Hello, Eric.
I'm dropping by to help you forward the email to our Security team.
You can forward the suspicious email to security@intuit.com, and a dedicated team will verify it.
Also, the QuickBooks Community channel is open 24/7 but our QuickBooks Online Live Support channels are open Mondays to Fridays at 6 AM to 6 PM PT, and Saturdays 6 AM to 3 PM PT. For QuickBooks Online Advanced users, live support is available 24/7.
An email can be spoofed to make it look like a legitimate address. So, just like what Just_me said, it's generally recommended to check your account for any changes on your billing, address, subscription, or any sensitive information (the first and crucial step). Aside from attachments and links, I'd also advise not to call the phone number on a suspicious email.
Drop by again if you have concerns changing your account information (other QuickBooks-related questions are also welcome). We're here to help.
