Is this invoice or account email from QuickBooks a scam?
No. QuickBooks is legitimate accounting software made by Intuit, a major US-listed company, and widely used by Australian small businesses. Scammers exploit that trust with fake account-suspension emails, lookalike sign-in pages and bogus 'invoices' that route you to a scammer's phone line. The good news: a few quick checks almost always tell a real QuickBooks message from a fake.
Genuine QuickBooks links lead to quickbooks.intuit.com, intuit.com — but a link can be made to look real, so don't go by the link alone. Below is exactly what a real QuickBooks message looks like, the scams currently circulating in its name, the red flags that give a fake away, and a real example to compare against. Got a message in front of you? Check it now for an instant verdict.
What a real QuickBooks message looks like
Genuine messages from QuickBooks link to quickbooks.intuit.com, intuit.com. Treat a link to any other address as a warning sign.
- Genuine QuickBooks and Intuit emails come from an intuit.com address (such as @account.intuit.com), and official sites end in intuit.com — but a sender address can be spoofed, so judge the message too
- No legitimate accounting platform will send you a software-update or download attachment to run, ask you to send your sign-in or password, or ask for your banking or credit-card details by email
- Open a genuine alert by typing quickbooks.intuit.com into your browser yourself and signing in there — not by following a link in an unexpected email
- Real Intuit security advice is to turn on two-step verification inside your account, not to confirm credentials through an emailed link
What QuickBooks will never do
- Send a software-update or download attachment for you to run (no legitimate accounting platform does)
- Ask you to send your sign-in details, password or banking and credit-card information by email
- Ask you to confirm your credentials through an emailed link (real Intuit security advice is to turn on two-step verification inside your account)
- Terminate your account on the spot because you ignored one email; a genuine account issue is visible when you sign in at quickbooks.intuit.com yourself
Common QuickBooks scams
- Fake 'your QuickBooks account will be terminated or suspended' emails that pressure you to log in through a link
- Fake QuickBooks invoices — sometimes including a phone number to call — that put you through to a scammer
- Phishing emails with lookalike sign-in pages that capture your Intuit username, password or verification code
- Billing or subscription-renewal phishing timed to EOFY, when businesses are reconciling in QuickBooks
Red flags to watch for
- An email claiming your QuickBooks or Intuit account will be terminated, suspended or locked unless you act now
- A request to send your sign-in details, password or banking information by email
- An attachment described as a 'software update' or 'download' you need to run
- A sender address that doesn't end in intuit.com — though a matching address doesn't prove it's genuine, since it can be spoofed
- A QuickBooks 'invoice' with a phone number urging you to call to dispute or pay it
QuickBooks scam examples
These composed examples show how scams impersonating QuickBooks typically read, with the tells that give each one away. Compare them against anything you've received.
Subject: Final notice: your QuickBooks account will be terminated. We were unable to verify your business information. Sign in within 48 hours at quickbooks-verify-au[.]example to keep your company file and payroll data. Accounts not verified are permanently deleted.
What gives it away:
- The link doesn't end in intuit.com; lookalike sign-in pages like this exist to capture your Intuit username, password or verification code
- Termination and deletion threats are the pressure play; a genuine account issue would be visible when you type quickbooks.intuit.com yourself and sign in
- No legitimate accounting platform asks you to confirm credentials through an emailed link
A convincing QuickBooks 'invoice' email shows a charge you never made and a support number to call to dispute it. The person who answers offers to 'reverse the charge' and asks for your card number, or for you to sign in while they direct you.
What gives it away:
- The invoice exists to make you dial; the number connects you to the scammer, not Intuit
- A real disputed charge is handled from inside your account at quickbooks.intuit.com, not by reading card details to a stranger
- Anyone directing you step by step through a 'refund' is steering you, which is the opposite of how genuine billing support works
Not sure about your message?
Paste the suspicious QuickBooks text or email and get an instant scam verdict, free.
How to verify a message from QuickBooks
QuickBooks's real website is quickbooks.intuit.com and the official app is the QuickBooks app. Reach QuickBooks through those channels, never through the details inside a message you're unsure about.
- Don't click the link, open the attachment, or call the number in the message itself
- Type quickbooks.intuit.com into your browser yourself, sign in, and check your account and billing status; a real problem will show there
- If you're still unsure, check Intuit's security centre at security.intuit.com and report the suspicious message through it
- Compare the message against the current scams Intuit lists on its security centre (linked below)
If you have been scammed in QuickBooks's name
Clicked the link, paid, or shared details? Act now. The first hour matters more than anything else you do later.
- Change your Intuit password immediately by going to quickbooks.intuit.com directly, and change it anywhere else you reused it
- Turn on two-step verification inside your Intuit account so a stolen password alone isn't enough
- If you read out or entered card or banking details, call your bank straight away to block the card and dispute charges
- If business or identity documents may be exposed, contact IDCARE (idcare.org) for free identity support
- Report the scam through security.intuit.com, then to Scamwatch and ReportCyber using the links below; forward any scam SMS to 7226
Where to report a scam impersonating QuickBooks
Received — or fell for — a message impersonating QuickBooks? Report it. It helps authorities and carriers shut the campaign down for everyone who gets the next one.
- QuickBooks scam alerts — QuickBooks's own page on current scams and how to report one.
- Scamwatch — Report the scam to the ACCC's national scam service.
- ReportCyber — Report cybercrime and financial loss to the police.
- ACMA — Complain about scam texts and spam SMS, email or calls.
- Forward to 7226 (SCAM) — Forward the scam SMS to short code 7226 so carriers can block the source.
- IDCARE — Free identity and cyber support if your details were taken.
Latest QuickBooks scams in 2026
The QuickBooks scams circulating in 2026 alternate between two moods: fear and routine. The fear version is the account-termination email pushing you to a lookalike Intuit sign-in page; the routine version is a fake invoice or subscription renewal, sometimes carrying a phone number that connects you straight to the scammer. Both cluster around EOFY, when Australian businesses live in QuickBooks and one more billing email feels normal. The constant is that every version pulls you away from the real site. Typing quickbooks.intuit.com yourself, and treating any emailed credential prompt or invoice callback number as hostile, defeats the lot.
Frequently asked questions
How do I know if a QuickBooks or Intuit email is genuine?
Official Intuit emails come from an intuit.com address and official sites end in intuit.com, but a sender address can be spoofed — so don't rely on it alone. No legitimate accounting platform will send a software-update attachment, ask for your sign-in or password, or ask for your banking details by email. Don't click links; type quickbooks.intuit.com yourself, and report suspicious emails through security.intuit.com.
I got an email saying my QuickBooks account will be terminated — is it real?
Treat it as a scam. Fake 'account terminated/suspended' emails are a common QuickBooks phishing tactic designed to rush you into logging in through a link. Don't tap the link — open quickbooks.intuit.com yourself to check your account.
What should I do if I entered my Intuit login on a fake page?
Change your Intuit password immediately by going to quickbooks.intuit.com directly, turn on two-step verification, and report it through Intuit's security centre (security.intuit.com). If banking or business data may be exposed, contact your bank and IDCARE as well.
What is QuickBooks' real website in Australia?
QuickBooks lives at quickbooks.intuit.com, and every official Intuit site ends in intuit.com. Reach it by typing the address yourself or using the QuickBooks app, never through a link in an unexpected email. If a page asking for your login ends in anything other than intuit.com, close it.
How do I report a QuickBooks scam email?
Report it through Intuit's security centre at security.intuit.com so Intuit can act on the campaign, and to Scamwatch (scamwatch.gov.au) so the National Anti-Scam Centre can track it. If a scam arrived by SMS, forward it to 7226 (spells SCAM). If money or business data was lost, also report to ReportCyber at cyber.gov.au.
Related scam types
Scams impersonating QuickBooks usually fit one of these patterns. Learn how each works:
Related brands
Other accounting names scammers impersonate — check a message from one:
Sources
- Intuit Security Centre (Intuit)
- Phishing scams (Scamwatch (National Anti-Scam Centre))
- Account or identity takeover scams (Scamwatch (National Anti-Scam Centre))
This guide is general information, not legal or financial advice — always verify with QuickBooks through an official channel.