Hi there, Sharon.

I understand how concerning it can be to see unexpected changes and strange entries in your audit log, especially at a time when you weren't logged in. Let's delve into what might be happening and how we can address it.

To begin, let's take a closer look at the specific entries in the audit log. Pay attention to the Event and Changed by fields to identify if it was an automated action or triggered by a user. If you see a user you don't recognize, it’s most likely one of these:

• Online Banking Administration: Shows a change related to your connected bank accounts made automatically by QuickBooks Online.
• Support Representative: Shows changes made by a QuickBooks Online support consultant.
• System Administration: Shows changes made automatically by QuickBooks Online. This can happen for a number of reasons, such as:
  • Changing a record, and the change affects another record. For example, if you edit a payment and link it to a different invoice, you may see a System Administration event for a change to the original invoice.
  • Connecting to a third-party app to QuickBooks. When the third-party app sends data to QuickBooks, or when it makes a change to your existing data, this appears as a System Administration event.
  • Creating recurring transaction, such as a recurring expense. When QuickBooks automatically adds an instance of the transaction to your books, a System Administration event appears in the audit log.
  • Setting up other events to happen automatically, even when you’re not signed in. For example, a System Administration event may appear when there's an update to your bank feeds.
• Import Administration: Shows an automatic change related to the conversion of your data from QuickBooks Desktop edition.

If you suspect unauthorized access or suspicious activity, consider changing your QBO password and enable two-factor authentication.

Feel free to reach out again if you have further concerns about using audit logs in QuickBooks Online. We're always here to ensure your QBO experience is secure and effective.