Turbotax Scam Email - How to Protect Yourself

Common TurboTax Email Scams

• "Action Required" / Account Frozen: These claim there is a "problem" with your tax filing or that your account has been locked. They pressure you to click a link to "confirm your information" or reset your password.
• Fake Tax Refunds: Emails or text messages promising an unexpected refund if you click a link and submit a document.
• Fake Security Alerts: Messages imitating features like "TurboTax ID Notify" that claim your personal data has been exposed, tricking you into typing your password on a clone website.

How to Verify if the Email is Real

1. Check your account directly: If a tax or security alert is real, a corresponding notification will appear inside your account dashboard. Close the email, open a browser, manually type in the official site URL, and log in to check your notifications.
2. Inspect the sender address: Look closely at the email address after the "@" symbol. Legitimate automated communication often comes from domains like TurboTax@em2.turbotax.intuit.com or qbo.alerts.intuit.net. Watch out for subtle typos or completely random domains masquerading under the name "TurboTax".
3. Analyze the links: Before clicking, hover your mouse over the link to see the actual target URL. If it points to an unrecognized site, it is a phishing link designed to capture your login credentials or install malware.
4. Greeting format: Legitimate services usually address you by your real name, whereas phishing emails often use generic greetings like "Dear Taxpayer".

What to Do Next

• Report it: Forward the complete, untouched email to Intuit's official security team at spoof@intuit.com
  or security@intuit.com.
• Delete it: Once reported, permanently delete the email from your trash folder.
• Secure your account: If you accidentally clicked a link or entered your information, immediately change your password by logging into the official Intuit portal and enable two-factor authentication (2FA) to secure your data.