There's been a rash of spoofing. I'm getting it from "Intuit", "Barnes & Noble", "UPS", and several others. Really, the best tell is the actual email addy in the From field. It'll appear like Intuit Customer Support <chippydippydoodoo@whoopsie.com>
_________________________