Skip to main content

SUMMER SAVINGS 90% OFF QuickBooks for 3 months* Ends 8/27

Buy now
Switch to QuickBooks and 70% off for 3 Months
Talk to Sales: 877-683-3280
Hours
Mon - Fri, 5am - 6pm PST
Sat - Sun, 7am - 4pm PST
Product support & help
Need help signing in?
Renae T
Renae T
December 30, 2022
Solved

Security Metrics sent an email for PCI compliance. Is this legit?

  • December 30, 2022
  • 97 replies
  • 654 views
I called QBO after starting the signup process and was told it was a scam, but now I'm not sure and want to continue if this is something I should be doing.
    Best answer by ZackE_

    Thanks for reaching out to the Community, Renae T.

     

    SecurityMetrics is an official partner of Intuit. They provide streamlined PCI DSS compliance services for QuickBooks Payments accounts.

     

    After creating an account with SecurityMetrics, you'll be able to complete their FastPass and purchase a PCI package that works best for your business.

     

    I've also included a detailed resource about working with PCI compliance which may come in handy moving forward: Intuit Security Center - PCI Compliance

     

    I'll be here to help if there's any additional questions. Have an awesome Friday!

    97 replies

    Show previous replies
    P
    pedbender
    February 1, 2025

    I have the same question?

    A
    ArielIQuickBooks Team
    QuickBooks Team
    February 1, 2025

    I truly appreciate you voicing your thoughts, @pedbender. My goal is to ensure you receive the precise information and assistance needed for your PCI compliance concerns. Let’s explore this further.

     

    First, are you referring to an email you recently received? If so, please note that Intuit has been sending product messages to remind our customers about PCI compliance. Here are a few things to look for if you’re not sure an email came from Intuit.

     

    • We’ll never ask for your personal info in an email.
    • Our emails will always come from an email address that ends with @intuit.com. This includes @e.intuit.com.
    • Any link we send you in an email will always be for an intuit.com address.

     

    However, if the email is not from one of these addresses, it is likely not from Intuit but rather from Security Metrics.

     

    Though Security Metrics is an official partner of Intuit for PCI compliance, you are not limited to them for your compliance solutions. Engaging with them ensures you’re partnering with a reputable provider, but there are other options available as well.

     

    If your concern revolves around something else, please share the specifics so I can assist you more effectively.

     

    Also, you can check out these articles that you can provide to your client for managing transactions and maximizing the benefits of their QuickBooks Payments account:

     

     

    Should you have any further questions or need additional assistance with PCI compliance, please don’t hesitate to reach out. We are here to help you anytime.

    M
    Mark 2
    May 16, 2025

    They are emailing at a group address where I can not confirm email headers.

    They can email me at my known address as admin and I will not pay for any service.

    We use them online.

    They need to be secure and compliant.

    Our internal policy is extreme.

    I would write up an employee that wrote down or record any CC data.

    We take it from customers over the phone and enter it directly into Intuit.

    We are secure against key loggers.

    In the past when with the bank, PCI compliance wanted my system to be less secure and open a backdoor for them.

     

    I will block them in our groups and then know where to find me.

    Glad to find another vendor.

     

    And I have studied the PCI law.

     

    As someone said, the scam is selling me to outside service.

      M
      MichaelOD
      June 23, 2025

      It's a scam, but a scam sponsored by Intuit.

       

      Intuit has created a narrative that a cloud based account that has never had a single customer credit card number entered (all handled through Intuit's online pay portal) could be hacked, the bank accounts of the Intuit account changed by the hacker, and then the hacker could charge your customers credit cards...

       

      Unless Intuit is storing customer credit card numbers on your devices, without your knowledge or permission, this is a false narrative.

       

      The PCI compliance charge is a scam, and if you don't pay it, you get fined by Intuit.

       

      So yes, it's from Intuit.  No, it's not legit, and believe you me, I'm searching every post on this forum looking for a post to legitimize it.  There isn't one, just evasiveness.  I'm flabbergasted that Intuit has created a whole staff of people that are willing to lie to small business owners, financially hurt their families, and keep small business owners trying to figure out Intuit's latest scam or broken feature, rather than spend time with our families.  It's truly, truly bizarre.

      Need QuickBooks guidance?
      Log in to access expert advice and community support instantly.
      Terms & ConditionsAccessibility statement