Payroll Fraud

We, too, would join you if you do manage to start a movement, but that's a huge undertaking.  You can reach us, if you do, at [removed] or [email address removed].  This happened to us or rather, through us.  We are a CPA firm that processes payroll and other accounting functions for many, many clients.  Two of my clients were hacked - somehow, through my login.  The first suggestion I have for you, is to institute MFA-2 party verification, if you haven't already.  Secondly, something to consider, according to QB, they 'front' the funds for payroll, which is why they so zealously go after you for this.  One of my clients said, 'who signed me up for that? I don't need QB to front my payroll.'  Apparently, it is just the way they do it and then you are responsible if that payroll is not legit.  But, nowhere do they tell you that.  I have one client whose solution was to stop using direct deposit through QB and start using ACH through her bank.  In order to do this, you run your payroll as normal through QB and then, just 'pretend' that you are going to write checks. Then contact your bank and set up an ACH process, whereby you just then enter in the net amount of your employee's checks.  Just one more safeguard against fraud.  Most banks have this process on business accounts and then you are no longer paying direct deposit fees to QB.  One of my clients was able to get QB to waive all of this for him, but the battle took months during which time we manually did payroll for him outside of QB, which leads to a whole host of other issues like manual W2s and payroll taxes.  Another client was not so lucky and had to pay QB $7,000! And, nowhere, at any time, did QB ever actually have to prove that they put this money out.  I found that amazing, that they can just 'say' that they fronted this money and you are now responsible to repay them and will have assets seized and be taken to collection with no more proof than a letter from a lawyer.  This whole process left a horrible taste in our mouths. 

We are dealing with the same issue and not content with the situation. A random "contractor" created an account without our knowing/consent and was able to "pay" themselves thousands of dollars from our account without warning (we would like to see proof this occurred). We were not notified by QB but rather our bank did as they flagged this as fraud activity. QB decided to pay the contractor (without our authorization) that has never been in our account before. For this substantial amount it should have warranted an authorization. We authorize all payroll via our accountant and verify via QB. We pay our contractors through a different system, not QB. Neither our accountant or our staff were notified this transaction took place and was told by QB we would have to repay this amount. Very disappointed with how this is being handled.

Im very interested... I had someone hack into my account and take over 16K, QB has done nothing to stop it. I have called and spoke with a supervisor who told me that I went about the process the wrong way. I called and told them it was fraud. I stopped it at my bank  and thankfully nothing was taken out of my account. I am now being told that I am responsible for paying the 16k back to QB. Im going to need proof it was actually paid, and in reading these post I see that won't be happening. I say we need to lawyer up! 

First of all, I'm very sorry this happened to you.  I know it may not make you feel better, but the same thing happened to me.  I hope it at least makes you feel like you are not alone.  A hacker reached two of my clients through me as a QuickBooks Online Accountant.  They created fake employees and set up payroll for them via direct deposit.  QuickBooks fraud called me about the activity.  I was able to delete all of the paychecks and employees and stop all of the activity.  A few days later, they got into another client and reactivated their inactive payroll, created employees and paid them via direct deposit.  My client stopped payment on it, but Intuit paid it anyway.  They are now coming after my client for reimbursement of that money.  A few days later, this person hacked my payments account the same way.  They changed the bank account as I'm still being charged the CC fee.  I stopped payment on it, Intuit paid it, and now they are coming after me for reimbursement.  Both accounts have now been referred to outside collections, so all of the names and case numbers I got while trying to dispute do not matter as the cases within Intuit have been closed.  It is nearly impossible to contact the fraud department and get a response.  When I did speak with someone, they could see everything that happened.  But, they apparently do not communicate with collections, and it is highly unlikely that I will ever get that person back on the phone.  This has been and is still a horrible nuisance.  It's obvious to me that Intuit does not care.  I am still in the process of moving my clients elsewhere.  I just called my state representative for guidance on how to handle. They recommended I reach out to the state's Attorney General.  I am in the process of filling out a complaint with them.  If enough people do it, maybe something can happen.