The email supposedly came from the Turbo Tax security team (I didn't realize this site would censor the copy-pasted email in the subject) but it was:
T u rb o T a x @ e . t u r b o t a x . i ntuit.com
Also I did not file a return this year. The email reads:
We've noticed that someone attempted to fill out a tax return using your information with a different account.
We are holding the tax return for 48 hours to give you the opportunity to verify it's yours or stop it. If we don't hear from you within 48 hours, this return will be filed in accordance with IRS filing regulations.
Thanks for your help
