Description

I called Quickbooks customer support to cancel a credit card charge (unrelated) around 10:30-11am today 7/14. During the call the rep informed me they would need to replace my credit card and send a new one. I asked if there was another way to handle the issue without getting a new card as I did not want to get a new card. They let me know a vitual card would be sent to me and I would get a new card in the mail. About 10 minutes later I got a call from the suspect saying they were Quickbooks and said he was told by his associate that I wanted to keep my existing card and not get a new card or virtual card and that he would assist with reinstating the card so I could keep using it. He told me he was sending me security codes which I needed to read back to him which he did 3-4 times in a row. I thought this was strange so I asked him why he needed these codes and said this felt like a scam. He said there were several steps to go through in order to reactivate the card and needed a code for each. I asked him to prove to me he was from Quickbooks and he read back to me the lastest credit card transactions on my card, which were correct. He let me know the card was reactivated and good to continue to use. This evening I went on to my Quickbooks account and noticed there was a $5,000 (full limit) transaction taken from my checking account with a debit card linked. I found activity on my account from a Motorola edge 50 fusion in Newark NJ, USA. The scammer somehow knew detailed info discussed in the phone call prior and already had some access to my recent transactions which leads me to believe Quickbooks was potentially hacked.