🚨 Phishing Alert: Fake QuickBooks Payment Email Making the Rounds

Archives

Don’t fall for it — this scam email claims to send a payment receipt but is really a phishing attempt. Here's what to look out for.

Joseph Ebneyamin

Oct 3, 2025

🚨 Cybersecurity, Phishing & Scam Alert Newsletter

10/02/2025

New this week.

🚨 SCAM ALERT: Fake Payment Notification

Subject: [SPF ERROR] Payment Received on September 16, 2025
Sender: QuickbooksPaymentPortal <info@inversionescejepu.com>
Pretending to be: QuickBooks (but isn’t)

🔍 Red Flags in This Email:

Suspicious Sender Domain:
Real QuickBooks emails come from @intuit.com, not @inversionescejepu.com — a completely unrelated and shady domain.
Vague Language + Attachment:
“Please find your payment receipt attached…” — this is a common tactic used by scammers to get you to open malware-infected files (like the ACHRemmittance12975 attachment).
Phishing Link:
While the link appears to be payments@qb.com, hovering over (in a real email app) may reveal a different destination. Either way, replying to or clicking anything here is risky.

✅ What You Should Do:

Do NOT open the attachment.
Do NOT reply or click on any links.
Report it as phishing in your email platform.
Delete it immediately.
If you downloaded the file or clicked the link, run a malware scan right away.

🧠 Pro Tip:

Always double-check email domains, and be suspicious of unexpected invoices or receipts — especially with a sense of urgency or errors in the subject line.

Stay sharp out there. 🛡️