The email messages below with the subjects: "Your tax refund status" and "Your account has been locked" are phishing scams. The email messages were not sent by Intuit who owns the tax software Turbo Pay, but by cyber-criminals who designed the messages to steal the recipients' Turbo Tax usernames, passwords, personal and financial information, by attempting to trick them into clicking on a link in it, which will take them to a fake Intuit Turbo Tax website.
The Fake and Phishing Intuit Turbo Tax Email Messages
Subject: Your tax refund status
Dear Valued Customer
This is to inform all our valued customers that TurboTax ®, in an effort to further protect you is upgrading its Security features and this requires all registered customers to update their Online login details by simply signing in to their accounts.
By doing so, you will benefit from the newly upgraded security features following directives by the Internal Revenue Service.
Follow below link to migrate to the new SSL Secured server provided by TurboTax.
Subject: Your account has been locked
Due to in activiy in your account for the the past 260 days we will delete your account with 48 hrs.
To keep your information safe, we've temporarily locked your account from further access.
click here to unlock and gain full access
Security Certification of the TurboTax Online application has been performed by C-Level Security
©2015 Intuit Inc. All rights reserved.
The link in the email messages goes to the fake or phishing website, which will ask the potential victims who clicked the link, to enter their Intuit Turbo Tax username and password that the cyber-criminals behind the fake email messages need to hijack their accounts.
If the potential victims enter the information requested, it will be sent to the scammers behind the fake email and phishing website.
With the potential victims information, thee scammers will be able to gain access to their accounts.
If you unknowingly clicked on the link in the email message, please change your Intuit Turbo Tax's password immediately and contact them.
Never click on a link in an email message or anywhere else to login or sign into your online accounts. Always go directly to the website by typing the name of the website into your web browser's address bar.