Search
Small and midsized businesses (SMBs) that use Intuit’s popular QuickBooks program should be aware of an upward trend in business email compromise scams using of one of QuickBooks’ optional accounting features which allows firms to send customers invoices via email.
These scammers will send invoice emails that appear to come from a legitimate partner or supplier using QuickBooks. Victims who click on the “Review and Pay” button end up sending payments to the scammer.
The payment request can also require that the payee use the automated clearing house (ACH) method, which requires the payee to input their bank account details. If the payee falls victim to the scam, the criminal now has their bank account information.
Employees who get an unexpected QuickBooks-generated email invoice should check the email header to see if it originated from QuickBooks’ parent intuit.com. If not, it is not a legitimate email and should be immediately reported and deleted.
Users may also contact the purported vendor using a trusted alternate method to verify before paying.
It is important to note that some QuickBooks payment requests will ask for your ACH or banking details, but the QuickBooks company and its support staff never will.
If you have any questions about the information above, please contact your E. Cohen advisor.
