Avoid phishing scams and spoofed sites

Phishing is tricking someone for the purpose of stealing their information. The bait the phisher uses to reel you in is forged email, websites, or hyperlinks that look like the real thing. They'll ask for your Social Security number, driver's license, credit card, or bank account numbers.

Here's how to avoid getting caught.

  • Spoofed email address. It's easy to fake a From or ReplyTo address, either manually or with spam software, so never assume an email is real by looking at its header. You might be able to spot fake addresses by checking for domain name misspellings (like gogole.com, instead of google.com), but this isn't foolproof. Your best bet is not reply to suspicious emails and don't open email attachments. Some email service providers combat the problem of spoofed addresses by using authentication techniques to verify a sender's integrity.
  • Fake link. Scam emails can contain a hidden link to a site that asks you to enter your log on and account information. If the email threatens you with account closure if you don't log on soon, you could be the target of phishing. You may be able to tell if a link is real by moving your mouse over and looking at the bottom of your browser to see the hidden web address. It'll look different than the one you see on the surface. When in doubt, never click on a link in a suspicious email.
  • Forged website. Phony websites mimic real sites by copying company logos, images and site designs. Malicious webmasters can also use HTML, Flash, or Javascript to mask or change a web address. If you visit a financial site, like your bank or credit card company, enter its known address into the browser location field manually. Use a browser with an anti-phishing plug-in or extension.

Note: You can help. If you suspect you have received a phishing email from someone impersonating Intuit, please report it immediately. We look into each reported instance.

Recognizing fake emails

What we won't do

  • We'll never send you an email asking you to send us your user ID or password information.
  • We'll never ask you for your banking information or credit card information in an email. We'll never ask you for private information about your employees in an email.

What we will do

  • We'll provide you with instructions on how to stay current with your Intuit product and information on how to securely download an update from your computer.
  • If we need you to update your account information, we'll request that you do so by logging into your account or calling an official Intuit number.

Important: Not sure if it's really Mint behind that email? We can help. For the latest info on known phishing scams and how to report suspicious emails, visit our Online Security Center.