Online Threat Alerts (OTA) - Alerting you to scams and frauds.

Intuit E-commerce Service Scam Email - How to Protect Yourself
Intuit E-commerce Service Scam Email - How to Protect Yourself

The "Intuit E-Commerce Service" email scam below is a fake invoice or renewal alert designed to panic you into calling a fraudulent phone number so scammers can steal your financial data or remote-access your computer.

The Intuit Ecommerce Email Scam

From: Intuit E-Commerce Service quickbooks@notification.intuit.com

Dear Customer:

Your invoice-LBX-31269 for 349.99 is attached. Please remit payment at your earliest convenience.

Thank you for your business - we appreciate it very much.

Sincerely,

GEEK~TEQ

+1 802 215 0757

Warning Signs of the Scam

  • Fake Charges: The email often claims you owe a large, random amount of money (such as $489.99) for an annual service, software renewal, or subscription you did not buy.
  • False Urgency: It uses threatening or high-pressure language demanding you act within "one working day" to stop an automatic charge.
  • Suspicious Contacts: The message lists a phone number to call for cancellations or refunds, or uses a hidden non-Intuit return address (like a generic free webmail account) despite showing an official-sounding display name.
  • Abused Systems: Sometimes criminals abuse real notification pathways (like legitimate third-party signing or invoicing tools) to send fake bills that look real.

How to Protect Yourself

  • Do Not Call: Never call the phone number provided inside a suspicious invoice email.
  • Check Directly: Open a fresh web browser window, go straight to your QuickBooks Official Site, and sign in to view your actual billing history.
  • Inspect Addresses: Verify that official emails strictly end with @intuit.com.
  • Report It: Forward any fake messages to security@intuit.com and permanently delete the email.
51

Comment sectionComments / Answers (51)

Remove sensitive information from your post. Your IP address will be used to display your estimated location.

Comment count 51

by an anonymous user from: Winter Garden, Florida, United States

Sent by these email addresses in the header and including the CC emails as well: "quickbooks-notification.intuit.com" , admin-primepicksnotifications.store, noreply-primepicksnotifications.store, noreply-primepicksnotifications.store, noreply-primepicksnotifications.store.


Hello dear,

We appreciate that you are using our service once more.

Thank you for purchasing through the card. Your card linked with your PayPal account has been auto-debited for $549.99 and your annual subscription has been auto renewed successfully. The debited amount will be reflected within the next 24 h on your A/C statement.

Your Renewal Details:

Invoice No: NRTX-01L-XAN789
Total Amount: 549.99 USD
Payment Method: Auto Pay

If you have not done this transaction please Speak with us: '888--508--7042' to cancel the order and get a refund.

We've created an invoice report regarding your purchase, which is attached. Financial reports and other useful data are included.
--------------------------------------------------------------------------------------------------------------
This email was sent from a notification-only address that isn't able to receive other emails

Delete


by an anonymous user from: Winter Garden, Florida, United States

I got something very similar as well...

*They also use these emails as well in the CC area: admin-primepicksnotifications.store, noreply-primepicksnotifications.store, noreply-primepicksnotifications.store, noreply-primepicksnotifications.store

Hello dear,

We appreciate that you are using our service once more.

Thank you for purchasing through the card. Your card linked with your PayPal account has been auto-debited for $549.99 and your annual subscription has been auto renewed successfully. The debited amount will be reflected within the next 24 h on your A/C statement.

Your Renewal Details:

Invoice No: NRTX-01L-XAN789
Total Amount: 549.99 USD
Payment Method: Auto Pay

If you have not done this transaction please Speak with us: '888--508--7042' to cancel the order and get a refund.

We've created an invoice report regarding your purchase, which is attached. Financial reports and other useful data are included.
--------------------------------------------------------------------------------------------------------------
This email was sent from a notification-only address that isn't able to receive other emails

Delete


by an anonymous user from: Cuauhtémoc, Mexico City, Mexico

I received this e-mail with a PDF attachemnt:

Dear Customer:

Your invoice-675299 for 349.99 is attached towards renewal of 3 years Subscription.

For any Queries you can reach us at 1-866-307-6721

Thank you for your business - we appreciate it very much.

Sincerely,
Nórtòn-Lîfelock
1-866-307-6721

Delete


by an anonymous user from: Middletown, New Jersey, United States

I received the same email

Delete


by an anonymous user from: Christchurch, Canterbury, New Zealand

Intuit E-commerce service

Received today.19/04/23
Dear customer, Your invoice 646356 for 199.99 is attached towards renewal of 3 years subscription.For any queries you can reach us at /1 888/397/6051 thankyou for your business-we appreciate it very much
sincerely GeekSquad 1-888-397-6051

Delete



by an anonymous user from: Columbus, Ohio, United States

Received this:

-----Original Message-----
From: Intuit E-Commerce Service
To: athm7fr-inxq0.autos
Sent: Fri, Feb 24, 2023 5:30 am
Subject: Invoice G0K-64100 from GEEKTECH

Dear Customer:

Your invoice-G0K-64100 for 349.99 is attached. Please remit payment at your earliest convenience.

Thank you for your business - we appreciate it very much.

Sincerely,
GEEKTECH

1 858 667 4949

Delete


by an anonymous user from: Canoga Park, California, United States

I received the same thing

Delete


by an anonymous user from: Monterey Park, California, United States

I received that message too. Funny thing is: They don't even know my name.

Delete


by an anonymous user from: Artesia, California, United States

Same message. I tried to call but did not connect. What do I do now?

Delete


by an anonymous user from: Las Vegas, Nevada, United States

I got an email from this people too. Phone number to call is 7-802-215-2466. Also an invoice was attached without an account information. Just asking to call the nubmer within 24 hrs to be able to get a refund on the of the payment posted. Amount they are asking is $349.99. Looks similar ikon to the real Norton company. But it is not. The description on the invoice is for 3 years of Norton virus security services.

Delete


by an anonymous user from: Richardson, Texas, United States

Dear Customer:

Your invoice-GT-489065 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 802 215 2466 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nórtòn-Lîfelock
1 802 215 2466

Delete


by an anonymous user from: Azusa, California, United States

Dear Customer:

Your invoice-GT-489082 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 802 215 2466 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nórtòn-Lîfelock
1 802 215 2466

Delete


by an anonymous user from: Redmond, Washington, United States

Dear Customer:

Your invoice-GT-489138 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 802 215 2466 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nórtòn-Lîfelock
1 802 215 2466

Delete


by an anonymous user from: Tehran, Iran

I received the e-mail below,
I just wanted everyone know this is scam
and I've never heard of this company and never but anything from them.



Dear Customer:

Your invoice-GT-488810 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 802 357 3708 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nórtòn-Lîfelock
1 802 357 3708
To view attachment
Open the attached PDF file. You must have Acrobat® Reader® installed to view the attachment.

1 File75kB

Delete


by an anonymous user from: Lutz, Florida, United States

I received 4 emails from Intuit E-Commerce Service (quickbooks-notification.intuit.com). All said I owed $349.99 for work done by the Geek Squad. I purchased nothing.

Delete


by an anonymous user from: Monroe, Louisiana, United States

Received this scam:

"Dear Customer,

Thank you for choosing our service again!

Your Subscription with Norton-LifeLock will renew today and $379.99 is about to be debited from your account by Today. The debited amount will be reflected within the next 24. In case of any further clarifications or block the auto-renewal service please reach out to the customer help centre.

-------------Product Description:------------------------------

Product: Norton-LifeLock Antivirus Security
Invoice No: NRTX-01L-XAN789
Total Amount: 379.99 USD
Payment Method: Auto Pay
--------------------------------------------------------------------
Notes
Please let us know if you have any issues regarding the payment as refund can be claimed within 24 hours. Please connect us on 1 (866) 945-9538 within 1 working days

Sincerely,
Norton™ 360 Customer Care
1 (866) 945-9538

---------------------------------------------------------------------------------------------------
This email was sent from a notification only address that cannot accept incoming email. Please do not reply to this message."

Delete


by an anonymous user from: Sumter, South Carolina, United States

Received one myself:

Dear Customer:

Your invoice-GT-845748 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 802 400 2749 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nortòn--LîfeLock
1 802 400 2749

Delete


by an anonymous user from: McKinney, Texas, United States

Received this:

Dear Customer:

Your invoice-GT-374789 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 802 400 2648 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nortòn-LîfeLock
1 802 400 2648

Delete


by an anonymous user from: Florida, United States

Receivr this:

"Dear Customer,

Thank you for choosing our service again!

Your Subscription with Norton-LifeLock will renew today and $379.99 is about to be debited from your account by Today. The debited amount will be reflected within the next 24. In case of any further clarifications or block the auto-renewal service please reach out to the customer help centre.

-------------Product Description:------------------------------

Product: Norton-LifeLock Antivirus Security
Invoice No: NRTX-01L-XAN789
Total Amount: 379.99 USD
Payment Method: Auto Pay

----------------------------------------------------------------------
Notes
Please let us know if you have any issues regarding the payment as refund can be claimed within 24 hours. Please connect us on 1 (866) 945-9503 within 1 working days

Sincerely,
Norton™ 360 Customer Care
1 (866) 945-9503"

Delete


by an anonymous user from: Boulder Creek, California, United States

I received two different e-mails from GeekTECH AND Geek Teg quoting two different invoice numbers but the ammounts were for$349.99. I refused to open and deleted both and starting search for like scams. I call Intuit to ask if my Turbo Tax account had been hacked.

Delete


by info

Received this scam:

From: Intuit E-Commerce Service
Date: February 24, 2023 at 5:31:08 AM EST
To: athm10fr-inxq0.autos
Subject: Invoice G0K-64078 from GEEKTECH
Reply-To: ih0juvf-oh4qw0h65.com

 Dear Customer:

Your invoice-G0K-64078 for 349.99 is attached. Please remit payment at your earliest convenience.

Thank you for your business - we appreciate it very much.

Sincerely,
GEEKTECH

1 858 667 4949

Delete


by an anonymous user from: Wallingford, Connecticut, United States

I received a very realistic email, with a very realistic .pdf invoice attachment, ostensibly from Norton LifeLock saying I renewed with a notice of my account and credit card being charged. here is the contents of the attachment sans norton logo image.. which seems to be a copy as its has pixel degradation. Notice multiple grammatical and punctuation errors. the use of sign before the phone number, the statement my credit card has been charged (which I presumed might have been through the fact that my personal data has been hacked at multiple financial institutions from which all impacted members received free monitoring some with Norton LifeLock) made me think it could be that, but upon careful checking I determined this was indeed fake, and Norton would like other online vendors send me a digital invoice.. very much a last century billing model for a large a company as Norton.

Thanks for posting this as it confirmed with out my playing games with their phone number calling them with a spoofed phone number and verbally f$$king with the hackers.

Enjoy


INVOICE

(Yellow circle with black check mark logo) Nortòn
(red key logo) LîfeLock

Date 2/9/2023

Invoice No # GT-142223

Nortòn--LîfeLock

1 844 606 2811


Total

Thank you for choosing Nortòn--LîfeLocK your annual subscription is expired and Auto Renewed as per your plan.

We would thank you for the completion of 12-months maintenance plan.

We auto-renewed your plan and Charged $349.99 USD against your account.

customer service 1 844 606 2811

(below the above is a table with 3 columns)

Item Description Amount
Nortòn--LîfeLock - Anti-Virus Security - 3 years Subscription Renewal 349.99


Total $349.99


Please let us know if you have any issues regarding the payment as refund can be claimed within 24 hours of the payment.
Please connect us on 1 844 606 2811 within 2 working days

Delete


by an anonymous user from: Salford, England, United Kingdom

got one of these today. Fortunately my kids have drummed it into me not to open anything I don’t recognise, although the way it was worded I thought payment had already been taken. I was lucky

Delete


by an anonymous user from: Weare, New Hampshire, United States

Dear Customer:

Your invoice-GT-374839 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 802 400 2648 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nortòn-LîfeLock
1 802 400 2648

Delete


by an anonymous user from: Bonita Springs, Florida, United States

Dear Customer:

Your invoice-GT-845490 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 802 400 2749 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nortòn--LîfeLock
1 802 400 2749

Today 02/23 with an invoice attached saying I have 2 days to dispute to call the number

Delete


by an anonymous user from: Allentown, Pennsylvania, United States

I got one!

Intuit E-Commerce Service to dfvb29cx-muk43hs.click

Yesterday, 2:53 PM

www.intuit.com

Dear Customer:

Your invoice-ST-5508 for 349.99 is attached. Please remit payment at your earliest convenience.

Thank you for your business - we appreciate it very much.

Sincerely, GEEKSQUAD

1 802 200 2515

To view attachment

Open the attached PDF file. You must have Acrobat® Reader® installed to view the attachment.

Inv_ST5...24.pdf

Delete


by an anonymous user from: Bonita Springs, Florida, United States

I got same exact one but they say Norton Lifelock is who is charging me. Do not have an account there. I deleted it.

Delete


by an anonymous user from: Florida, United States

I received 2 today, Feb 23 2023

Delete


by an anonymous user from: Bratislava, Bratislavský kraj, Slovakia

I received it Feb 21, 2023

Delete


by an anonymous user from: Midland, Michigan, United States

My parents received this:
From: Intuit E-Commerce Service
Date: February 16, 2023 at 2:03:05 PM EST
To: paid95-inb4.cfd
Subject: Your Invoice GT-622919 ~Payment Processed
Reply-To: no_reply-norton2.com


Dear Customer:

Your invoice-GT-622919 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 802 402 4253 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nortòn-LîfeLock
1 802 402 4253

Delete


by an anonymous user from: Saskatoon, Saskatchewan, Canada

I have received the same email as well
Phone number is 1(802) instead of 1(800)
I usually ignore emails like this but what made me to look deeper into this one is the sender’s email address:
quickbooks-notification.intuit.com
Which is as genuine as it can get
I checked all my credit cards to be sure they haven’t been charged (they were not) and also googled the phone number which came as Car warranty scam as well
Be careful people! Don’t fall for it

Delete


by an anonymous user from: Gardena, California, United States

I got the same thing today to a personal email account. What's even more concerning is that the QuickBooks/Intuit Help Center has "quickbooks-notification.intuit.com" listed as a valid sender, which matched the sender in my case as well. Definitely sketchy, and a scam.

Delete


by an anonymous user from: San Jacinto, California, United States

Dear Customer:

Your invoice-GT-767114 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 802 400 2750 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nortòn--LîfeLock
1 802 400 2750
To view attachment
Open the attached PDF file. You must have Acrobat® Reader® installed to view the attachment.

Delete


by an anonymous user from: Atlanta, Georgia, United States

Received this:

"Dear Customer:

Your invoice-GT-330450 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 802 400 2750 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nortòn--LîfeLock
1 802 400 2750

To view attachment
Open the attached PDF file. You must have Acrobat® Reader® installed to view the attachment.


Nortòn--LîfeLock 1 802 400 2750
INVOICE
Date 2/16/2023 Invoice No # GT-330450
your annual subscription is expired and
Thank you for choosing
Auto Renewed as per your plan.
Nortòn--LîfeLock
We would thank you for the completion of 12-months maintenance plan.
We auto-renewed your plan and Charged $349.99USD against your account.
customer service
1 802 400 2750
Item Description Amount
Norton~LifeLock
- Anti-Virus Security - 3 years Subscription Renewal
349.99
Total $349.99
Please let us know if you have any issues regarding the payment as refund can be claimed within 24 hours of the payment. Please connect us on 1 802 400 2750 within 2 working


Nortòn--LîfeLock 1 802 400 2750
INVOICE
Date 2/16/2023 Invoice No # GT-330450
your annual subscription is expired and
Thank you for choosing
Auto Renewed as per your plan.
Nortòn--LîfeLock
We would thank you for the completion of 12-months maintenance plan.
We auto-renewed your plan and Charged $349.99USD against your account.
customer service
1 802 400 2750
Item Description Amount
Norton~LifeLock
- Anti-Virus Security - 3 years Subscription Renewal
349.99
Total $349.99
Please let us know if you have any issues regarding the payment as refund can be claimedWe're just passing through on our way to the Jazz Jamboree. within 24 hours of the payment. Please connect us on 1 802 400 2750 within 2 working days"

Delete


by an anonymous user from: Redmond, Washington, United States

Received this on 2/1/23

Dear Customer:

Your invoice-GT-622621 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 802 402 4253 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nortòn-LîfeLock
1 802 402 4253

Delete


by an anonymous user from: Ashburn, Virginia, United States

Received this:

Intuit E-Commerce Service quickbooks-notification.intuit.comHide
To paid8-inv13.cfd
Dear Customer:

Your invoice-GT-347967 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 802 400 2750 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nortòn-LîfeLock
1 802 400 2750
To view attachment
Open the attached PDF file. You must have Acrobat® Reader® installed to view the attachment.

Delete


by an anonymous user from: Ivrea, Piedmont, Italy

Received this:

"Management Report
For the period ending 15 February 2023




Dear Customer,

Thank you for choosing our service again!

Your Subscription with Norton-LifeLock will renew today and $379.99 is about to be debited from your account by Today. The debited amount will be reflected within the next 24. In case of any further clarifications or block the auto-renewal service please reach out to the customer help centre.

-------------Product Description:------------------------------

Product: Norton-LifeLock Antivirus Security
Invoice No: NRTX-AW98K-19JKL
Total Amount: 379.99 USD
Payment Method: Auto Pay(Quickbooks Group Payment)

----------------------------------------------------------------------
Notes
Please let us know if you have any issues regarding the payment as refund can be claimed within 24 hours. Please connect us on 1 (866) 945-9503 within 1 working days

Sincerely,
2023 Norton-LifeLock All Rights Reserved
1 (866) 945-9503
-------------------------------------------------------------------------------------------------------
This email was sent from a notification only address that cannot accept incoming email. Please do not reply to this message.

Delete


by an anonymous user from: Brandon, Florida, United States

I received 2 email today I didn't even trust to open. I believe is a scam.!

Dear Customer:

Your invoice-CT-8635 for 349.99 is attached. Please remit payment at your earliest convenience.

Thank you for your business - we appreciate it very much.

Sincerely,
GEEKSQUAD

1 802 321 8040

To view attachment
Open the attached PDF file. You must have Acrobat® Reader® installed to view the attachment.

Delete


by an anonymous user from: Oneida, New York, United States

Received this:

Intuit E-Commerce Service
Dear Customer:

Your invoice-GT-432180 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 888 857 2097 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nortòn-LîfeLock
1 888 857 2097

Delete


by an anonymous user from: Ashburn, Virginia, United States

Dear Customer:

Your invoice-GT-142255 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 844 606 2811 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nortòn--LîfeLock
1 844 606 2811

Delete


by an anonymous user from: Ashburn, Virginia, United States

Dear Customer:

Your invoice-PK-8754 for 349.99 is attached. Please remit payment at your earliest convenience.

Thank you for your business - we appreciate it very much.

Sincerely,
GEEKSQUAD

1 802 633 0204

Delete


by an anonymous user from: Prescott, Arizona, United States

I also got this Intuit spam message today (2/8/23) signed Norton/Lifelock.

Delete


by an anonymous user from: Columbia, South Carolina, United States

Received this:

"Intuit E-Commerce Service
To:paid6-ddbill2.cfd
Wed, Feb 8 at 12:48 PM
Dear Customer:

Your invoice-GT-233342 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 888 857 2097 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nortòn--LîfeLock
1 888 857 2097"

Delete


by an anonymous user from: Bucharest, Romania

I got this email to.

Delete


by an anonymous user from: Weare, New Hampshire, United States

I got this email as well how do I report it?

Delete


by an anonymous user from: Buffalo, New York, United States

This is the email I received today:

Intuit E-Commerce Services
To: paid55-ing.cfd> - No clue what that address is

Your Invoice GT-2575 Amt: $349.99 (3 yr. renewal of LifeLock)
Payment Processed

Dear Customer etc.

Norton/LifeLock did not send me this email, nor would they have.

Delete


by an anonymous user from: Columbus, Ohio, United States

I received this email 2/14/23

Delete


by an anonymous user from: Salford, England, United Kingdom

I have received two of these emails in two days. I am a little old OAP never heard of them let alone subscribed. I have forwarded the emails to the fraud Dept.

Delete


by an anonymous user from: Auckland, Auckland, New Zealand

I too got 3 emails in the past 24 hours.

Delete


by an anonymous user from: Boulder Creek, California, United States

I have got 3 of these emails in the last 24 hours....This is just crazy

Delete


waiting