December 2016. If you have a QuickBooks Online account or any Intuit.com account, be alert for the newest QuickBooks phishing scam. The M.O. is familiar. You receive an email “confirming” that Intuit (maker of QuickBooks products) has received your request for a Business Name Change for Intuit Services. Make no mistake; this is a scam!
This email states that it is confirming the business owner has changed the name of the business with Intuit. If the business owner did not make a name change, which is normally the case, the email comes with a convenient “cancel” button that can be clicked. However, by clicking that button, the unsuspecting business owner is downloading malware and viruses. This rogue software will attempt to extract key passwords and other sensitive personal information, with the ultimate goal of identity theft.
Below is a copy of the body text in this scam email. The links have been deliberately disabled for your protection. If you do receive this email, hover over the link without clicking. You will see that, instead of going to the actual QuickBooks site, the link redirects you to a dating website in the Netherlands (.nl). Once on that site, you may be subject to questionable content, asking for personal information, or have malware downloaded onto your computer or smartphone.
Should you receive this email, simply delete it. If you have concerns about your QuickBooks Online account, contact Intuit using a trusted resource.
Phishing Email Content
We received a request to change the Business Name for your Intuit Business Services account associated with this email:
If you did not request this change, or if it was unintentional, click here. Simply disregard this message for change to take effect.
Intuit Business Services
Note: Please do not reply to this message, as we will not be able to respond. If you have any questions, please contact Support.