This sounds like it could be a phishing e-mail. Please report the e-mail immediately (with the email headers intact, if possible) to https://security.intuit.com/ . We will look into each reported instance.
See this FAQ for more on avoiding phishing e-mails and scams: https://ttlc.intuit.com/replies/4256209
