Skip to main content
August 6, 2024
Solved

Received an email from quickbooks@notification.intuit.com titled Review document : kindly sign : filename paymentInstruction-eftmy question is: Is this a scam?

  • August 6, 2024
  • 2 replies
  • 0 views
Original commenter did not share additional details
Best answer by johnnyboy

Seems like a scam to me so I have deleted it

The view document link leads to https://t.co/ekDcSMtBtz

 

Thanks for the prompt reply

Kind regards

John

2 replies

JenoP
August 7, 2024

I'd like to begin by saying that we take your data security seriously, johnnyboy. We believe that awareness and prevention are the most effective ways to mitigate security risks.

 

There have been instances where fraudulent individuals try to present themselves as legitimate businesses by sending emails that appear to be authentic notifications.

 

Can you tell us what the email was about? This is for us to identify if the email is legitimate or not.

 

Please know that Quickbooks@notification.intuit.com is also one of the handles that we use for email notifications. It's used to send secure and authorized alerts for tasks such as approval requests, password reset information, and user ID-related notifications.

 

In addition, we use this to send invoices from QBO with the name of the company or merchant displayed before the email address. 

 

For instance, an email will appear as follows: From: "Name of the Company" <quickbooks@notification.intuit.com.>

 

Allow me to share these steps on how to verify the authenticity of an email from Intuit regarding your account:

 

  1. Sign in to your Intuit Account and proceed to the Sign In & Security tab.
  2. Click Account Activity and choose View. You should see a list of events for your account.
  3. If you find an event with an email icon matching the content, date, and time of the email you’re not sure about, you’ll know the email is from Intuit. You may also see a reference code you can match to the email.

 

Aside from that, check the following details before you do anything:

 

  • Mouse over the link to see where the URL goes. Click the link only if it takes you to a legitimate website.
  • Scam emails often have grammatical errors.
  • Only open attachments after the sender confirms it's real.

 

Let me share this article for more details about this: Identify Suspicious Activity, Phishing Scams, And Potential Fraud.

 

Lastly, you can reach out to our support team if you're unsure about the authenticity of an email. They can help you determine whether the email is genuinely from our company or a potential phishing scam.

 

Feel free to visit these articles in case you need them as resource materials when managing your subscription-related details:

 

 
Please don't hesitate to reach out via reply or by posting new inquiries in the form. Whether it's technical support or guidance from the Community, we are committed to ensuring that your concern is fully addressed, and we remain available to extend our assistance.
johnnyboyAuthorAnswer
August 7, 2024

Seems like a scam to me so I have deleted it

The view document link leads to https://t.co/ekDcSMtBtz

 

Thanks for the prompt reply

Kind regards

John

August 7, 2024

Hi johnnyboy In the future if you're not able to identify if any emails are legitimate then you could contact our security team using the following link: https://security.intuit.com/contact-us/ and select the 'Report a fake email (or phishing)' section.

September 18, 2024

So how does a spammer, scammer, hacker use the "[email address removed]" email to send out spam?  No other system has this issue but quickbooks... why? 

I too received a similar message and because intuit is whitelisted, it let the email through. 

If this simple issue can't be stopped on their end, how safe is our other data?

September 18, 2024

Your safety is our priority, and make sure you do not get scammed ingallspw.

 

QuickBooks is widely used by small and medium-sized businesses for accounting and invoicing. This popularity makes it an attractive target for scammers who know that many users are accustomed to receiving invoices and notifications via email from the platform.

 

To protect yourself from these threats, it's important to check the emails you receive regarding QuickBooks. Official Intuit websites always end in *intuit.com. Some examples include quickbooks.intuit.com, e3.intuit.com, and click.notifications.intuit.com.

 

If you receive a suspicious email, it's best not to click on any links. Instead, you can check our security notices to confirm if the email you received is listed as a reported suspicious Intuit email.

 

For a comprehensive guide on how to identify suspicious emails and distinguish legitimate email addresses from Intuit, you can refer to the following article:

 

 

This thread is always open if you have other security data concerns. I'm more than willing to assist you again. You have a good one.

January 31, 2025

We are not a QuickBooks user.   However, some of our customers.  We use Mimecast as a email filter system and we are receiving a large number of emails from [email address removed] which many are being held or blocked as spam and phishing attempts.  I have seen numerous posts requesting an updated list of IP addresses used by Intuit but never a response that does not require me to login.   Can you please send me a link to an updated list of IP addresses?