Cybercriminals Are Following the Money
For many businesses, QuickBooks is no longer just an accounting system. It serves as the hub for cash management, invoicing, bill payments, payroll, and customer collections. As cloud accounting platforms become more deeply connected to financial operations, they have also become increasingly attractive targets for cybercriminals seeking access to both sensitive data and company funds.
Recent reports show an increase in scams impersonating Intuit and QuickBooks, including phishing emails, fake support numbers, and attacks that pressure users to provide login credentials, MFA codes, or remote access. Intuit warns that fraudulent messages may use urgent language, fake websites, texts, phone calls, or emails that appear legitimate. Intuit recommends forwarding suspicious emails to security@intuit.com and avoiding links or attachments in unexpected messages.
The risk is no longer limited to someone “guessing a password.” In many cases, attackers attempt to take over an active session, change account recovery details, access connected banking features, or misuse the company’s own invoicing tools. QuickBooks Checking also supports instant transfers for eligible users, which can move funds quickly through linked debit cards, subject to applicable limits, fees, and holds.
Cybersecurity researchers have also reported campaigns using QuickBooks-related branding and legitimate-looking workflows to increase trust. KnowBe4 reported a 36.5 percent increase in phishing attacks leveraging QuickBooks’ legitimate domain in early 2025, with some attacks shifting from email to phone-based support scams. Bitdefender has also warned that fake QuickBooks support scams may ask for verification codes, login approvals, or remote access before attempting to reset passwords or move money from connected accounts.
What business owners should review now
Start with access. Review every user in your accounting platform and remove anyone who no longer needs access. Limit administrative permissions to a small group and require multifactor authentication for all users.
Next, review banking and payment settings. Confirm which accounts, debit cards, and payment methods are connected. Keep operating cash separate from reserve funds where practical and avoid leaving unnecessary balances in accounts tied directly to invoicing or payment tools.
Finally, verify support channels. Do not call phone numbers from pop-up messages, sponsored search results, or unexpected emails. Go directly to the official Intuit or QuickBooks support site from a trusted browser bookmark.
Practical safeguards
- Require approval for changes to bank accounts, user permissions, payment settings, and recovery information.
- Reconcile bank activity frequently, especially after any suspicious login, support call, or account lockout.
- Train staff to pause before entering MFA codes, approving login prompts, or allowing remote screen access.
Cybersecurity is no longer solely an IT issue. It is also a financial control issue. Effective protection requires clear user access policies, strong internal controls, regular account reviews, and employee awareness. Businesses that treat cybersecurity as part of their overall financial governance framework are often better positioned to reduce risk and respond quickly when incidents occur.
Duffy Kruspodin, LLP works with business owners and finance leaders to strengthen financial processes, internal controls, and operational safeguards that support secure and reliable business operations.
Learn More
Duffy Kruspodin, LLP encourages business owners and finance leaders to review current security guidance published by Intuit and reputable cybersecurity organizations, including:
- Intuit Security Center
- QuickBooks Fraud Prevention Resources
- KnowBe4 Security: QuickBooks Phishing
- Bitdefender Cybersecurity Advisories: QuickBooks Support Scams
Regular reviews of user access, payment controls, and account security settings can help reduce risk and support business continuity.
Concerned about your accounting system controls? Contact Duffy Kruspodin, LLP to review your QuickBooks access, cash controls, and financial workflow safeguards.
