Businesses using Intuit’s QuickBooks accounting software should be on the alert about a new email phishing scam.
The Better Business Bureau has issued a scam alert about a new con targeting small businesses that use QuickBooks.
The scam involves an email with the subject line “QuickBooks Support: Change Request.” The email claims to be a confirmation from Intuit that a business has changed its name and contains a hyperlink that the recipient can click on to cancel the request.
However, the link directs recipients to a website that downloads malware to their device, according to the Better Business Bureau scam alert. Malware can be used to collect passwords and other personal information.
The Better Business Bureau offered the following tips to help spot phishing attempts:
- Always be wary of expected emails containing links of attachments.
- Check the reply email address. One easy way to spot an email scam is to look at the reply email. The address should be on a company domain, such as jsmith@company.com.
- Check the destination of links: Hover over links to see where they lead. Be sure the link points to the correct domain (www.companyname.com) not a variation, such as companyname.othersite.com or almostcompanyname.com. Scammers can get creative, so look closely.
- Consider how the organization normally contacts you. If an organization normally reaches you by mail, be suspicious if you suddenly start receiving emails or text messages without ever opting in to the new communications.
- Be cautious of generic emails. Scammers try to cast a wide net by including little or no specific information in their fake emails. Be especially wary of messages you have not subscribed to or companies you have never done business with in the past.
- Don't believe what you see. Just because an email looks real, doesn't mean it is. Scammers can fake anything from a company logo to the "sent" email address.
More information on how to protect yourself from phishing scams can be found on the Federal Trade Commission website at consumer.ftc.gov/articles/0003-phishing. To report a scam, go to BBB Scam Tracker at bbb.org/scamtracker.
The IRS also has been warning taxpayers about several current tax scams. See details on the scams and the IRS’s tips to avoid them here.
