Solved

I received an invoice for Norton Antivirus in connection to Quickbooks but I never signed up for it?

Forum|Forum|4 years ago
December 17, 2021
22 replies
0 views

The email itself is from Quickbooks (xxxxxxxxxx@xxxxxxxxxxxx.xxxxxx.xxx) saying that my 400$ Norton bill for 5 devices has been paid. I cannot find where it was charged but is this real?

QuickBooks Self-Employed

Best answer by ShiellaGraceA

Thanks for coming by, @serenity-squirre.

I'll share some information about identifying suspicious emails. Here are a few things to look for if you’re not sure an email came from Intuit.

We’ll never ask for your personal info in an email.
Our emails will always come from an email address that ends with @intuit.com. This includes @e.intuit.com.
Any link we send you in an email will always be for an intuit.com address.

If you suspect you have received a phishing email targeting the Intuit brand, go to the Intuit Online Security Center and select Go to security notices for further information.

If you don't find a similar email within the Security notices, select the Report a suspicious email to file a report.

Learn more about this information in this article: Identify suspicious activity, phishing scams, and potential fraud.

Please let me know if you have other questions or concerns with invoices or suspicious emails. I'll be around for you. Take care and have a great day ahead.

S

ShiellaGraceAAnswer

Thanks for coming by, @serenity-squirre.

I'll share some information about identifying suspicious emails. Here are a few things to look for if you’re not sure an email came from Intuit.

We’ll never ask for your personal info in an email.
Our emails will always come from an email address that ends with @intuit.com. This includes @e.intuit.com.
Any link we send you in an email will always be for an intuit.com address.

If you suspect you have received a phishing email targeting the Intuit brand, go to the Intuit Online Security Center and select Go to security notices for further information.

If you don't find a similar email within the Security notices, select the Report a suspicious email to file a report.

Learn more about this information in this article: Identify suspicious activity, phishing scams, and potential fraud.

Please let me know if you have other questions or concerns with invoices or suspicious emails. I'll be around for you. Take care and have a great day ahead.

S

serenity-squirreAuthor

I ended up googling the phone # provided in the email to verify it was a scam. It came from @notifications.intuit.com

C

christianm

I received one as well and the email came from

@ notification . intuit . com

It seems that scammers are now using QBO to send invoice emails with the Norton logo to conduct a refund scam.

P

proshot

I just received one today as well saying I was to be billed today $449.63 for Norton along with a pdf of the invoice. Of course, I did not open it and I do not have Norton so knew it was phishing from the start.

C

concerned user1

I received this same email today too. Amount stated that was being charged for $459.45. Email came from quickbooks @ notification . intuit . com

MonicaM3

Hello @concerned user1.

Thanks for sharing this information.

The security of your account and information is a top priority for Intuit. Any time you receive an email that you are suspicious about, you can always forward it to our security team here: security@intuit.com and they can review it.

Here’s some additional information about how to Identify suspicious activity, phishing scams, and potential fraud.

Never hesitate to reach out to the Community with questions about emails or anything else. We’re always here to help.

A

agsusa

I have just received the same. I called the number on the invoice to get more information on the scam. A person with an Asian accent answered and provided to give me a website address (caresupport.cc) and a log in code where I would download and fill out additional information in order to get a "refund". I have no idea what information they were going to ask on the form, but I'm sure the download said "application" not as an application form but as an executable file. Bad, Intuit should force these people out...

H

haikuandy

I got it too.

Just to see what would happen, I hit reply and the reply address wasfigijons99309-at-outlook.com. I didn't send.

Maybe intuit can do something with this info.

Jessica_young

Thanks for sharing this, @haikuandy.

Unfortunately, there are always going to be people who try to take advantage of any situation, and I'm glad you caught on. @Mmassie shared some helpful information earlier in this thread, and any time you receive an email that you are suspicious about, you can always forward it to our security team here: security@intuit.com, and they can review it.

Thanks for being a part of the Community, I'm here if you have any additional concerns.

A

atcurty44

I received an email like this on February 16, 2022. Said the amount they were charging was $399.89. I forwarded the email to Quickbooks Security. Looked pretty official, but I knew I didn't order anything and checked bank accounts to make sure there were no charges. argh!

A

Alex_rocks

I had the same email - and amount! I called the phone number and the guy sounded so fake. He ended up hanging up on me. Don't these "people" have better things to do?!

Fiat Lux - ASIA

@Alex_rocks wrote:
Don't these "people" have better things to do?!

That's what they do for a living 8p

H

Hbhatia

I received an email today. The email had an attachment, a PDF. I clicked on the PDF, which I don't think was downloaded. Do you think there could be an issue? Definitely not smart on my part. Is there anything I can do?

H

Hbhatia

I received an email today. The email had an attachment, a PDF. I clicked on the PDF, which I don't think was downloaded. Do you think there could be an issue? Definitely not smart on my part. Is there anything I can do?

Rubielyn_J

Let me share some action to take after receiving an unknown email, @Hbhatia.

If you suspect you have received a phishing email targeting the Intuit brand, proceed to the Intuit Online Security Center and click Go to security notices for further information. If you didn't encounter a similar email within the Security notices, choose the Report a suspicious email to file a report. This way, our security team can further check and investigate.

Moving forward, it is best practice to avoid opening any attachment unless you both know the sender and you’re expecting an attachment from them.

Additionally, you may also review this link: Identify suspicious activity, phishing scams, and potential fraud.

Don't hesitate to visit us again if you have questions with invoices or suspicious emails. I'll be around for you. Take care and have a great day ahead.

B

bemcmillin

I got the same thing and was panicking, but didn't see where any money was taken out of my account.

B

BurtonJ

SCAM

CLUE # 1 - Too many other recipients for an invoice.

CLUE # 2 - BILL TO user

CLUE # 3 - SALES TEAM Assam IN

CLUE # 4 - From: Sales Team <[email address removed]> Excessively long domain name that is not used by Intuit for billing.

CLUE # 5 - Reply-To: [email address removed]

They went the extra mile to create a PDF for invoice number 1004. I am also sure Intuit invoice numbers are different/higher than 1004. The "2 hour threat" is also a clue they count on a panic response.

Forwarded to '[email address removed]'

B

Blikeyou

Yeah they’re definitely a scam. I called them twice, the second time it was the same guy I spoke with the first time and he messed up in some of the information he had provided the first time. I asked to be transferred then he hung up.

B

Buckhenry

Just an update--I just received the same kind of email last week--it is a scam. On the same day I received a genuine Email from Norton advertising an upgrade. Here is the difference. Look at the email address. Norton comes from secure.norton.com. The fake uses a norton logo but the email is from quickbooks @notification.intuit.com Norton does not used intuit to send bills. Also my existing subscription had not yet expired and was not due for months.

Right now I am receiving many scam Email saying I owe for an invoice. I even got one that said it was trying to pay me. They copied a company we do receive Email payments from, but again the details of the Email were incorrect. Follow your gut! If it looks wrong, it probably is!

I

Itman-twentytwo

That is not a difference @Buckhenry.
It's very normal for companies to use a different service for email marketing and email updates than they do for sending receipts. Especially as quickbooks is a billing tool it makes sense that a service as Norton would leave that to a 3rd party.

Add to that, that the scammers are using an Actual subdomain of intuit (@notifications.intuit.com) and not just some random email and to the untrained eye it all looks very convincing. I work in IT and eventhough I thought it weird instantly, it still had me go and google it since intuit was a known name for me. Intuit needs to look into this further instead of just posting copy paste replies and asking for more info in private deeper level support.

I will not contact you with further information as further information should not be needed and, any request to do so will be ignored.

It would also do you well to Sticky something to the top of this post about this being a fraudulent attempt instead of letting people that want to find out sift through a whole topic first.

Best regards.

Show more replies

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded