How to Spot Fake MYOB and QuickBooks Invoice Phishing Emails Targeting Australian Small Businesses

Summary

This guide helps you troubleshoot and resolve: How to Spot Fake MYOB and QuickBooks Invoice Phishing Emails Targeting Australian Small Businesses. Follow the steps below to fix the issue.

Common Causes

Cybercriminals frequently impersonate popular accounting platforms such as MYOB and QuickBooks to trick Australian small business owners into clicking malicious links or entering login credentials on fake websites. These phishing emails often arrive disguised as unpaid invoices, payment reminders, or account security alerts. Because they target financial software, they can appear urgent and convincing. This guide explains how to spot the warning signs and what to do if you receive a suspicious email.

Common Signs of a Fake Invoice Email

Check the Sender Address

Phishing emails often use addresses that look similar to the real company but contain small differences. Look closely at the part of the email address after the @ symbol.

• Legitimate MYOB emails come from domains such as @myob.com
• Legitimate QuickBooks emails come from domains such as @intuit.com or @quickbooks.com
• Be suspicious of addresses using @gmail.com, @outlook.com, or misspelled domains like @my0b.com or @quickbooks-support.net

Look for Urgent or Threatening Language

Fake invoices often pressure you to act immediately. Watch for phrases such as:

• “Your account will be suspended within 24 hours”
• “Immediate payment required to avoid legal action”
• “We could not process your payment. Click here to update your details”
• “Unusual activity detected on your account”

Hover Before You Click

Before clicking any link, hover your mouse pointer over the button or hyperlink. Most email programs will show the actual destination URL at the bottom of the screen or in a small pop-up.

• If the link does not go to myob.com, intuit.com, or quickbooks.intuit.com, do not click it
• Be wary of shortened URLs such as bit.ly or tinyurl.com
• If the URL contains an IP address or a string of random characters, treat it as suspicious

Inspect the Greeting and Formatting

Legitimate accounting software invoices usually address you by your business name or registered contact name. Phishing emails often use generic greetings such as “Dear Customer,” “Dear User,” or “Hello.” Poor spelling, inconsistent formatting, or low-resolution logos are also common red flags.

Check for Unexpected Attachments

Real invoice notifications from MYOB or QuickBooks rarely include unexpected attachments such as .zip, .exe, .scr, or .js files. If you receive an invoice as an attachment that you were not expecting, do not open it.

What to Do If You Suspect a Phishing Email

1. Do not click any links, buttons, or attachments in the email.
2. Do not reply to the sender or call any phone number listed in the message.
3. Open your accounting software directly by typing the website address into your browser, or by using the official mobile app. Log in from there to check for genuine invoices or notifications.
4. Mark the email as junk or phishing in your email program so your provider can filter similar messages in future.
5. Delete the email from your inbox and empty your Deleted Items folder.
6. Report the phishing attempt to the Australian Cyber Security Centre (ACSC) via ReportCyber at cyber.gov.au.

If You Accidentally Clicked a Link or Entered Details

1. If you entered a username and password, change your MYOB or QuickBooks password immediately from a trusted device.
2. Enable multi-factor authentication (MFA) on your accounting software if you have not already done so.
3. Check your recent invoice and payment history for any unauthorised transactions.
4. If you entered payment card details, contact your bank or card provider immediately.
5. Run a full antivirus scan on your computer if you opened an attachment or downloaded a file.
6. Open a Ticket with 220 Internet Services so we can help secure your email and devices.

How to Protect Your Business Going Forward

• Use strong, unique passwords for your accounting software and email accounts.
• Enable multi-factor authentication wherever it is offered.
• Keep your operating system, web browser, and antivirus software up to date.
• Train staff to recognise phishing emails and to verify unexpected invoices by phone using a known contact number, not one supplied in the email.
• Regularly review user access in MYOB and QuickBooks to ensure only current employees have login rights.

Still Having Issues?