Intuit Scam Emails with Attached Invoice

Received Hello,

vincentruiz tresdb sent you a file using Neat. Please click the link below to download the file.

Dear Customer, Your invoice for 349.99 USD is attached towards renewal of 3 years Subscription. Customer Service for the USA & Canada 1 855 470 4115 The Geek Squad® - 3 Years Membership (Amount: 349.99 USD, Quantity: 1) Total: $349.99 1 855 470 4115

with a link to download invoice.

Received this:

"Dear Norton,
PHONEX LOGISTICS would like to be paid through Payoneer.
Payment request details:
Due By 5/25/2023
Payment request ID 9445667
Description Your PC subscription is activated for 349.99 USD To cancel your subscription please call us at 855 538 1723
Amount 349.99 USD

PAY
Paying with Payoneer is easy and secure. Learn more.

Have questions? Read our FAQ.

Payoneer provides global payment solutions to over 3 million users and thousands of integrated partners including Amazon, Google, Fiverr, Airbnb and more.

If you have any questions, please feel free to contact us.

Thank you,The Payoneer Team"

Here is the text of the SCAM email I received today. A couple of errors in the email are clear giveaways as well. The phone number also is bogus, and it flips over to a centralized call center. And check the return email, "paid106-bet1.click" another sign of this being a scam.

===========================================================================================
Dear Customer:

Your invoice-675652 for 349.99 is attached towards renewal of 3 years Subscription.

For any Queries you can reach us .

Thank you for your business - we appreciate it very much.

Sincerely,
Allen
Billing Dept.


To view attachment
Open the attached PDF file. You must have Acrobat® Reader® installed to view the attachment.
===========================================================================================

Subject: Your Invoice 674518 from Nórtòn-Lîfelock 1 855 538 1723

Dear Customer:

Your invoice-674518 for 349.99 is attached towards renewal of 3 years Subscription.

For any Queries you can reach us.

Thank you for your business - we appreciate it very much.

Sincerely,
Allen
Billing Dept.
To view attachment
Open the attached PDF file. You must have Acrobat® Reader® installed to view the attachment.

I receive these e-mails in batches of 3 over a two day period. they then stop for a week or two and start up again.
I have deleted around 12 of them with no detrimental effect.
My advice would be to delete and forget about them

My wife got the same email, and opened the PDF attachement, the computer has a Mcfee internet security, would there be a problem ? any action to take ?

I do not think the attachment contains malware. The PDF contains a telephone number that they ask you to call.

From: Intuit E-Commerce Service
To: "paid27-inq1.cfd"
Sent: Tuesday, March 7, 2023, 02:16:13 AM EST
Subject: Your Invoice #GT-299049 ~Payment Processed

Dear Customer:

Your invoice-GT-299049 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 802 491 3957 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nórtòn-Lîfelock
1 802 491 3957

I received the same email with a different phone number, which I called to ask them to remove the renewal. They repeatedly asked me what type of phone I was using and wanted me to do one thing on my phone. I didn't follow their instruction and ended the call. I then realized it might be some kind of scam so I searched online and found this forum. I hope it will be helpful to others.

Dear Customer:

Your invoice-GT-299080 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 802 491 3957 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nórtòn-Lîfelock
1 802 491 3957

I have received this many times. Sent it to Intuit about stopping it, and I have not seeing any results. So either looks fake to begin with plus I know I don’t have an account with into it.

I got the same one. But different phone number. I knew it was a scam though because I never signed up for it or even visited their website.

Received on 28/02/2023
I live in UK and never sign up for anything like this, and that was the reason to make me research.
Dear Customer:

Your invoice-GT-436238 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 802 213 4990 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nórtòn-Lîfelock
1 802 213 4990
To view attachment
Open the attached PDF file. You must have Acrobat® Reader® installed to view the attachment.

Received Monday, Feb 27


Dear Customer:

Your invoice-GT-233874 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 802 213 4211 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nortòn-Lîfelock
1 802 213 4211
To view attachment
Open the attached PDF file. You must have Acrobat® Reader® installed to view the attachment.

Reply Reply All Forward

Received this week:

Intuit E-Commerce Service"
Attachments
2:59 AM (13 hours ago)
to paid2

Dear Customer:

Your invoice-GT-601060 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 802 400 2648 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nortòn-LîfeLock
1 802 400 2648

Who can I report this too that actually cares?

Got the same one, but with a call to Norton LifeLock

whoever posted this, thank you! I got 3 of these emails. each with different invoices starting with GT. I figured i'd google the number before I called it.

Just got this email. Since I never signed up for Quickbooks, it was a red flag when it was saying I was renewing! SCAM

I did receive this email and searched to see if it was a scam as I did not ever sign up so it wasn’t reasonable that to receive an invoice. Glad I did not call the number. Thanks for the information

Who can stop these scammer? My dad is 82 years old. These scammers get him all the time.

Dear Customer:

Your invoice-GT-233329 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 888 857 2097 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nortòn--LîfeLock
1 888 857 2097

Received this:

Begin forwarded message:

On Friday, February 10, 2023, 8:10 AM, Intuit E-Commerce Service wrote:

Dear Customer:

Your invoice-GT-432176 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 888 857 2097 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nortòn-LîfeLock
1 888 857 2097
To view attachment
Open the attached PDF file. You must have Acrobat® Reader® installed to view the attachment.

Same as everyone, two emails in different invoice numbers. The domain is from -notification.intuit.com so it looks real. Hope intuit do something about it to clear its name.

Dear Customer:
Your invoice-GT-776555 for 349.99 is attached towards renewal of 3 years Subscription.
Customer Service for the USA & Canada 1 888 857 2097 (8 AM To 4 PM EST)
Thank you for your business - we appreciate it very much.

Sincerely,

Nortòn--LîfeLock
1 888 857 2097

Two emails this morning.

I received this email twice this morning about an hour apart with two different invoice numbers. What I did before entertaining it was look at my credit card charges for the only intuit website I did business with to see if I had any pending charges, which I didn't and I also looked at the attached phone number which was nonsense, so I just deleted the email. Also the wording is a few words off (like it doesn't say to remit payment) unless that's in the attached pdf I chose not to open since I've heard even pdf files can contain viruses.

Same. Twice this morning.

I received this email twice today 2/10
2 different invoice numbers

Same here, two emails. Today, 2/10/23.

Received it this morning.


Dear Customer:

Your invoice-GT-432240 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 888 857 2097 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nortòn-LîfeLock
1 888 857 2097

Received today and notified Norton. I deleted.

I got my email this morning 2-10-2023

Dear Customer:

Your invoice-GT-432230 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 888 857 2097 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nortòn-LîfeLock
1 888 857 2097

JERKS!!!

I called the number what should I do I blocked the number and junks the email

I received the same email that’s displayed in this article and it had me worried because I just did my taxes and used a similar service, it’s 100% a scam don’t click it don’t believe it just delete it . SCAM SCAM SCAM

Same e-mail, same charge amount, and same scam, but listing it as a Norton Lifelock renewal...

Received the email today and knew right away it was not real. These scammers will stop at nothing to steal from hard working people.

Got this today. How did they spoof the intuit.com domain??

From: "Intuit E-Commerce Service"
Sent: Wednesday, February 8, 2023 12:47 PM
To: paid42-ddbill2.cfd
Subject: Your Invoice GT-233332 ~Payment Processed

Dear Customer:

Your invoice-GT-233332 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 888 857 2097 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nortòn--LîfeLock
1 888 857 2097
To view attachment
Open the attached PDF file. You must have Acrobat® Reader® installed to view the attachment.

Looks real enough but it is a scam... here is the email that included the attachment

Intuit E-Commerce Service
To:
paid45-ddbill2.cfd


Wed, Feb 8 at 12:48 PM

Dear Customer:

Your invoice-GT-233335 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 888 857 2097 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nortòn--LîfeLock
1 888 857 2097

Wed, Feb 8 at 12:48 PM

Your Invoice GT-233302 ~Payment Processed



Intuit E-Commerce Service
To:
paid15-ddbill2.cfd


Wed, Feb 8 at 12:48 PM

Dear Customer:

Your invoice-GT-233302 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 888 857 2097 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nortòn--LîfeLock
1 888 857 2097

Got the same email, except mine said, in addition to enclosing an invoice, in the heading for the email, "payment processed." Via Yahoo. Thanks for letting us know it's SPAM. Will "block and delete" in Yahoo.

Exact same email content. The phone number doesn't work.

I got the same email

Received twice today in Yahoo e-mail. Thank you other commenters for confirming.

I got this too and was just googling it! These scammers need to go play in traffic.

just received a similar email. It said Norton Lifelock was the service.
Thank you!

Received on Yahoo mail- thank you for this alert!

I got the same thing. Ohio, US

I got this email today too, said an invoice was attached, looked like it was from a legit intuit email, but the email/text itself looked suspicious

Dear Customer:

Your invoice-GT-233305 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 888 857 2097 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nortòn--LîfeLock
1 888 857 2097

Just got this email and moved it to spam

Dear Customer:

Your invoice-GT-233303 for 349.99 is attached towards renewal of 3 years Subscription.

Customer Service for the USA & Canada 1 888 857 2097 (8 AM To 4 PM EST)

Thank you for your business - we appreciate it very much.

Sincerely,

Nortòn--LîfeLock

Got one of these today. This looked very legit until I thought about searching for the phone number that they provided. The worst part about this is that I recently joined Intuit so what every info they do have about me it is scary. My scams are always geared towards me and actual companies and services I already participate it. I have noticed this is more of a trend lately (last year). I am not an expert but would take and educated guess as to why it works that way. I would have to say it has to do with all of our devices and the convivences we benefit from. Unfortunately, criminals have also figured out how to use our convivences to personalize our scams! I have just recently started turning off all listening options on all my devices as well as location services. I try not to except any cookies unless absolutely necessary which means mainly sites I use often and know are safe. I always choose do not track with any new sites. This does make life harder but you get use to it.