cancel
Showing results for 
Search instead for 
Did you mean: 
nsimoneaux
Level 2

Hacking

Everyone please be aware of what happened to me.

Someone hacked into my Quickbooks Desktop, and opened a Quickbooks Online account on my company name and my quickbooks merchant account.  The hackers then added a debit card to the QB Online account and started invoicing people and charging the credit cards.  They had the money deposited to the debit card and the hackers got away with several thousand dollars.  

I contacted QB support as soon as I found this, which was a few hours after it started.  QB support was not able to shut down the Online account for about another 48 hours.  Now, the credit cards that were used to pay these invoices are disputing the charges, and QB is taking the money out of my bank account to refund the charges. 

Most of the money never got into my account in the first place, it went to the hackers debit card.  Three of the transactions did get to my account and I understand and want to return that money back.  

I have challenged the disputed charges with lots of evidence, but have no response to the challenge from QB yet. It's been about 2 days since I challenged the first dispute.  I have submitted police reports, account numbers and lots of evidence to support my case.

Since this started, I have shut down the merchant account in question, but QB is still using that account  to take money out of my bank account that was associated with the merchant account.  Now I feel that QB is stealing from me.

20 Comments 20
MadelynC
Moderator

Hacking

I can help you close your QuickBooks Payment account to ensure there's no transactions will be processed, @nsimoneaux.


I can understand why you'd be upset. And I know how important to get your account secured to protect your financials. Let me provide instructions here to get this settled.


You can cancel your QuickBooks Payments subscription to disable the tools and flexibility to process customer payments. By this, we can prevent additional charges. Here’s how:

 

  1. Sign in to the Merchant Service Center as an admin user.

  2. Go to the Account tab and then Account Profile.
  3. Select Close Account.
  4. In the Reason for closing dropdown, select a reason, and add any comments you'd like to share.
  5. When you're ready, select Submit.

 

Once we process your request, you'll get an email within one business day that confirms your QuickBooks Payments account is closed.

 

I’d also recommend contacting our Technical Support team to follow up on this case immediately. Our phone and chat representative are the only ones who can investigate this further.


I appreciate you for sharing on the Community page. I’ll be right if you have other QuickBooks concerns. Keep safe!

nsimoneaux
Level 2

Hacking

If you read my first post, it says that I have already shut down that QB payment subscription or merchant account.  However, QB is still using that account to take money out of my bank account.  I will contact the support again through the link you shared.  I did spend about 6 hours on the phone with QB support when this hacking occurred.  I will try again.

nsimoneaux
Level 2

Hacking

I got an email from MadelynC with her reply that said "Did that solve your problem?"

Now, when I log on here, I don't see her reply here.

But, my answer is "NO".  That did not solve my problem, because QB is still taking the money out of my bank account.  There is another debit today.  Hopefully this is the last one.

I did get to chat with QB support and they told me to go to my bank and reverse the debit.  Once I do that, QB collections will get involved.  I just hope that people reading this will learn something from my misery and not have to go through what I am going through.

ConcernedCitizen
Level 2

Hacking

I posted this as a reply to someone else but thought my experience would be informative here as well:

 

I just had a bank security breach ~ 2 months after starting to use QuickBooks 2021.  

 

I found it interesting that in QuickBooks 2021, you now have to have an Intuit Account.  So after using QuickBooks Desktop for > 10 years, 2 months after setting up an Intuit Account (required to even access my own company data) my bank account password is hacked.  

 

Per the Intuit Website - requiring an Intuit account provides for: Better control and protection of data. 

 

Complete b.s.

 

There are no coincidences.

Jeanne Veer
Level 2

Hacking

Get a new bank account, keep all evidence. They will try to collect from you. Hire an attorney and ask intuit for your signed responsibility letter

jenn451
Level 1

Hacking

We are experiencing the same situation! Please tell me how this turned out. Our quickbooks Desktop was hacked and 2 Companies we run on the account were compromised. The hackers managed to open a QBO account in one of the companies name and run thousands of dollars through our merchant services into a instant debit account. I have spoken many many many times with quickbooks to resolve the issue and they have not been able to help. Now we are in collections and they are holding us responsible for all these unauthorized transactions, we need help. I don't know what more to do!

MonicaM3
Moderator

Hacking

Hi  @jenn451.

 

I'm so sorry to hear about this situation. I absolutely understand how unsettling this is and want to help. 

 

I've done some checking with our fraud team and they should be reaching out to your company with the documents needed to get this resolved. 

 

I'm here with you to make sure that we get this taken care of so, please, let me know if you hit any roadblocks or snags along the way. I'll do my best to keep things moving.

 

Let me know if you have any additional questions. I'm just a quick reply away.

 

Take Care!

Dude84
Level 1

Hacking

I signed up with quickbooks also I synced my bank account and a few days later someone was trying to access my account threw online banking 

AbegailS_
QuickBooks Team

Hacking

The security of our clients'  QuickBooks account is our top priority, Dude84.

 

I'd highly suggest changing your password to prevent unauthorized access. I'll show you how to do it:

  1. Click on your name's initial icon beside the Gear menu.
  2. Go to Manage your Intuit account.
  3. Select the Sign-in & Security tab.
  4. Expand the Password section. 
  5. Enter your new password, then click Save

 

After that, I'd recommend reporting this to our Intuit Security team by sending an email at spoof@intuit.com or call our Customer Care Team. They can investigate your account and take further action about your subscription. I'll guide you how:

 

  1. Go to the Help menu. 
  2. Write your concern on the box, then click Let's talk
  3. Choose either Start a chat or Get a call.
  4. Complete the required information, then submit the request. 

 

To ensure we address your concern quickly, check out first our support hours and types.

 

As an additional layer that strengthens the security of your QuickBooks Online (QBO) account you can turn on the two-factor authentication, check out this article for more details : Turn on or turn off two-step verification.

 

I've attached these articles that help you handling skeptical emails in QBO: How to recognize and report suspicious emails

 

For your reference, you may find this resource helpful too: Add, delete, or change user access

 

Let me know if you have other questions by clicking the Reply button below. I'm always here to help.

 

 

 

 

 

ConcernedCitizen
Level 2

Hacking

re: The security of our clients'  QuickBooks account is our top priority, 

 

@books11249- Then do NOT require users to login to an Intuit account "for our protection" when using the DESKTOP version of the software.  

 

Re: How did it turn out...

I took a number of steps:

1. Worked the bank to stop/reverse transfers that were being submitted

2. Was assigned a completely new bank account # and user name and of course password with with the same bank 

3. Spent hours dealing with vendors, ACH processing, and reconciliation now that the account was closed/moved.

4. I no longer use the "sync" feature of QuickBooks.  Instead I download the transactions from the bank then import them into Quickbooks and reconcile that way.  As it is, this appears to be easier because I can download just for a specific statement period from the bank and import those. This is in contrast to the "online sync" method where I never quite new what it was downloading or "syncing". 

5. I noticed that recently (Jan, 2022) it seems like QuickBooks gave me "warnings" about needing to login to my Intuit account to open the company file (which again is insane) but I could eventually by-pass or otherwise decline their login.  I am still not 100% sure that not logging into the Intuit account can continue (or if they will require it again...) but I certainly hope so.

jenn451
Level 1

Hacking

Hi Monica 

 

We have not received any help in getting this issue resolved and now our account is in collections, I am so disappointed no one reached out we have been waiting for 2 months 

 

Thank you 

Jenny 

MirriamM
Moderator

Hacking

Hi there, @jenn451. This isn't the impression I want you to have about QuickBooks products and services.

 

One of our administrators submitted a complaint on your behalf to our Payments team. Rest assured that they will contact you for updates and if they need more information. 

If you have any other concerns about QuickBooks, feel free to post again in the Community. I'd be happy to assist you further. Keep safe. 
 

Another Hacked Customer
Level 1

Hacking

I am right now trying to contact your customer service because the SAME thing happened to me last week.

Someone hacked into Quickbooks, hijacked my account, changed my passwords and login, opened a Quickbooks cash debit card, and funneled ALL of my customer payments from last week - over 23K.

 

I tried calling QB several times Friday and they kept putting me on hold and pretending they don't know what is going on. I filed a police report and I am currently trying to hope that QB will do their legal duty and deposit the funds into may account without lawsuits,

 

I will be posting this information in ALL places that I can find online so the customers will be able to check their accounts.

 

I have been a QB user since 1996 and I am horrified that they don't care about the security of their customers - So if you work for QB feel free to respond and I will be happy to give you my phone number to contact me to help.

ZackE
Moderator

Hacking

Thanks for joining this thread, Another Hacked Customer.

 

This certainly isn't the experience I want you to have. Since your account's been compromised, I'd recommend changing its password if you haven't yet.

 

Here's how:

  1. Open QuickBooks.
  2. On the Company Login window, click I forgot my password.
  3. Choose an email from your drop-down list, then hit Next. Intuit will email you a token to reset the account's password. If you don't see your email address, use the Don't see your email in the list above? option and follow the onscreen instructions.
  4. Enter your token from the email.

 

You can also reset your QuickBooks Payments password from the Merchant Service Center.

 

Once your accounts have been secured, I'd recommend continuing to get in touch with our Customer Care team. They'll be able to pull up the account in a secure environment, conduct further research, and see what may need to be done and which options are available for you.

 

They can be reached while using QuickBooks.

 

Here's how:

  1. In your top menu bar, go to Help, then QuickBooks Desktop Help.
  2. Click Contact Us.
  3. Enter a brief description of the issue in our Ask a question (or tell us what's wrong) field.
  4. Hit Continue.
  5. Select We’ll contact you for a callback or Message Us to start an instant messaging session.

 

Be sure to review their support hours so you'll know when agents are available.

 

Please don't hesitate to send a reply if there's any questions. Have a lovely day!

ConcernedCitizen
Level 2

Hacking

I am so sorry to hear you were hacked too.  As I posted, my hack occurred ~ 2 months after I upgraded to Quickbooks 2021 which required a login to the Intuit network before I could "sync" with my bank.  I remember thinking, that was, umm, "strange" - why do I have to login to Intuit in order to get my transactions from Chase Bank?  

 

Everything was fine until one day I received a text from Chase "confirming that I changed my Chase password."  Of course I hadn't change my password, someone stole the password, logged in as me then changed it.  I was on the phone with Chase while the hacker was actively setting up "Vendors" to ACH the money too.  To stop that Chase effectively "nuked" that account removing all access and stopping all transactions.  I then went to a local branch and did a total account "re-do".  

 

My gut tells me my bank account uid/pwd was comprised via the Intuit network and  the "now you have to login to Intuit before you can sync...or even open your company file" craziness.  It is the only thing that changed in my 10+ years of using Quickbooks and the only place (aside from Chase.com) where my Chase uid/pwd combo were entered.  

 

Like I said, earlier, I don't believe in coincides like that.  Sure seems like your situation is similar to mine and again, I am so sorry you have to deal with all of that.  Take care,

Reva01
Level 2

Hacking

Please help. We are watching money being stolen right out of the account. Have no way of stopping it nor do we have anyone to talk to. Please help asap. Currently over 7000 has been stolen 

ShiellaGraceA
QuickBooks Team

Hacking

Hi, @Reva01.

 

Thanks for reaching out to us. I'll share some information about stopping stolen money. First, you'll want to contact your bank to report the activity. They can assist you in putting the bank account on hold.

 

Then, report the fraudulent activity to our Intuit Security Team to investigate this matter further. You can also contact our QuickBooks Customer Care Support. Here's how to reach out: 

 

 

I'm attaching these articles to guide you about ensuring your account's privacy settings and security.

 

 

Please let us know if you have additional questions or concerns. We're here to lend a hand. Take care.

135022
Level 1

Hacking

Qb services got into ours and changed the owners so quickbooks won’t give us any info so how do we handle that?

Mark_R
QuickBooks Team

Hacking

Thank you for joining the thread, @135022.

 

I'd love to help you with your concern, but can you please provide more information about it? Any additional information could help us provide the best resolution to your concern.

The Community team and I will be standing by for your response so we can address your concern. Have a good one!

Fiat Lux - ASIA
Level 15

Hacking

@135022 

Who is "Qb services"?

Need to get in touch?

Contact us