Fact Check

Intuit: Payroll Processing Phishing Scheme

Is Intuit sending out messages on behalf of the IRS?

Published Feb. 6, 2012

Claim:

Phishing bait:   Notice from Intuit that payroll processing has been completed.


Example:   [Collected via e-mail, July 2012]


Subject: Your payroll processing is initiated by Intuit.

Direct Deposit Service Communication

Status update

Dear John Smith

We received your payroll on July 5, 2012 at 2:18 AM Pacific Time.

o Funds will be transferred from the bank account number ending in: 4216 on July 6, 2012.
o Amount to be withdrawn: $7,615.87
o Paychecks will be transferred to your employees' accounts on: July 10, 2012
o Please download your payroll here.

Funds are typically processed before normal banking hours so please make sure you have enough funds available by 12 a.m. on the date funds are to be withdrawn. Intuit must receive your payroll by 5 p.m. Pacific time, two banking days before your paycheck date or your employees will fail to be paid on time. QuickBooks does not process payrolls on weekends or federal banking holidays. A list of federal banking holidays can be accessed at the Federal Reserve website.

Thank you for your business.

Sincerely,

Intuit Payroll Services



 

Origins:  

A July 2012 mass phish e-mailing spammed Internet users with phony notices supposedly sent by Intuit notifying them that payroll funds had supposedly been transferred from their bank accounts to employees' bank accounts, with the intent of luring recipients into clicking on the enclosed link.

Intuit posted an alert on their web site about the fake e-mail advising recipients to:


  • Do not click on the link in the email.

  • Send a copy of the email to spoof@intuit.com.

  • Do not forward the email to anyone else.

  • Delete the email.

Last updated:   16 July 2012

David Mikkelson founded the site now known as snopes.com back in 1994.