For the last 2-3 weeks I have been getting a lot of phishing emails with the subject line of "Quick Books Bill Copy" which tell me that I am getting charged for a subscription for Quickbooks Desktop Pro and to contact them if this is in error. Of course, the email address is fake (Russian), as is the phone number. I won't post the number because I don't want search engines to somehow make it appear legitimate.
The grammar is poor as expected - for instance it calls the product Quick Books. This is the main body of the email followed by a fake invoice:
This is a notification Mail For Your Purchase With Intuit For Quick Books Desktop Pro 2023 For your Pc and you paid $1XXXXX.00 USD. To Intuit LLC Please Review Your Bill Details Below:-
Here is the scary part: I ONLY started getting these emails after I contacted tech support regarding upgrading my Quickbooks Desktop Pro software in order to continue to use my payroll subscription. I have posted about that several times already in other threads but ultimiately was told it'd be an extra $549 a YEAR plus my regular subscription or I would have to move to QBO. I thought that was just too expensive and cancelled my payroll subscription all together, even though I'm still waiting for Intuit to remove my credit card information (see other thread)...but I digress.
The tech support person I spoke with was clearly overseas somewhere. Their English was so poor that I doubt it was the philippines. Judging by their manorisms it sounded like an Indian call center and they seemed a little peeved that they did not make the $549 sale and kept saying that the only way to get it was through them. I explained that it was just too much for a small business and did not want to go to Quickbooks Online, but they were just weird about the whole thing.
So now I'm worried about what information about my account did they have access to through chat? I was logged into my account so at a minimum they knew my email address. Did they know my company name, phone number, address, or financial information too? What would stop an employee likely working from an insecure call center or from their home from writing down my email address and what I was looking for and selling that information to scam call centers or scammers that send mass emails?
Again, up till the time I contacted support, nobody on earth would have guessed that I was looking into updating to QBD2023. I use different email addresses for company stuff. For instance, right now I use a personal account for this forum. I NEVER use my business email for anything other than customers.
The other scary part is that while googling the contents of the email, I found NOTHING so now I have to wonder whether this is a targeted attack by that tech support person. How do I even report this to Intuit? They have the foxes guarding the hens! There is no official reporting mechanism in place. Has anybody else been getting emails?
