Quickbooks Fake Invoice Scam
These scammers are using Quickbooks Invoice system as a way of sending fraudulent Microsoft 365 invoices. The invoice comes from a genuine Quickbooks email address...
E-Mails received:
Date: 10/09/2025, 10:40
From: Invoice quickbooks@notification.intuit.com
To: cubismbuildup@gmail.com
Reply to: no-reply@ms-365bills.co.uk
Subject: Here is your Invoice #MOSA-876543 for account
Notes: This email will have been sent to us and many other recipients using our email addresses as bcc (blind carbon copy) addresses. So apparently everyone would received the same numbered invoice for the same amount... an unlikely business practice.
There are no personal details relating to the recipient you are just addressed as Subscriber.
I think the idea is that recipients who think the invoice is a mistake (rather than a scam attempt) will contact the telephone number given to rectify the situation when the scammers will persuade the callers to reveal their bank details or microsoft login details.
Checking the helpline telephone number with Who Called shows reports of the number being associated with Quickbooks invoice scams.
Recommendation:
Just delete the e-mail, don't click on any links.
A further invoice scam email was received on 4th November 2025, this time for a sum of £682.44 and the helpline contact number +44 (33) 3880-1951. Checking the telephone number with Who Called shows reports of the number being associated with Quickbooks invoice scams.
And another scam email...
Date: 17/11/2025, 11:55
From: Invoice quickbooks@notification.intuit.com
To: vuvjvdhd@gmail.com
Reply to: no-reply@salesteam.co.uk
Subject: Here is your latest invoice #EB-3947463 for account
Notes: This email will have been sent to us and many other recipients using our email addresses as bcc (blind carbon copy) addresses. So apparently everyone would received the same numbered invoice for the same amount... an unlikely business practice.
There are no personal details relating to the recipient you are just addressed as Subscriber.
I think the idea is that recipients who think the invoice is a mistake (rather than a scam attempt) will contact the telephone number given to rectify the situation when the scammers will persuade the callers to reveal their bank details or microsoft login details.
Checking the helpline telephone number with Who Called did not show any adverse reports but that might only mean that you are the first person to query a new number being used.
Recommendation:
Just delete the e-mail, don't click on any links.
Michael Fowler
Other articles by Michael Fowler:
Nat West Phishing Scam - Michael Fowler
If you have a bank account with Nat West this might alarm you thinking some unknown person is trying to change your contact phone number (the one you receive one time passwords) But don't jump to cancelling the phone number change... more >>
Contract Form Approval Phishing Scam - Michael Fowler
I was not expecting any Docusign notification for an EFT (Electronics Fund Transfer) contract so I knew it was a scam email to try and obtain my login details... more >>
Voicemail Phishing Scam - Michael Fowler
I don't know why I would get a genuine voicemail notification, it is supposedly from a service called GVoice Encrypted. Follow the usual rules don't click on anything... more >>
