Thanks Bill - it still doesn't answer my specific question. I am already trying to avoid phishing by posting two suspicious reply links that I was hoping Turbotax could say "nope, not ours" or "yes, that's us"
