QuickBooks Point of Sale & QuickBooks Enterprise

Customers are receiving an email entitled “Critical Notice” from Intuit and questioning whether it is phishing. This email is NOT phishing; is a legitimate email. Below is a copy of the legitimate email.

TIN Validation Request Security Code: XXXXXXXXXXXXXX

Dear,

Tax Information Needed within 30 days.

In our continuing effort to ensure that accurate information is being maintained on our systems and to improve the quality of service we can provide to you; INTUIT INC . has participated in the Internal Revenue Service [IRS] Name and TIN Matching Program.Your name and/or Taxpayer Identification Number [TIN: your Social Security Number or Employer Identification Number], that we have on your account does not match information on file with the IRS or the Social Security Administration [SSA). In order for INTUIT INC. to update your account, please follow the instructions below “What You Need To Do”.

Avoid Potential IRS Penalties

You can avoid potential penalties and reduce the likelihood of federal and state taxes being withheld from future distributions to you by helping us maintain accurate account information. Your account information currently on file with INTUIT INC. is as follows:
Current Name on Account: XXXXXXXXXXXXXX

Account Number: XXXXXXXXXXXXXXXXXXXXXX

What You Need To Do

If you are an individual filing under your social security number, the name and social security number in our records must be identical to what is on file with the Social Security Administration. If you are a Corporation, Partnership, P.A., or P.S .C., your federal identification number and name in our records must match exactly what is on file with the Internal Revenue Service. Any variation will cause your record to mis-match and you may be subject to backup withholding. In order for INTUIT INC. to update your account follow the instructions below:

1) Follow this link https://intuit.tinportal.convey.com to make the necessary changes. You must use the Security Code from this letter and your Merchant Account number to access the link.

If you have any questions on how to complete this W-9 request or to access the link please contact us at 1-855-220-1032.

Thank you in advance for your prompt attention to this important matter.

This is the end of the legitimate email.

Information

On the Internet, “phishing” refers to criminal activity that attempts to fraudulently obtain sensitive information. There are several ways a scam artist will try to obtain your social security number, driver’s license, credit card information, or bank account information. Here is our QuickBooks Online commitment to you, as well as some steps you can take to make sure your data is safe and secure.

Our commitment to you:

What we won’t do

1. We will never send you an email with a “software update” or “software download” attachment.
2. We will never send you an email asking you for login or password information to be sent to us.
3. We will never ask you for your banking information or credit card information in an email. We will never ask you for confidential information about your employees in an email.

What we’ll do

1. We will provide you with instructions on how to stay current with your Intuit product, and we will provide you with information on how to securely download an update from your computer.
2. If we need you to update your account information, we will request that you do so by logging into your account.

Here’s what you can do to protect yourself from a phishing attack:

1. If you suspect you have received a phishing email from Intuit, please forward it immediately to spoof@intuit.com. We will look into each reported instance.
2. Make sure you subscribe to an anti-virus software and keep it up-to-date.
3. Make sure you have updated your web browser to one that includes anti-phishing security features, such as Internet Explorer 7 or Firefox version 3 or higher
4. Make sure that you keep up to date on the latest releases and patches for your operating systems and critical programs. These releases are frequently security related.
5. Do not respond to emails asking for account, password, banking, or credit card information.
6. Do not open up an attachment that claims to be a software update. We will not send any software updates via email.
7. Make sure you have passwords on your computer and your payroll files.

Here are 3 common methods that phishers use in their emails

1. Spoofed email address.Don’t reply to unsolicited email and don’t open email attachments. It’s easy to fake a From or Reply To address, either manually or with spam software, so never assume an email is real by looking at its header. You might be able to spot fake addresses by checking for domain name misspellings, but this isn’t foolproof. Some email service providers combat the problem of spoofed addresses by using authentication techniques to verify a sender’s integrity.
2. Fake link.When in doubt, never click on a link in an unsolicited or suspicious email. Scam emails can contain a hidden link to a site that asks you to enter your log on and account information. A clue: if the email threatens you with account closure if you don’t log on soon, you could be the target of phishing. You may be able to tell if a link is real by moving your mouse over it and looking at the bottom of your browser to see the hidden Web address – it will look different than the one you see on the surface.
3. Forged Website.If you must visit a financial site, like your bank or credit card company, enter its known address into the browser location field manually. Use a browser with an anti-phishing plug-in or extension, like FireFox version 3 or higher or Internet Explorer 7. These browsers warn you about forged, high-risk sites. Phony Web sites mimic real sites by copying company logos, images, and site designs. Malicious webmasters can also use HTML, Flash or Java Script to mask or change a browser address.

Visit security.intuit.com to get the most up to date information about phishing. Forward suspicious emails to spoof@intuit.com.

Written by +Ruth Perryman, CMA, CFE, CFM, MBA

Ruth is the president of The QB Specialists, Inc. and has provided QuickBooks help to thousands of businesses around the world since 1996. She is an Intuit Solutions Provider, an Advanced Certified QuickBooks ProAdvisor, and a member of the Intuit Trainer/Writer Network. She is also certified in QuickBooks Point of Sale and QuickBooks Enterprise Solutions.


QuickBooks price list | QuickBooks Sale | Free trial of QuickBooks POS | Free trial of QuickBooks Enterprise

People are receiving an email entitled “Tax Information Needed within 30 days.”

Below is a copy of one version of the fake email. There are other similar versions also being sent to people.

Hello,

In our continuing effort to guarantee that correct information is being sustained on our systems, and to be able to grant you better quality of service; INTUIT INC. has participated in the Internal Revenue Service [IRS] Name and TIN Matching Program.

We have found out, that your name and/or Employer Identification Number, that we have on your account is different from the information provided by the SSA.

In order to review the information on your account, please enter the site.

Best regards,
INTUIT INC.
Corporate Headquarters
2632 Marine Way
Mountain View, CA 94043

This is the end of the fake email.

Steps to Take Now

• Do not click on the link in the email.
• Send a copy of the email to spoof@intuit.com.
• Do not forward the email to anyone else.
• Delete the email.

Information

On the Internet, “phishing” refers to criminal activity that attempts to fraudulently obtain sensitive information.

Here’s what you can do to protect yourself from a phishing attack:

1. If you suspect you have received a phishing email from Intuit, please forward it immediately to spoof@intuit.com. We will look into each reported instance.
2. Make sure you subscribe to an anti-virus software and keep it up-to-date.
3. Make sure you have updated your web browser to one that includes anti-phishing security features, such as Internet Explorer 7 or Firefox version 3 or higher.
4. Make sure that you keep up to date on the latest releases and patches for your operating systems and critical programs. These releases are frequently security related.
5. Do not respond to emails asking for account, password, banking, or credit card information.
6. Do not open up an attachment that claims to be a software update. We will not send any software updates via email.
7. Do not respond to text messages or voicemails that ask you to call a number and enter your account number and pin.
8. Make sure you have passwords on your computer and your payroll files.

Here are 3 common methods that phishers use in their emails

1. Spoofed email address. Don’t reply to unsolicited email and don’t open email attachments. It’s easy to fake a From or Reply To address, either manually or with spam software, so never assume an email is real by looking at its header. You might be able to spot fake addresses by checking for domain name misspellings, but this isn’t foolproof. Some email service providers combat the problem of spoofed addresses by using authentication techniques to verify a sender’s integrity.
2. Fake link. When in doubt, never click on a link in an unsolicited or suspicious email. Scam emails can contain a hidden link to a site that asks you to enter your log on and account information. A clue: if the email threatens you with account closure if you don’t log on soon, you could be the target of phishing. You may be able to tell if a link is real by moving your mouse over it and looking at the bottom of your browser to see the hidden Web address – it will look different than the one you see on the surface.
3. Forged Website. If you must visit a financial site, like your bank or credit card company, enter its known address into the browser location field manually. Use a browser with an anti-phishing plug-in or extension, like FireFox version 3 or higher or Internet Explorer 7. These browsers warn you about forged, high-risk sites. Phony Web sites mimic real sites by copying company logos, images, and site designs. Malicious webmasters can also use HTML, Flash or Java Script to mask or change a browser address.

Visit security.intuit.com to get the most up to date information about phishing. Forward suspicious emails to spoof@intuit.com.

Written by +Ruth Perryman, CMA, CFE, CFM, MBA

Ruth is the president of The QB Specialists, Inc. and has provided QuickBooks help to thousands of businesses around the world since 1996. She is an Intuit Solutions Provider, an Advanced Certified QuickBooks ProAdvisor, and a member of the Intuit Trainer/Writer Network. She is also certified in QuickBooks Point of Sale and QuickBooks Enterprise Solutions.


QuickBooks price list | QuickBooks Sale | Free trial of QuickBooks POS | Free trial of QuickBooks Enterprise