Mint HelpMint HelpIntuit

Avoid phishing scams and spoofed sites

SOLVEDBy Mint4Updated May 17, 2022

Phishing is tricking someone to steal their information. The bait the phisher uses to reel you in is forged email addresses, websites, or hyperlinks that look like the real thing. They'll ask for your Social Security number, driver's license, credit card, or bank account numbers.

Here's how to avoid getting caught:

  • Spoofed email addresses. It's easy to fake a From or ReplyTo address, either manually or with spam software, so never assume an email is real by looking at its header. You might be able to spot fake addresses by checking for domain name misspellings (like, instead of, but this isn't foolproof. Your best bet: don't reply to suspicious emails and don't open email attachments. Some email service providers combat the problem of spoofed addresses by using authentication techniques to verify a sender's integrity.
  • Fake links. Scam emails can contain a hidden link to a site that asks you to enter your sign-in and account information. If the email threatens you with account closure if you don't sign in soon, you could be the target of phishing. You may be able to tell if a link is real by moving your mouse over it and looking at the bottom of your browser to see the hidden web address. It'll look different from the one you see on the surface. When in doubt, never click on a link in a suspicious email.
  • Forged websites. Phony websites mimic real sites by copying company logos, images, and site designs. Malicious webmasters can also use HTML, Flash, or Javascript to mask or change a web address. If you visit a financial site like your bank or credit card company, enter its known address into the browser location field manually. Use a browser with an anti-phishing plug-in or extension.

Note: You can help. If you suspect you have received a phishing email from someone impersonating Intuit, please report it immediately. We look into each reported instance.

Recognizing fake emails

What we won't do

  • We'll never send you an email asking you to send us your user ID or password information.
  • We'll never ask you for your banking information or credit card information in an email. We'll never ask you for private information about your employees in an email.

What we will do

  • We'll provide you with instructions on how to stay current with your Intuit product and information on how to securely download an update from your computer.
  • If we need you to update your account information, we'll request that you do so by logging into your account or calling an official Intuit number.

Important: Not sure if it's really Mint behind that email? We can help. For the latest info on known phishing scams and how to report suspicious emails, visit our Online Security Center.

Was this helpful?

You must sign in to vote, reply, or post
Mint Intuit Mint