Please note that the chat agent I spoke to about a phishing email gave out an obsolete email address for reporting the issue.  They gave "[email address removed]."  Which is also found on Intuit's website after a search for reporting spam.