Received a little gem yesterday in our spam folder. I'm confident it's a scam, as we never used QuickBooks Payroll feature at all, only the basic services. No bank info in our QuickBooks for them to pull from in the first place.
It states a payroll amount that was charged against our personal account yesterday and will be redebited against our account today + a $100 insufficient funds charge.
The thing that makes me look twice is the fact that all the domain names in the email and all the links in the message are .intuit, not the usual hinkydinky 73-character Indian sounding domains we generally see on these kinds of deals.
No, I haven't and I won't click any of the links or respond to the email. But it just surprised me a bit how totally legit this specific phish message appears to be.