter QuickBooks spam.  The video is here:  https://www.youtube.com/watch?v=7DjBV2iB48g

Hi everyone! I wanted to update one more time before we hit the weekend. I’m connected with the teams who are working on this issue, but don’t have any official communication to share just yet. As soon as I do, I will update you here again, or at the latest will check back in on Monday morning. 

Thank you again to everyone who has contributed information and experiences to this conversation. I will be back with more soon.

Some customers still not receiving my invoices.  When will this be fixed?

Ami,

I must have missed your Monday morning update?

In the meantime I have a case open with James U. of the Intuit Escalations Team.  On Friday I briefed him in deoth on a 30 minute phone call with extensive screen shots and narrative.  I also recorded a call to the scammers posing as their email recipient.  After 9 minutes their 'paypal agent' had me open 'anydesk' so he cpuld assist me in investgating and removing the $698 charge on my paypal account.  such a helpful young man that scammer! There is a phone number where you can hear it, but I may put it on youtube.

The end result of this server exploit is much more than our invoices bouncing, people are losing big buts to the fraudsters.

QuickBS is moving incredibly slow   This just does not seem to matter to them.  So I am investigating a replacement accounting package.  Any suggestions?

Hi again everyone. My morning update turned into an evening update, but I’m still with you!

I spoke with the team today and they are currently implementing measures to fix this issue. Please know that this is a high priority for us and will remain a focus until fully resolved.

I will continue to update this thread as I am able to share more. 

Thank you for the update (and all of those that have contributed so far), I'll be checking back daily and hopefully have some good news to give our clients using QB soon.

---

@T3chNoid wrote:

So I am investigating a replacement accounting package.  Any suggestions?

 

---

@T3chNoid 

We can share several options to explore. Contact us in private and you may also consider to purchase a 3rd party conversion service if required.

Thank you, we are also affected and have reached out to QB to resolve many weeks ago. Please keep us updated!

Any update on this?

Same issue here. We have been using QB for over 8 years now and suddenly more than half of the emails sent through QB are not getting delivered. We have customers ordering multiple times a day, some of the invoices get delivered some don't.  I was added to an investigation... for several months now I get the same lame excuse email: Use the download button and send email manually - Time to look for a different provider if QB doesn't get their IPs from the spam list. 

Several months?  About how long has this been going on, would you know?

Around 2-3 months now 

I'm fed up with the delay in resolving this.  I suspect this is affecting way more people, but that they aren't connecting the issue to the IP addresses.  I googled "quickbooks emails bouncing" and went in circles through solutions that made it seems like the issue was on my end.  I only found this thread because someone linked to it from another question.  185 emails bounced yesterday.  I have clients complaining that they haven't gotten an email in MONTHS.  Why is this not being prioritized?

Apparently this is still going on and needs to be a way to keep them from being spoofed.  On the last email it was like this.

Pretending to be Geek Squad using a known IP (Denver, CO) that is not associated with them to get you to open a pdf file with an auto loader trojan. Intuit E-Commerce Service ([email address removed]) is what it is spoofing to show this email since that is a listed ok for most email systems but not the actual originating email. Using a padded email address from [email address removed] using a SMTP at IP: 10.217.147.138 (Los Angeles, CA)

Another Monday morning, another Monday of failed email deliveries. 

2 months since this problem was reported.  Where are we with a solution?  Is it time to research another way to get paid? 

Because Intuit is still able to invoice and get money from you. If they were having this issue getting you invoices, believe it would have been fixed within a day or two of being reported. 

---

@jesse41 wrote:

Is it time to research another way to get paid? 

---

Maybe. Purchase a 3rd party conversion service if required.

Things like this are why so many companies are moving to Netsuite from what I hear. Just seems like a lack of caring on the Intuit QB side. This is an issue that should have been solved many many weeks ago, espcially with all of the responses outlining EXACTLY what needs to be done to fix it. Lets go Intuit and SendGrid. Get those IPs delisted. 

SAD SITUATION.

I AM ASKING FOR 50% OFF TO COMPENSATE FOR THEIR INABILITY TO FIX A RELATIVELY SIMPLE PROBLEM.

IF THEY CAN'T FIX THIS HOW CAN I TRUST THEM TO GET THE ACCOUNTING CORRECT.

I HAVE CLEARLY IDENTIFIED THE ISSUE.  PROVIDED THEM WITH PRECISE DETAILS. SPEND AN HOUR TALKING TO THEM. OPENED A TICKET WITH SENDGRID. DISCUSSED THE ISSUE WITH SPAMCOP.

ZERO IMPACT.

TO BE CLEAR, THE BLACKLISTING THAT BOCKS DELIVERY OF INVOICES IS DUE TO AN INTUIT SERVER EXPLOIT THAT ALLOWS MASSIVE DISTRIBUTION OF PHISHING SPAM WITH INTUIT CREDS THAT ASKS PEOPLE TO CALL A PHONE NUMBER TO RESOLVE A FRAUDLENT CHARGE WHERE THE 'AGENT' REQUESTS THE RECIPIENT ALLOW REMOTE ACCESS TO THEIR COMPUTER USING ANYDESK.COM TO STEAL YOUR IDENTITY AND MONEY MOSTLY PREYING ON THE ELDERLY.

I HAVE DETAILED THIS TO QUICKBS INCLUDING A RECORDING OF A 9 MINUIT PHONE CALL TO THE SPAMMERS.

QUICKBS, WHAT DOES IT TAKE FOR THIS TO BE FIXED???????

Earlier today I received this from QB support:

Good news, the investigation After sending invoice customer receives message: Error: Invoice undelivered has been resolved for QuickBooks Online. If you are still experiencing this unexpected behavior, we would ask you to reach out to your online support team for further assistance.

And then recieved a call and email from the contact in support that has be managing my open case.  He was looking for feedback on the functionality.

At this point I can see the invoice emailing is returning to functional.  Without certain details I can’t close this out though.

167.89.58.229 is no longer listed in SpamCop and was successfully used in an invoice test this afternoon.

167.89.58.138 is listed in SpamCop.net though it will be off that list in 17 hours if no other spam is sent from that address.

167.89.82.160 is listed in SpamCop.net though it will be off that list in 18 hours if no other spam is sent from that address.

I would expect invoices sent from either of the last two IP addresses to fail in some cases until they delist tomorrow.  Hopefully QuickBooks has those two offline until delisted.

Some of the addresses are listed in rarely used spam lists such as JustSpam and S5h, but those are so unused that they are not an issue and I would expect them tp fall off soon.  The listing in SORBS that I noted last week has already delisted.  QB should be watching this, all the time, and there are services that will monitor it for them.

This is going to need monitoring for a while as we don’t know how the fix was done.  Hopefully this is a solid long term fix and not a Band-Aid.

The sad part here is what it took to get this fixed, this should have been done months ago.  What a total waste of so much time by so many people simple because QB could not do their job.  

Frankly I want to see some coin back, I think it is deserved.

I will check back in around noon tomorrow.

Not much substance to that reply.
Basically, they said, "We fixed it, take our word for it."

I generally don't accept that kind of response and would like to see a root cause and a high-level description of the fix. Here's to hoping it's resolved, but I'm not holding my breath.

@Ami_D Status update please?

Not fixed...

Rejection Type:10020

Rejection Description:IP Found in RBL

Event Time:06/14/2022 at 05:24 PM

Rejection Information:spamcop.mimecast.org

Blocked - see https://www.spamcop.net/bl.shtml?167.89.82.160.

Rejection Type:10020

Rejection Description:IP Found in RBL

Event Time:06/14/2022 at 05:14 PM

Rejection Information:spamcop.mimecast.org

Blocked - see https://www.spamcop.net/bl.shtml?167.89.58.138.