Level 4

Question

Proseries Fraud? 2024 Returns changed between what I submitted and what the IRS received

Forum|Forum|5 months ago
February 2, 2026
6 replies
29 views

I can't believe this could have happened but here we are. I have several clients who are still waiting on their 2024 income tax returns. In each of these cases, according to the IRS transcript a Schedule C was either changed or added to the client's tax return resulting in a large loss on the Schedule C and a very large refund. The bank details the IRS has for the refund are all to various accounts at Truist Banks. None of those bank details match what I filed through ProSeries. I tried to call ProSeries support and was told they had several investigations going on and that someone would call me back to get the details on my situation. That was weeks ago and no one has ever called. What I have requested is proof that what I submitted is what was transmitted to the IRS. The IRS says what they received was different. What the ProSeries desktop app shows in the Original Return filed is what I intended to happen. I'm honestly at the point of thinking there was fraud inside of Intuit where someone there changed the information and the Truist Bank accounts are fraudulent. I sincerely hope not but that is where I am at this point.

ProSeries Professional

W

wilson1525

Level 3

Call your IT person and have them go through your computer and look for any remote software that could have been installed. You can look through add or remove programs and see if you see anything weird like screen connect.

Just-Lisa-Now-

Intuit Community Champion

@Kathi_at_Intuit can you jump in here?

@lori3 Im not sure how it could even occur. Everything sent through Intuit is encrypted, they can't see it or change it.

Were all these clients filed at or around the same time? Are you using PS Hosted where its stored in their cloud? Is Truist bank what's used when you use banking products?

♪♫•*¨*•.¸¸♥Lisa♥¸¸.•*¨*•♫♪

L

lori3Author

Level 4

My systems have been inspected completely. Nothing happened on our end. As a safety precaution, we even change passwords, etc. regularly throughout the season. These returns span those changes. They cover a period of 4 months. In fact, when you look in Proseries, the software creates a copy of the "Original Amounts" and "Original Return" which shows it exactly as I had submitted it. The IRS shows something different received. What is consistent in each return is that either an existing Schedule C was changed to show a huge loss or even created in one client's case to create a large loss. Also in every case, the client uses a bank other than Truist and the bank account the IRS has on file for the large refund overpayment is to a Truist account. They have various routing numbers and account numbers, but they are all Truist accounts. We do not use Truist for anything at all in the firm.

That is why I am looking at ProSeries for something happening in house with them. When I spoke with a representative, she never indicated it was impossible. She just said they had "several investigations" ongoing and would have the escalations contact me which has never happened.

S

suzukitax1

Level 2

I was late in filing 2024 NYS return but the return was prepared by your Intuit staff and sent to NYS and I received $17,706.72 proposed adjustments on the insurance on my life and my wife's life. As soon as I prepare my correct reply, if you don't mind, please tell me when the name of Intuit staff preparer. Ichiro

Just-Lisa-Now-

Intuit Community Champion

@suzukitax1 wrote:

I was late in filing 2024 NYS return but the return was prepared by your Intuit staff and sent to NYS and I received $17,706.72 proposed adjustments on the insurance on my life and my wife's life. As soon as I prepare my correct reply, if you don't mind, please tell me when the name of Intuit staff preparer. Ichiro

@suzukitax1

I think you may be in the wrong place, this is for Tax Professionals that use Intuits Professional tax software...sounds like you may have gone through TurboTax and had an "expert" prepare your returns? If that's the case, you're in the wrong place, sorry.

♪♫•*¨*•.¸¸♥Lisa♥¸¸.•*¨*•♫♪

BobKamman

Level 15

Sounds like a run-of-the-mill identity theft case to me. Do you have a real IRS transcript that shows transaction codes, including those for amended returns? If a Schedule C was "changed or added," that would have been with a 1040-X (which could have been filed electronically). But the fact that more than one client is involved, suggests that someone was amending returns that they acquired through your office.

It would be helpful to have some dates here. When were the original returns filed? When were the amended returns filed (according to IRS transcripts)?

L

lori3Author

Level 4

These didn't include amended returns. These are all original returns. I obtained the transcripts directly through TDS with the IRS. The change was all made on the original return. What I filed is different from what the IRS shows they received in the original 1040 returns. I don't use cloud hosting and it is all ProSeries desktop.

sjrcpa

Level 15

@lori3 You didn't answer Bob's question about having IRS transcripts.

Did you efile the tax returns that match your saved copies? Do you have the proof of efiling and acceptance?

How did this matter come to your attention?

The more I know the more I don’t know.

ljr

Level 9

This is scary and my first thought was to check for amended or a superseded return. If the 2nd return hit before 4/15 I think it gets rid of the first one (overrides maybe in IRS system). Is there a way to see your efile acceptance date and the IRS acceptance date? I would do a quick where is my amended return with the new refund amounts. I assume the client found out when they went looking for their refund that didn't show up. No matter what have them all fil out form 14039 identity theft applications and make sure they get an e file pin number.

If it is not your computer or Intuit then I would check a couple of other things and one isn't going to be well liked. How many staff do you have? How long have they all been there with you? Someone could make a copy of the return then take info and well you know. What is your shredding procedure? In house? Shred company? Just trying to think of other potential leak areas.

BobKamman

Level 15

@ljr You don't need amount of refund to check on status of amended return. You do need taxpayer date of birth.

L

lori3Author

Level 4

To check "Where's My Refund" you do need the amount of the refund expected and it has to match.These were original returns, no amendments!

F

Freddy P

Level 2

Hi Lori,

Can I get your contact information. This just happened with one of my clients. Maybe you can connect me with someone at intuit that was able to help you. They added energy credit to this return and somehow changed the Bank to Truist Bank. On my side everything looks fine.

G

gabletax

Level 5

Interesting development that both situations presented here involve the banking information being changed to the same bank, Truist.

I've been wondering, Lori, if you ever got a satisfactory explanation. I know April 14 isn't the day to ask!

Best wishes to everyone! Hope April 15 provides a soft and graceful landing!

Kelvin

G

gabletax

Level 5

It looks like Truist has had a couple of bad apples in the recent past. From an internet search:

Recent Criminal Convictions of Former Employees

Ahshah Dior Martin
(Sentenced December 2025):
- A former Truist employee was sentenced to 24 months in prison for embezzling $195,000 from over 70 customer accounts.
- Victims included churches, nonprofits, and small businesses.
- She gained notoriety for attempting to fake her own death via email to avoid returning a company laptop after being caught.
Mariarlene "Mati Mom" Brown
(Sentenced November 2025):
- A former branch employee in Valdosta, Georgia, was sentenced to nearly three years in prison for her role in a "complex" counterfeit check-cashing scheme.
- She was ordered to pay approximately $400,000 in restitution.

Sign up

Login with SSO

Let's get you signed in

Login with SSO

Scanning file for viruses.

This file cannot be downloaded