Online Threat Alerts (OTA) - Alerting you to scams and frauds.
The "Intuit E-Commerce Service" email scam below is a fake invoice or renewal alert designed to panic you into calling a fraudulent phone number so scammers can steal your financial data or remote-access your computer.
From: Intuit E-Commerce Service quickbooks@notification.intuit.comDear Customer:Your invoice-LBX-31269 for 349.99 is attached. Please remit payment at your earliest convenience.Thank you for your business - we appreciate it very much.Sincerely,GEEK~TEQ+1 802 215 0757
From: Intuit E-Commerce Service quickbooks@notification.intuit.com
Dear Customer:
Your invoice-LBX-31269 for 349.99 is attached. Please remit payment at your earliest convenience.
Thank you for your business - we appreciate it very much.
Sincerely,
GEEK~TEQ
+1 802 215 0757
@intuit.com
security@intuit.com
Check the comment section below for answers or additional information. Share what you know, or ask a question about this article by leaving a comment below.
Online Threat Alerts (OTA) is not affiliated with or endorsed by any trademark owner mentioned in this article. Some of the information in samples in this article may have been impersonated or spoofed.
51
Sent by these email addresses in the header and including the CC emails as well: "quickbooks-notification.intuit.com" , admin-primepicksnotifications.store, noreply-primepicksnotifications.store, noreply-primepicksnotifications.store, noreply-primepicksnotifications.store.Hello dear,We appreciate that you are using our service once more.Thank you for purchasing through the card. Your card linked with your PayPal account has been auto-debited for $549.99 and your annual subscription has been auto renewed successfully. The debited amount will be reflected within the next 24 h on your A/C statement.Your Renewal Details:Invoice No: NRTX-01L-XAN789Total Amount: 549.99 USDPayment Method: Auto PayIf you have not done this transaction please Speak with us: '888--508--7042' to cancel the order and get a refund.We've created an invoice report regarding your purchase, which is attached. Financial reports and other useful data are included.--------------------------------------------------------------------------------------------------------------This email was sent from a notification-only address that isn't able to receive other emails
I got something very similar as well...*They also use these emails as well in the CC area: admin-primepicksnotifications.store, noreply-primepicksnotifications.store, noreply-primepicksnotifications.store, noreply-primepicksnotifications.storeHello dear,We appreciate that you are using our service once more.Thank you for purchasing through the card. Your card linked with your PayPal account has been auto-debited for $549.99 and your annual subscription has been auto renewed successfully. The debited amount will be reflected within the next 24 h on your A/C statement.Your Renewal Details:Invoice No: NRTX-01L-XAN789Total Amount: 549.99 USDPayment Method: Auto PayIf you have not done this transaction please Speak with us: '888--508--7042' to cancel the order and get a refund.We've created an invoice report regarding your purchase, which is attached. Financial reports and other useful data are included.--------------------------------------------------------------------------------------------------------------This email was sent from a notification-only address that isn't able to receive other emails
I received this e-mail with a PDF attachemnt: Dear Customer:Your invoice-675299 for 349.99 is attached towards renewal of 3 years Subscription.For any Queries you can reach us at 1-866-307-6721Thank you for your business - we appreciate it very much.Sincerely,Nórtòn-Lîfelock1-866-307-6721
I received the same email
Intuit E-commerce serviceReceived today.19/04/23Dear customer, Your invoice 646356 for 199.99 is attached towards renewal of 3 years subscription.For any queries you can reach us at /1 888/397/6051 thankyou for your business-we appreciate it very much sincerely GeekSquad 1-888-397-6051
Received this:-----Original Message-----From: Intuit E-Commerce Service To: athm7fr-inxq0.autosSent: Fri, Feb 24, 2023 5:30 amSubject: Invoice G0K-64100 from GEEKTECHDear Customer:Your invoice-G0K-64100 for 349.99 is attached. Please remit payment at your earliest convenience.Thank you for your business - we appreciate it very much.Sincerely,GEEKTECH 1 858 667 4949
I received the same thing
I received that message too. Funny thing is: They don't even know my name.
Same message. I tried to call but did not connect. What do I do now?
I got an email from this people too. Phone number to call is 7-802-215-2466. Also an invoice was attached without an account information. Just asking to call the nubmer within 24 hrs to be able to get a refund on the of the payment posted. Amount they are asking is $349.99. Looks similar ikon to the real Norton company. But it is not. The description on the invoice is for 3 years of Norton virus security services.
Dear Customer:Your invoice-GT-489065 for 349.99 is attached towards renewal of 3 years Subscription.Customer Service for the USA & Canada 1 802 215 2466 (8 AM To 4 PM EST)Thank you for your business - we appreciate it very much.Sincerely,Nórtòn-Lîfelock 1 802 215 2466
Dear Customer:Your invoice-GT-489082 for 349.99 is attached towards renewal of 3 years Subscription.Customer Service for the USA & Canada 1 802 215 2466 (8 AM To 4 PM EST)Thank you for your business - we appreciate it very much.Sincerely,Nórtòn-Lîfelock 1 802 215 2466
Dear Customer:Your invoice-GT-489138 for 349.99 is attached towards renewal of 3 years Subscription.Customer Service for the USA & Canada 1 802 215 2466 (8 AM To 4 PM EST)Thank you for your business - we appreciate it very much.Sincerely,Nórtòn-Lîfelock 1 802 215 2466
I received the e-mail below, I just wanted everyone know this is scamand I've never heard of this company and never but anything from them.Dear Customer: Your invoice-GT-488810 for 349.99 is attached towards renewal of 3 years Subscription. Customer Service for the USA & Canada 1 802 357 3708 (8 AM To 4 PM EST) Thank you for your business - we appreciate it very much. Sincerely, Nórtòn-Lîfelock 1 802 357 3708To view attachment Open the attached PDF file. You must have Acrobat® Reader® installed to view the attachment.1 File75kB
I received 4 emails from Intuit E-Commerce Service (quickbooks-notification.intuit.com). All said I owed $349.99 for work done by the Geek Squad. I purchased nothing.
Received this scam:"Dear Customer,Thank you for choosing our service again!Your Subscription with Norton-LifeLock will renew today and $379.99 is about to be debited from your account by Today. The debited amount will be reflected within the next 24. In case of any further clarifications or block the auto-renewal service please reach out to the customer help centre.-------------Product Description:------------------------------Product: Norton-LifeLock Antivirus SecurityInvoice No: NRTX-01L-XAN789Total Amount: 379.99 USDPayment Method: Auto Pay--------------------------------------------------------------------NotesPlease let us know if you have any issues regarding the payment as refund can be claimed within 24 hours. Please connect us on 1 (866) 945-9538 within 1 working daysSincerely,Norton™ 360 Customer Care 1 (866) 945-9538---------------------------------------------------------------------------------------------------This email was sent from a notification only address that cannot accept incoming email. Please do not reply to this message."
Received one myself:Dear Customer:Your invoice-GT-845748 for 349.99 is attached towards renewal of 3 years Subscription.Customer Service for the USA & Canada 1 802 400 2749 (8 AM To 4 PM EST)Thank you for your business - we appreciate it very much.Sincerely,Nortòn--LîfeLock 1 802 400 2749
Received this:Dear Customer:Your invoice-GT-374789 for 349.99 is attached towards renewal of 3 years Subscription.Customer Service for the USA & Canada 1 802 400 2648 (8 AM To 4 PM EST)Thank you for your business - we appreciate it very much.Sincerely,Nortòn-LîfeLock 1 802 400 2648
Receivr this:"Dear Customer,Thank you for choosing our service again!Your Subscription with Norton-LifeLock will renew today and $379.99 is about to be debited from your account by Today. The debited amount will be reflected within the next 24. In case of any further clarifications or block the auto-renewal service please reach out to the customer help centre.-------------Product Description:------------------------------Product: Norton-LifeLock Antivirus SecurityInvoice No: NRTX-01L-XAN789Total Amount: 379.99 USDPayment Method: Auto Pay----------------------------------------------------------------------NotesPlease let us know if you have any issues regarding the payment as refund can be claimed within 24 hours. Please connect us on 1 (866) 945-9503 within 1 working daysSincerely,Norton™ 360 Customer Care 1 (866) 945-9503"
I received two different e-mails from GeekTECH AND Geek Teg quoting two different invoice numbers but the ammounts were for$349.99. I refused to open and deleted both and starting search for like scams. I call Intuit to ask if my Turbo Tax account had been hacked.
Received this scam:From: Intuit E-Commerce Service Date: February 24, 2023 at 5:31:08 AM ESTTo: athm10fr-inxq0.autosSubject: Invoice G0K-64078 from GEEKTECHReply-To: ih0juvf-oh4qw0h65.com Dear Customer: Your invoice-G0K-64078 for 349.99 is attached. Please remit payment at your earliest convenience. Thank you for your business - we appreciate it very much. Sincerely, GEEKTECH 1 858 667 4949
I received a very realistic email, with a very realistic .pdf invoice attachment, ostensibly from Norton LifeLock saying I renewed with a notice of my account and credit card being charged. here is the contents of the attachment sans norton logo image.. which seems to be a copy as its has pixel degradation. Notice multiple grammatical and punctuation errors. the use of sign before the phone number, the statement my credit card has been charged (which I presumed might have been through the fact that my personal data has been hacked at multiple financial institutions from which all impacted members received free monitoring some with Norton LifeLock) made me think it could be that, but upon careful checking I determined this was indeed fake, and Norton would like other online vendors send me a digital invoice.. very much a last century billing model for a large a company as Norton. Thanks for posting this as it confirmed with out my playing games with their phone number calling them with a spoofed phone number and verbally f$$king with the hackers. Enjoy INVOICE(Yellow circle with black check mark logo) Nortòn(red key logo) LîfeLock Date 2/9/2023 Invoice No # GT-142223Nortòn--LîfeLock 1 844 606 2811TotalThank you for choosing Nortòn--LîfeLocK your annual subscription is expired and Auto Renewed as per your plan. We would thank you for the completion of 12-months maintenance plan. We auto-renewed your plan and Charged $349.99 USD against your account.customer service 1 844 606 2811(below the above is a table with 3 columns) Item Description AmountNortòn--LîfeLock - Anti-Virus Security - 3 years Subscription Renewal 349.99 Total $349.99Please let us know if you have any issues regarding the payment as refund can be claimed within 24 hours of the payment. Please connect us on 1 844 606 2811 within 2 working days
got one of these today. Fortunately my kids have drummed it into me not to open anything I don’t recognise, although the way it was worded I thought payment had already been taken. I was lucky
Dear Customer:Your invoice-GT-374839 for 349.99 is attached towards renewal of 3 years Subscription.Customer Service for the USA & Canada 1 802 400 2648 (8 AM To 4 PM EST)Thank you for your business - we appreciate it very much.Sincerely,Nortòn-LîfeLock 1 802 400 2648
Dear Customer:Your invoice-GT-845490 for 349.99 is attached towards renewal of 3 years Subscription.Customer Service for the USA & Canada 1 802 400 2749 (8 AM To 4 PM EST)Thank you for your business - we appreciate it very much.Sincerely,Nortòn--LîfeLock 1 802 400 2749Today 02/23 with an invoice attached saying I have 2 days to dispute to call the number
I got one!Intuit E-Commerce Service to dfvb29cx-muk43hs.clickYesterday, 2:53 PMwww.intuit.comDear Customer:Your invoice-ST-5508 for 349.99 is attached. Please remit payment at your earliest convenience.Thank you for your business - we appreciate it very much.Sincerely, GEEKSQUAD 1 802 200 2515To view attachmentOpen the attached PDF file. You must have Acrobat® Reader® installed to view the attachment.Inv_ST5...24.pdf
I got same exact one but they say Norton Lifelock is who is charging me. Do not have an account there. I deleted it.
I received 2 today, Feb 23 2023
I received it Feb 21, 2023
My parents received this: From: Intuit E-Commerce Service Date: February 16, 2023 at 2:03:05 PM ESTTo: paid95-inb4.cfdSubject: Your Invoice GT-622919 ~Payment ProcessedReply-To: no_reply-norton2.comDear Customer:Your invoice-GT-622919 for 349.99 is attached towards renewal of 3 years Subscription.Customer Service for the USA & Canada 1 802 402 4253 (8 AM To 4 PM EST)Thank you for your business - we appreciate it very much.Sincerely,Nortòn-LîfeLock 1 802 402 4253
I have received the same email as wellPhone number is 1(802) instead of 1(800)I usually ignore emails like this but what made me to look deeper into this one is the sender’s email address:quickbooks-notification.intuit.comWhich is as genuine as it can get I checked all my credit cards to be sure they haven’t been charged (they were not) and also googled the phone number which came as Car warranty scam as wellBe careful people! Don’t fall for it
I got the same thing today to a personal email account. What's even more concerning is that the QuickBooks/Intuit Help Center has "quickbooks-notification.intuit.com" listed as a valid sender, which matched the sender in my case as well. Definitely sketchy, and a scam.
Dear Customer:Your invoice-GT-767114 for 349.99 is attached towards renewal of 3 years Subscription.Customer Service for the USA & Canada 1 802 400 2750 (8 AM To 4 PM EST)Thank you for your business - we appreciate it very much.Sincerely,Nortòn--LîfeLock 1 802 400 2750To view attachment Open the attached PDF file. You must have Acrobat® Reader® installed to view the attachment.
Received this:"Dear Customer:Your invoice-GT-330450 for 349.99 is attached towards renewal of 3 years Subscription.Customer Service for the USA & Canada 1 802 400 2750 (8 AM To 4 PM EST)Thank you for your business - we appreciate it very much.Sincerely,Nortòn--LîfeLock 1 802 400 2750To view attachment Open the attached PDF file. You must have Acrobat® Reader® installed to view the attachment. Nortòn--LîfeLock 1 802 400 2750INVOICEDate 2/16/2023 Invoice No # GT-330450your annual subscription is expired andThank you for choosingAuto Renewed as per your plan.Nortòn--LîfeLockWe would thank you for the completion of 12-months maintenance plan.We auto-renewed your plan and Charged $349.99USD against your account.customer service 1 802 400 2750 Item Description Amount Norton~LifeLock - Anti-Virus Security - 3 years Subscription Renewal 349.99 Total $349.99Please let us know if you have any issues regarding the payment as refund can be claimed within 24 hours of the payment. Please connect us on 1 802 400 2750 within 2 working Nortòn--LîfeLock 1 802 400 2750INVOICEDate 2/16/2023 Invoice No # GT-330450your annual subscription is expired andThank you for choosingAuto Renewed as per your plan.Nortòn--LîfeLockWe would thank you for the completion of 12-months maintenance plan.We auto-renewed your plan and Charged $349.99USD against your account.customer service 1 802 400 2750 Item Description Amount Norton~LifeLock - Anti-Virus Security - 3 years Subscription Renewal 349.99 Total $349.99Please let us know if you have any issues regarding the payment as refund can be claimedWe're just passing through on our way to the Jazz Jamboree. within 24 hours of the payment. Please connect us on 1 802 400 2750 within 2 working days"
Received this on 2/1/23Dear Customer:Your invoice-GT-622621 for 349.99 is attached towards renewal of 3 years Subscription.Customer Service for the USA & Canada 1 802 402 4253 (8 AM To 4 PM EST)Thank you for your business - we appreciate it very much.Sincerely,Nortòn-LîfeLock 1 802 402 4253
Received this:Intuit E-Commerce Service quickbooks-notification.intuit.comHideTo paid8-inv13.cfdDear Customer:Your invoice-GT-347967 for 349.99 is attached towards renewal of 3 years Subscription.Customer Service for the USA & Canada 1 802 400 2750 (8 AM To 4 PM EST)Thank you for your business - we appreciate it very much.Sincerely,Nortòn-LîfeLock 1 802 400 2750To view attachmentOpen the attached PDF file. You must have Acrobat® Reader® installed to view the attachment.
Received this:"Management Report For the period ending 15 February 2023 Dear Customer,Thank you for choosing our service again!Your Subscription with Norton-LifeLock will renew today and $379.99 is about to be debited from your account by Today. The debited amount will be reflected within the next 24. In case of any further clarifications or block the auto-renewal service please reach out to the customer help centre. -------------Product Description:------------------------------Product: Norton-LifeLock Antivirus Security Invoice No: NRTX-AW98K-19JKLTotal Amount: 379.99 USDPayment Method: Auto Pay(Quickbooks Group Payment)----------------------------------------------------------------------NotesPlease let us know if you have any issues regarding the payment as refund can be claimed within 24 hours. Please connect us on 1 (866) 945-9503 within 1 working daysSincerely,2023 Norton-LifeLock All Rights Reserved 1 (866) 945-9503-------------------------------------------------------------------------------------------------------This email was sent from a notification only address that cannot accept incoming email. Please do not reply to this message.
I received 2 email today I didn't even trust to open. I believe is a scam.!Dear Customer:Your invoice-CT-8635 for 349.99 is attached. Please remit payment at your earliest convenience.Thank you for your business - we appreciate it very much.Sincerely,GEEKSQUAD 1 802 321 8040To view attachmentOpen the attached PDF file. You must have Acrobat® Reader® installed to view the attachment.
Received this:Intuit E-Commerce ServiceDear Customer:Your invoice-GT-432180 for 349.99 is attached towards renewal of 3 years Subscription.Customer Service for the USA & Canada 1 888 857 2097 (8 AM To 4 PM EST)Thank you for your business - we appreciate it very much.Sincerely,Nortòn-LîfeLock 1 888 857 2097
Dear Customer:Your invoice-GT-142255 for 349.99 is attached towards renewal of 3 years Subscription.Customer Service for the USA & Canada 1 844 606 2811 (8 AM To 4 PM EST)Thank you for your business - we appreciate it very much.Sincerely,Nortòn--LîfeLock 1 844 606 2811
Dear Customer:Your invoice-PK-8754 for 349.99 is attached. Please remit payment at your earliest convenience.Thank you for your business - we appreciate it very much.Sincerely,GEEKSQUAD 1 802 633 0204
I also got this Intuit spam message today (2/8/23) signed Norton/Lifelock.
Received this:"Intuit E-Commerce Service To:paid6-ddbill2.cfdWed, Feb 8 at 12:48 PMDear Customer:Your invoice-GT-233342 for 349.99 is attached towards renewal of 3 years Subscription.Customer Service for the USA & Canada 1 888 857 2097 (8 AM To 4 PM EST)Thank you for your business - we appreciate it very much.Sincerely,Nortòn--LîfeLock 1 888 857 2097"
I got this email to.
I got this email as well how do I report it?
This is the email I received today: Intuit E-Commerce Services To: paid55-ing.cfd> - No clue what that address is Your Invoice GT-2575 Amt: $349.99 (3 yr. renewal of LifeLock) Payment Processed Dear Customer etc. Norton/LifeLock did not send me this email, nor would they have.
I received this email 2/14/23
I have received two of these emails in two days. I am a little old OAP never heard of them let alone subscribed. I have forwarded the emails to the fraud Dept.
I too got 3 emails in the past 24 hours.
I have got 3 of these emails in the last 24 hours....This is just crazy