Diaz et al v. Intuit, Inc.

Filing 164

ORDER granting 140 Motion to Dismiss Second and Third Claims in Third Consolidated Amended Complaint. Signed by Judge Edward J. Davila on 5/15/2018. (ejdlc3S, COURT STAFF) (Filed on 5/15/2018)

1
2
3
4

UNITED STATES DISTRICT COURT

5

NORTHERN DISTRICT OF CALIFORNIA

6

SAN JOSE DIVISION

7
CHRISTINE DIAZ, et al.,

8

Case No. 5:15-cv-01778-EJD

Plaintiffs,
9

ORDER GRANTING DEFENDANT'S
MOTION TO DISMISS SECOND AND
THIRD CLAIMS IN THIRD
CONSOLIDATED AMENDED
COMPLAINT

v.
10
INTUIT, INC.,

11
United States District Court
Northern District of California

Defendant.

Re: Dkt. No. 140

12

I. INTRODUCTION

13
14

In the Third Consolidated Amended Complaint ("Complaint") Plaintiffs Christine Diaz

15

("Diaz") and Richard Brown ("Brown") allege that Defendant Intuit, Inc. ("Intuit"), knowingly

16

allowed fraudsters to open fake accounts and file fraudulent federal and state tax returns through

17

Intuit’s TurboTax tax preparation software. Pursuant to Rule 12(b)(6), Fed.R.Civ.P., Intuit moves

18

to dismiss the second claim for negligence brought by Brown and the third claim for aiding and

19

abetting fraud brought by Brown and Diaz. The Court finds it appropriate to take the motion

20

under submission for decision without oral argument pursuant to Civil Local Rule 7-1(b). For the

21

reasons set forth below, Intuit’s motion is granted.
II. BACKGROUND1

22

Intuit develops and offers various financial and tax preparation software and related

23
24

services, including TurboTax, a tax preparation software program. TurboTax can be utilized

25
26
27
28

1

The Background is a summary of the allegations in the Third Consolidated Amended Complaint.
CASE NO.: 5:15-CV-01778-EJD
ORDER GRANTING DEFENDANT'S MOTION TO DISMISS SECOND AND THIRD
CLAIMS IN THE THIRD CONSOLIDATED AMENDED COMPLAINT
1

1

online or it can be downloaded and installed on a customer's personal computer. Inuit charges

2

persons who file tax returns through TurboTax a "tax preparation fee" generally between

3

approximately $50 and $150, in addition to other fees.

4

Plaintiffs allege that Intuit has known for years that fraudsters exploit Intuit’s lax security

5

in order to open fraudulent accounts with Intuit and file numerous fraudulent tax returns through

6

TurboTax in other peoples’ names. Intuit allegedly allows the fraud to occur through TurboTax in

7

two ways: (a) Stolen Identity Refund Fraud ("SIRF"), where a fraudster gathers data about a

8

taxpayer from outside means (such as the black market or "phishing"), creates a fraudulent, new

9

TurboTax account in the victim’s name, and files a fraudulent tax return in the victim’s name
through TurboTax; and (b) Account Takeover Refund Fraud ("ATO"), where a fraudster hacks

11
United States District Court
Northern District of California

10

into an existing TurboTax account and files a fraudulent return in the victim’s name through

12

TurboTax.

13

Intuit allegedly knew that it was allowing SIRF and ATO fraud to occur through TurboTax

14

and that its allegedly lax security protocols were enabling and assisting the fraud. A document

15

circulated among members of Inuit's Consumer Tax Group noted that as many as 10% of

16

TurboTax's tens of millions of annual users were "malicious." Complaint, ¶28. An internal Intuit

17

strategy presentation showed that the number of "suspicious" customers who successfully filed a

18

return using TurboTax grew to approximately 2.5 million by 2012. Id., ¶29.

19

Intuit allegedly knew that the risk of fraud perpetrated through TurboTax was continuing

20

to increase as the number of major external data breaches increased, exposing the personal

21

identifying information of millions of Americans to would-be fraudsters. Despite knowledge of

22

widely reported data breaches involving identify theft, and knowledge of SIRF and ATO fraud,

23

Intuit allegedly maintained lax security policies. Intuit allegedly chose not to implement basic,

24

fundamental security measures that were suggested by its own experts and by others. Moreover,

25

Intuit eliminated one important protection it previously had in place—a multi-step

26

authentication—in order to make it more convenient to open new accounts and to file returns

27

CASE NO.: 5:15-CV-01778-EJD
ORDER GRANTING DEFENDANT'S MOTION TO DISMISS SECOND AND THIRD
CLAIMS IN THE THIRD CONSOLIDATED AMENDED COMPLAINT

28

2

1

(fraudulent and otherwise) through TurboTax and thereby generate more revenue for Intuit. The

2

allegedly lax policies also included:

3
4
5
6
7
8
9
10

United States District Court
Northern District of California

11
12



allowing the re-use of the same Social Security number across numerous TurboTax
accounts;



failing to apply reasonable limits on the number of returns that could be filed from
the same account and/or the same mailing address;



permitting state returns to be filed without a corresponding federal return (an option
which allegedly is recognized in the industry as facilitating the filing of fraudulent
state returns and is not offered by Intuit’s competitors);



allowing TurboTax "tax preparation fees" to be paid from tax refund proceeds;



permitting multiple tax refund payments to be delivered to the same bank account;



allowing filers to receive tax refunds in non-traceable forms;



providing a service that allows tax refunds to be directed to Intuit’s affiliate Santa
Barbara Tax Products Group (alternatively referred to as Santa Barbara Bank &
Trust) which, after deducting tax preparation fees, sends the balance of the refund
by non-traceable means and in non-traceable forms to fraudsters;



failing to notify or timely notify consumers when fraudulent tax returns and/or tax
returns that Intuit deemed “suspicious” were filed in their names;



failing to timely notify tax authorities of returns Intuit deemed suspicious; and



keeping open TurboTax accounts that were known to be used entirely for fraud and
declining to flag as suspicious returns filed through such accounts.

13
14
15
16
17
18

Intuit allegedly made a deliberate and knowing decision to maintain the protocols described above

19

to generate revenue and market share. Plaintiffs also allege that Intuit's desire to maximize fee

20

revenue caused it to ignore the recommendations of its own security experts, Robert Lee and

21

Shane MacDougall.

22

Plaintiff Brown was never a TurboTax customer; he never used TurboTax or purchased

23

Turbo Tax software. Brown alleges that Intuit allowed fraudulent tax return(s) to be filed in his

24

name through TurboTax. The first time Brown learned that anything was wrong was when his

25

accountant informed him that he could not e-file his 2014 federal tax return because a fraudulent

26
27
28

CASE NO.: 5:15-CV-01778-EJD
ORDER GRANTING DEFENDANT'S MOTION TO DISMISS SECOND AND THIRD
CLAIMS IN THE THIRD CONSOLIDATED AMENDED COMPLAINT
3

1

2014 tax return had already been filed using his Social Security number. Brown also received a

2

bill from Intuit.

3

Plaintiff Diaz purchased the desktop version of TurboTax and used it to e-file her tax year

4

2010 Ohio state and federal tax returns. Since then, Diaz has not used TurboTax. Diaz alleges

5

that Intuit allowed fraudulent tax return(s) to be filed in her name through TurboTax. Diaz learned

6

about the fraudulent tax returns when she received a bill from Intuit for e-filings in her name for

7

Tax Year 2014 for state tax returns in Michigan, Missouri, Ohio and Oklahoma and for a Tax Year

8

2014 federal home and business tax return. Both Plaintiffs allege that they were the victims of

9

SIRF fraud.
III. STANDARDS

11
United States District Court
Northern District of California

10

A motion to dismiss under Rule 12(b)(6) tests the legal sufficiency of claims alleged in the

12

complaint. Fed.R.Civ.P. 12(b)(6); Parks School of Business, Inc. v. Symington, 51 F.3d 1480,

13

1484 (9th Cir. 1995). Dismissal "is proper only where there is no cognizable legal theory or an

14

absence of sufficient facts alleged to support a cognizable legal theory." Navarro v. Block, 250

15

F.3d 729, 732 (9th Cir. 2001). The complaint "must contain sufficient factual matter, accepted as

16

true, to 'state a claim to relief that is plausible on its face.'" Ashcroft v. Iqbal, 556 U.S. 662, 678

17

(2009) (quoting Bell Atl. Corp. v. Twombly, 550 U.S. 544, 570 (2007)).

18
19
20

IV. DISCUSSION
A. Defendant's Request for Judicial Notice
Intuit requests that the Court take judicial notice of eighteen documents. Plaintiffs oppose

21

the request to the extent Intuit is "improperly trying to use it . . . to challenge the merits, as

22

opposed to the sufficiency, of Plaintiffs' allegations." Plaintiffs' Opposition, p.1. Plaintiffs also

23

disagree with the inferences Intuit seeks to draw from several of the documents. Further, Plaintiffs

24

contend that several documents are not the proper subject of judicial notice and/or are not relevant.

25
26
27
28

CASE NO.: 5:15-CV-01778-EJD
ORDER GRANTING DEFENDANT'S MOTION TO DISMISS SECOND AND THIRD
CLAIMS IN THE THIRD CONSOLIDATED AMENDED COMPLAINT
4

1

Pursuant to Federal Rule of Evidence 201, a court may judicially notice a fact that is not
subject to reasonable dispute because it is generally known or can be accurately and readily

3

determined from sources whose accuracy cannot reasonably be questioned. Defendant's request is

4

granted as to (1) a copy of internal Intuit records related to tax returns associated with a taxpayer

5

whose name and Social Security number match Plaintiff Brown because these records are quoted

6

and incorporated by reference in the Complaint. Tellabs, Inc. v. Makor Issues & Rights, Ltd., 551

7

U.S. 308, 322 (2007) (“[C]ourts must consider the complaint in its entirety, as well as other

8

sources courts ordinarily examine when ruling on Rule 12(b)(6) motions to dismiss, in particular,

9

documents incorporated into the complaint by reference, and matters of which a court may take

10

judicial notice.”); see also Branch v. Tunnell, 14 F.3d 449, 454 (9th Cir. 1994) (“[D]ocuments

11
United States District Court
Northern District of California

2

whose contents are alleged in a complaint and whose authenticity no party questions, but which

12

are not physically attached to the pleading, may be considered in ruling on a Rule 12(b)(6) motion

13

to dismiss”), overruled on other grounds by Galbraith v. Cty. Of Santa Clara, 307 F.3d 1119 (9th

14

Cir. 2002).

15

Intuit's request is also granted as to the following IRS documents: (2) a copy of IRS

16

Publication 1345 ("Handbook for Authorized IRS e-file Providers of Individual Income Tax

17

Returns"); (3) a copy of IRS Publication 3112 ("IRS e-file Application and Participation"); and (4)

18

a copy of IRS Publication 3415 ("Electronic Tax Administration Advisory Committee’s Annual

19

Report to Congress"). A court may take judicial notice of records and reports of administrative

20

bodies. See United States v. 14.02 Acres, 547 F.3d 943, 955 (9th Cir. 2008) (judicial notice is

21

appropriate for records and reports of administrative bodies); Pasillas v. Deutsche Bank Nat’l

22

Trust Co., No. 12-04123 LHK, 2014 WL 1006300, at *3 n.6 (N.D. Cal. Mar. 12, 2014) (taking

23

judicial notice of IRS publication). Intuit's request is also granted as to (5) a copy of IRS

24

Commissioner John Koskinen’s October 20, 2015 Remarks at a Security Summit Press Briefing,

25

and a copy of Commissioner Koskinen’s June 11, 2015 Press Remarks regarding the Security

26

Summit; (6) a copy of an IRS press release dated April 3, 2014, entitled "As efile Grows, IRS

27

CASE NO.: 5:15-CV-01778-EJD
ORDER GRANTING DEFENDANT'S MOTION TO DISMISS SECOND AND THIRD
CLAIMS IN THE THIRD CONSOLIDATED AMENDED COMPLAINT

28

5

1

Receives Fewer Returns on Paper" and a copy of an IRS press release dated January 14, 2016,

2

entitled "IRS Ready to Start 2016 Tax Season: Encourages use of IRS.gov and e-File; Works with

3

States, Industry on Identity Theft Refund Fraud"; (7) a copy of a webpage about the Electronic

4

Tax Administration Advisory Committee (ETAAC), (8) a copy of an IRS webpage entitled "Get

5

An Identity Protection PIN (IP PIN)"; (9) a copy of an IRS fact sheet dated January 2015, entitled

6

"IRS Combats Identity Theft and Refund Fraud on Many Fronts"; (10) a copy of an IRS Tax Tip

7

dated July 2017 entitled "Choosing the Correct Filing Status"; and (11) a copy of the IRS’s

8

Section 7216 FAQ webpage, entitled "Section 7216 Frequently Asked Questions." Publically

9

accessible websites and news articles are proper subjects of judicial notice. Minor v. FedEx
Office & Print Servs., Inc., 182 F. Supp.3d 966, 974 (N.D. Cal. 2016) (websites); Spitzer v. Aljoe,

11
United States District Court
Northern District of California

10

No. 13-05442 MEJ, 2016 WL 3275148, at *4 (N.D. Cal. June 15 2016) (newspaper articles). The

12

Court takes judicial notice that these publications were in the public realm at the time they were

13

issued, but not for the truth of their contents. Brodsky v. Yahoo! Inc., 630 F.Supp.2d 1104, 1111

14

(N.D. Cal. 2009).

15

Intuit's request is denied as to (12) a copy of the Class Action Complaint (obtained from

16

ECF) filed in Welborn v. Internal Revenue Service, et al., Case No. 1:15-cv-01352-RMC (D.D.C.,

17

filed Aug. 20, 2015); (13) a copy of the complaint filed in Krippendorf v. United States of

18

America, Office of Personnel Management, et al., Case No. 1:15-cv-01321-ABJ (D.D.C., filed

19

Aug. 14, 2015) and a copy of the Initial Practice and Procedural Order in In re U.S. Office of

20

Personnel Management Data Security Breach Litigation, 1:15-mc-1394 (ABJ); MDL Docket No.

21

2664 (D.D.C., filed Nov. 10, 2015). Although court documents and pleadings in other litigations

22

are judicially noticeable (see, e.g., Reyn’s Pasta Bella, LLC v. Visa USA, Inc., 442 F.3d 741, 746

23

n.6 (9th Cir. 2006)), these documents are not relevant to the issues raised in the motion before the

24

Court. Intuit's request is similarly denied as to the remaining documents because they are not

25

relevant: (14) a copy of a TurboTax FAQ entitled "How do I import or enter my W-2?"; (15) a

26

copy of a webpage about H&R Block’s options for customers to pay for tax preparation fees via

27

CASE NO.: 5:15-CV-01778-EJD
ORDER GRANTING DEFENDANT'S MOTION TO DISMISS SECOND AND THIRD
CLAIMS IN THE THIRD CONSOLIDATED AMENDED COMPLAINT

28

6

1

refund transfer and to receive their tax refunds on a prepaid card; (16) a copy of a webpage about

2

Jackson Hewitt's options for customers to receive their tax refund on a prepaid card; (17) a copy of

3

a webpage about Liberty Tax's options for customers to pay for tax preparation fees via refund

4

transfer and to receive their tax refunds on a prepaid card; and (18) a copy of a Washington Post

5

article dated March 1, 2016, entitled "Can you tell the real TurboTax email from the scam?"

6

B. Brown's Negligence Claim

7

In order to plead a claim for negligence under California law, a plaintiff must establish the

8

following elements: (1) the defendant owed a legal duty to use due care, (2) a breach of that duty,

9

and (3) the breach was the proximate or legal cause of the resulting injury. Ladd v. Cnty. of San
Mateo, 12 Cal. 4th 913, 917 (1996). "Whether a legal duty arises is a 'question of law which is

11
United States District Court
Northern District of California

10

simply an expression of the sum total of the policy considerations that lead a court to conclude that

12

a particular plaintiff is entitled to protection.'" Ileto v. Glock Inc., 349 F.3d 1191, 1203 (9th Cir.

13

2003) (quoting Jacoves v. United Merchandising Corp., 9 Cal.App.4th 88, 114 (1992)). The

14

general rule in California is that all persons have a duty "to use ordinary care to prevent others

15

being injured as a result of their conduct." Rowland v. Christian, 69 Cal.2d 108, 112 (1968). In

16

determining whether to impose a legal duty, courts consider the factors set forth in Rowland v.

17

Christian, 69 Cal.2d 108 (1968), including:

18
19
20
21
22

[F]oreseeability of harm to the plaintiff, the degree of certainty that
the plaintiff suffered injury, the closeness of the connection between
the defendant’s conduct and the injury suffered, the moral blame
attached to the defendant’s conduct, the policy of preventing future
harm, the extent of the burden to the defendant and consequences to
the community of imposing a duty to exercise care with resulting
liability for breach, and the availability, cost, and prevalence of
insurance for the risk involved.

23

Id. at 113. The most important factor in establishing a duty is foreseeability. Dillon v. Legg, 68

24

Cal.2d 728, 740 (1968); Tarasoff v. Regents of Univ. of Calif., 17 Cal.3d 425, 434-35 (1976).

25

When analyzing whether there is a duty of care, a court does not decide "if a particular

26

plaintiff's injury was reasonably foreseeable in light of a particular defendant's conduct" but

27

CASE NO.: 5:15-CV-01778-EJD
ORDER GRANTING DEFENDANT'S MOTION TO DISMISS SECOND AND THIRD
CLAIMS IN THE THIRD CONSOLIDATED AMENDED COMPLAINT

28

7

1

instead evaluates more generally whether "the category of negligent conduct at issue is sufficiently

2

likely to result in the kind of harm experienced." Ballard v. Uribe, 41 Cal.3d 564, 572-3 n.6

3

(1986) (emphasis in original).

4

The Court previously held that the allegations in the Second Consolidated Amended

5

Complaint were insufficient to support a negligence claim because Brown's alleged injury was not

6

reasonably foreseeable. Brown was not a TurboTax customer and never provided personal

7

identifying information to Intuit and there were no allegations of "suspicious circumstances"2 or

8

"danger signals"3 that would have or should have placed Intuit on notice of potential harm to

9

Brown.
The allegations in the current Complaint suffer from the same defects. Contrary to

10

United States District Court
Northern District of California

11

Plaintiffs' assertion, it is not enough to generally plead that identity theft is foreseeable, that tax

12

fraud committed through identity theft is foreseeable, or that tax fraud committed through

13

TurboTax is foreseeable. See E-Shops Corp. v. U.S. Bank Nat'l Ass'n, 678 F.3d 659 (8th Cir.

14

2012) (general allegations that an unspecified data breach occurred within U.S. Bank's computer

15

system which enabled unidentified third parties to access cardholder information to make

16

fraudulent transaction held insufficient to establish Bank's knowledge that the particular

17

transactions at issue were fraudulent). Instead, the relevant inquiry is "whether the category of

18

negligent conduct at issue is sufficiently likely to result in the kind of harm experienced that

19

liability may appropriately be imposed on the negligent party." Ileto v. Glock, 349 F.3d at 1204

20

(quoting Ballard, supra). Here, the alleged category of negligent conduct consists essentially of

21

Intuit's failure to use reasonable means to detect and prevent the misuse of TurboTax for the

22

preparation and filing of tax returns. In evaluating whether liability should be imposed for this

23

alleged category of negligent conduct and the resulting harm to Brown, it bears emphasizing that

24

there is no general duty to protect against the conduct of another in the absence of a special

25
26
27
28

2
3

See Sun 'n Sand, Inc. v. United California Bank, 21 Cal.3d 671, 695-96 (1978).
See Software Design & Application, Ltd. v. Hoefer & Arnett, Inc., 49 Cal.App.4th 472 (1996).
CASE NO.: 5:15-CV-01778-EJD
ORDER GRANTING DEFENDANT'S MOTION TO DISMISS SECOND AND THIRD
CLAIMS IN THE THIRD CONSOLIDATED AMENDED COMPLAINT
8

1

relationship. Tarasoff, 17 Cal.3d at 435. As such, courts have consistently refused to impose a

2

duty of care in the context of financial transactions involving fraud and identity theft. See e.g.

3

QDOS, Inc. v. Signature Financial, LLC, 17 Cal.App.5th 990, 998 (2017) (no duty for high-end

4

sports car seller to investigate when presented with a validly endorsed check made out to seller

5

drawn from account of a third party); Burns v. Neiman Marcus Grp., Inc., 173 Cal.App.4th 479,

6

488-90 (2009) (retailer had no duty to inquire before accepting plaintiff's checks to pay off a retail

7

employee’s store credit card); Casey v. U.S. Bank Nat’l Ass’n, 127 Cal.App.4th 1138, 1149

8

(2005) (bank owes no duty to nondepositors to investigate or disclose suspicious activities); Karen

9

Kane, Inc. v. Bank of America, 67 Cal.App.4th 1192, 1198-99 (1998) (bank owed no duty of
inquiry to non-customer merchant). In the banking context, the California Supreme Court carved

11
United States District Court
Northern District of California

10

out a narrow exception in imposing on a bank a limited duty to noncustomers when there is

12

"objective indicia" of fraud. Sun 'n Sand, Inc. v. United California Bank, 21 Cal.3d at 695.4 To

13

"activate" a duty of care, there must be circumstances that are "sufficiently suspicious" to alert the

14

defendant of fraud. Id.

15

In this case, a fraudster used Brown's real phone number, address and Social Security

16

number to create a fake TurboTax account. Complaint, ¶111. Brown does not allege that the

17

fraudsters' use of his personal identifying information to open an account was in any way

18

"suspicious" or raised "danger signals." Instead, Brown alleges that Intuit recognized that the

19

account came from a "High Risk Domain"—Hushmail.com:

20

Intuit specifically and contemporaneously recognized the account
opened by the fraudster in Mr. Brown's name as coming from a
"High Risk Domain," and generated an instruction to "Please ask

21
22
23
24
25

4

Plaintiffs cite to several negligence cases involving personal injury. See Collins v. Navistar,
Inc., 214 Cal.App.4th 1486, 1508 (2013); O'Hara v. W. Seven Trees Corp., 75 Cal.App.3d 798,
803 (1977); Pamela L. v. Farmer, 112 Cal.App.3d 206, 209 (1980); T.H. v. Norvartis Pharm.
Corp., 407 P.3d 18, 37 (2017). The cases are clearly factually distinguishable from the instant
action and will not be addressed herein.

26
27
28

CASE NO.: 5:15-CV-01778-EJD
ORDER GRANTING DEFENDANT'S MOTION TO DISMISS SECOND AND THIRD
CLAIMS IN THE THIRD CONSOLIDATED AMENDED COMPLAINT
9

taxpayer to fax ID, W-2 and SS card to 858-430-3104." On
information and belief, these additional materials/information were
not ultimately received by Intuit. Still, despite the information that
it had, Intuit made no effort to contact or notify Mr. Brown about the
account or the e-filing or confirm the legitimacy thereof, or to stop
the fraudster from creating and using the fraudulent TurboTax
account, and Intuit processed the fraudulent return through
TurboTax. A simple contact to Mr. Brown using the contact
information it was provided, for example, could have alerted Mr.
Brown immediately to the fraudster's activities, and stopped the
fraud from occurring.

1
2
3
4
5
6

Id. This single indicator of alleged fraud—use of a "High Risk Domain"—does not create
7
circumstances sufficiently suspicious to alert Intuit of fraud. Brown does not allege that email
8
accounts issued by Hushmail.com are used for wholly fraudulent purposes. Nor does he allege
9
that legitimate TurboTax customers would never use a Hushmail.com email address. In the
10
absence of these types of allegations, the use of Hushmail.com is insufficient to establish Intuit's
11
United States District Court
Northern District of California

actual knowledge of fraud. This single indicator of alleged fraud stands in sharp contrast to the
12
objective indicia of fraud that "activated" a duty of care in Sun 'n Sand, i.e. checks that were
13
altered significantly to raise the amount payable, drawn payable to the order of the defendant
14
bank, and presented to the bank by a third party seeking to negotiate the checks for his own
15
benefit. To impose a duty of care on the basis of an email coming from an allegedly "High Risk
16
Domain," in the absence of other objective indicia of fraud, would "stretch the concept of
17
foreseeability of harm in determining duty beyond recognition." Burns, 173 Cal.App.4th at 489.
18
Because the alleged harm to Brown was not foreseeable, the negligence claim fails as a matter of
19
law.
20
C. Aiding and Abetting Fraud Claim
21
Liability may be imposed "on one who aids and abets the commission of an intentional tort
22

if the person (a) knows the other’s conduct constitutes a breach of duty and gives substantial

23
assistance or encouragement to the other to so act or (b) gives substantial assistance to the other in
24
accomplishing a tortious result and the person's own conduct, separately considered, constitutes a
25
26
27
28

CASE NO.: 5:15-CV-01778-EJD
ORDER GRANTING DEFENDANT'S MOTION TO DISMISS SECOND AND THIRD
CLAIMS IN THE THIRD CONSOLIDATED AMENDED COMPLAINT
10

1

breach of duty to the third person." Saunders v. Super. Ct., 27 Cal. App.4th 832, 846 (1994).5 To

2

satisfy the knowledge element, an aider and abettor must have "actual knowledge of the specific

3

primary wrong the defendant substantially assisted." In re First Alliance Mortg. Co., 471 F.3d

4

977, 993 (9th Cir. 2006) (quoting Casey v. U.S. Bank National Assn., 127 Cal.App.4th at 1145);

5

see also Neilson v. Union Bank of Cal., N.A., 290 F.Supp.2d 1101, 1119 (C.D. Cal. 2003)

6

(plaintiff must plead actual knowledge of the primary violation); Howard v. Superior Court, 2

7

Cal.App.4th 745, 749 (1992) ("while aiding and abetting may not require a defendant to agree to

8

join the wrongful conduct, it necessarily requires a defendant to reach a conscious decision to

9

participate in tortious activity for the purpose of assisting another in performing a wrongful act");
Gerard v. Ross, 204 Cal.App.3d 968, 983 (1988) ("A defendant can be held liable as a co-

11
United States District Court
Northern District of California

10

tortfeasor on the basis of acting in concert only if he or she knew that a tort had been, or was to be,

12

committed, and acted with the intent of facilitating the commission of that tort."); Resolution Trust

13

Corp. v. Rowe, No. 90-20114 BAC, 1993 WL 183512, at *6 (N.D. Cal. Feb. 8, 1993) (actual

14

knowledge and intent are required to impose aiding and abetting liability).
Despite the new allegations added to the Complaint, Plaintiffs’ allegations remain

15
16

insufficient to establish a claim for aiding and abetting. Plaintiffs allege that Intuit generally knew

17

tax fraud was occurring on a massive scale every year through Turbo Tax and that Intuit

18

deliberately implemented policies that it knew directly enabled and encouraged the fraud.

19

Lacking, however, are allegations of "actual knowledge of the specific primary wrong" against

20

Plaintiffs. In re First Alliance Mortg. Co., 471 F.3d at 993 (bank that had conducted investigation

21

and received reports that detailed fraudulent practices of mortgage company held liable for aiding

22
23
24
25
26
27
28

5

Pursuant to Rule 9(b), Fed.R.Civ.P., fraud, including aiding and abetting fraud, must be pled
with particularity. In re Countrywide Financial Corp. Mortgage-Backed Securities Litigation,
Nos. 11-2265 MRP, 12-04775 MRP, 2013 WL 8116709, at *2 (C.D. Cal. Jan. 10, 2013). Rule
9(b), Fed.R.Civ.P., permits knowledge to be pled generally. Neilson, 290 F.Supp.2d at 1119.
"Although this obviates the necessity of pleading detailed facts supporting allegations of
knowledge, it does not relieve a pleader of the burden of alleging the nature of the knowledge a
defendant purportedly possessed." Id.
CASE NO.: 5:15-CV-01778-EJD
ORDER GRANTING DEFENDANT'S MOTION TO DISMISS SECOND AND THIRD
CLAIMS IN THE THIRD CONSOLIDATED AMENDED COMPLAINT
11

1

and abetting mortgage company). Plaintiff Brown alleges that "Intuit had contemporaneous

2

information identifying" the false returns filed in his name as "malicious." Complaint, ¶110.

3

Brown also alleges that "Intuit specifically and contemporaneously recognized the account opened

4

by the fraudster in [his] name as coming from a 'High Risk Domain,' and its systems thus

5

generated an instruction to 'Please ask taxpayer to fax ID, W-2 and SS Card to 858-430-3105.'"

6

Complaint, ¶ 111. Although Plaintiffs' allegations may support an inference that Intuit was

7

suspicious of potential fraud or knew that there was a risk of fraud, the allegations are insufficient

8

to show that Intuit had "actual knowledge" of fraud associated with the account opened with

9

Brown's personal identifying information. See E-Shops Corp. v. U.S. Bank Nat'l Ass'n, 678 F.3d
at 664 ("The single suggestion that a change of address after a number of large orders signals

11
United States District Court
Northern District of California

10

identity theft is attenuated when, in the ordinary course of banking business, cardholders change

12

their address for various unspecified reasons." ). "[T]he actual knowledge standard [ ] require[s]

13

more than a vague suspicion of wrongdoing." In re First Alliance Mortg. Co., 471 F.3d at 993 n.4.

14

Plaintiffs also fail to allege that Intuit had actual knowledge that tax returns submitted in

15

Plaintiff Diaz's name were fraudulent. Diaz alleges that "Intuit had contemporaneous information

16

identifying" the tax filings in her name as "malicious." Complaint, ¶ 123. This allegation lacks

17

any factual basis and is too vague and conclusory to support an inference that Intuit had actual

18

knowledge of fraud. Plaintiffs next allege the following:

19
20
21
22
23
24
25
26
27
28

While discovery is ongoing, certain materials produced by Intuit
indicate as follows: In or around 2015, at least five fake TurboTax
accounts with different usernames were opened and registered to a
single email address, [e-mail]. Though it was able
to link the personal information submitted for these fake accounts to
personal information it already had regarding Ms. Diaz and her
husband, Intuit made no effort to contact Ms. Diaz or her husband to
alert them regarding the opening of these five new accounts or to
confirm the legitimacy of same. At or around 3:16 a.m. on January
21, 2015, ten electronic tax filings were attempted using Ms. Diaz’s
and her husband’s Social Security numbers through one of the five
new, fake accounts. The attempted filings included state tax return
filings in Ohio, Michigan, Oklahoma, Missouri, and a federal tax
return filing with the IRS. Even though Intuit knew these attempted
filings were done in Ms. Diaz’s name and Social Security number
CASE NO.: 5:15-CV-01778-EJD
ORDER GRANTING DEFENDANT'S MOTION TO DISMISS SECOND AND THIRD
CLAIMS IN THE THIRD CONSOLIDATED AMENDED COMPLAINT
12

1
2
3
4
5
6
7
8
9
10

United States District Court
Northern District of California

11
12
13
14
15
16
17

and were done using not only a different account and email address
than the TurboTax account/email address Ms. Diaz had used
previously, but also done using one of five separate accounts that the
fraudster had recently opened using the same personal information,
Intuit made no effort to contact Ms. Diaz to alert her regarding this
activity or to confirm the legitimacy thereof, or to stop the fraudster
from creating and using the fraudulent TurboTax accounts. A simple
contact to Ms. Diaz, for example, could have alerted her
immediately to the fraudster’s activities, and stopped the fraud from
occurring. Intuit did not immediately forward these ten tax return
filings to the appropriate state or federal agencies. Instead, Intuit
identified several problems with these attempted e-filings but again
made no effort to notify Ms. Diaz about this unusual and suspicious
activity. In fact, despite the problematic nature of these attempted
filings, Intuit took measures to assist the fraudster, and sent a “Hold
Message” to [e-mail], stating:
We have identified an issue within the TurboTax product
associated with the Import Feature of one or more of your W2’s. This issue may have resulted in a duplication of the
amounts in boxes 12, 14, and 15-20. To correct the issue, please
return to TurboTax and select the Review tab. Follow the
prompts that come up to re-file your return.
At or around 8:34 p.m. on January 22, 2015 another ten filings were
attempted by the fraudster in Ms. Diaz’s name and Social Security
number, again using one of the five new false accounts, including
state tax return filings in Ohio, Michigan, Oklahoma, Missouri, and
a federal tax return filing with the IRS. Presumably, the fraudster
followed the “prompts” provided by Intuit when resubmitting these
fraudulent returns. Despite the information that it had, Intuit made
no effort to notify Ms. Diaz about the e-filings, or to stop the
fraudster from creating and using the fraudulent TurboTax accounts,
and Intuit processed the fraudulent returns through TurboTax.

18

Complaint, ¶ 124. Plaintiffs allege that based upon the information Intuit had, Intuit "knew that

19

the accounts opened in Diaz's name and returns filed through those accounts were fraudulent or at

20

the least were highly likely to be fraudulent." Id., ¶125. Conspicuously absent, however, are any

21

allegations specifying when Intuit learned of the use of a different account and email address, the

22

use of multiple new usernames, and the numerous attempts at filing tax return. Plaintiffs allege

23

only vaguely that Intuit "was able to link the personal information submitted for these fake

24

accounts to personal information it already had regarding Ms. Diaz and her husband" without

25
26
27
28

CASE NO.: 5:15-CV-01778-EJD
ORDER GRANTING DEFENDANT'S MOTION TO DISMISS SECOND AND THIRD
CLAIMS IN THE THIRD CONSOLIDATED AMENDED COMPLAINT
13

1

alleging when Intuit "was able" to make this link. 6 Plaintiffs do not allege that Intuit made this

2

link at the time Intuit transmitted the tax returns in Diaz's name. Moreover, even if Intuit knew of

3

the account activity described above at or near the time Intuit transmitted tax returns in Diaz's

4

name, it does not necessarily follow that Intuit knew of actual fraud. Plaintiffs do not allege that

5

Intuit could distinguish with certainty legitimate tax returns from fraudulent tax returns at the time

6

of filing based upon the account activity associated with Diaz's name. At most, the account

7

activity may have or should have given Intuit reason to suspect fraud, which is insufficient to

8

support an aiding and abetting claim. See Casey v. U.S. Bank National Assn., 127 Cal.App.4th at

9

1147-1149 (allegations that defendant knew "something fishy was going on" insufficient to

10

establish actual knowledge because "suspicion and surmise do not constitute actual knowledge").
The aiding and abetting also fails because Plaintiffs does not allege sufficient facts to

United States District Court
Northern District of California

11
12

establish that Intuit gave substantial assistance to the alleged fraud perpetrated against Brown and

13

Diaz. Substantial assistance requires a “significant and active, as well as a knowing participation

14

in the wrong.” Alfus v. Pyramid Tech. Corp., 745 F.Supp. 1511, 1520 (N.D. Cal. 1990) (citation

15

omitted); see also Howard v. Superior Court, 2 Cal.App.4th 745, 749 (1992) (“while aiding and

16

abetting may not require a defendant to agree to join the wrongful conduct, it necessarily requires

17

a defendant to reach a conscious decision to participate in tortious activity for the purpose of

18

assisting another in performing a wrongful act”).

19

Here, Plaintiffs allege that Intuit knew Brown's personal identifying information was being

20

used to create a TurboTax account associated with a "High Risk Domain Name," and yet made no

21

effort to contact or notify Brown. Complaint, ¶111. Diaz similarly alleges that Intuit identified

22
23
24
25
26
27
28

6

Plaintiffs acknowledge in their Complaint that their allegations are predicated upon materials
produced by Intuit during discovery. Complaint, ¶124. Intuit explains that in response to
Plaintiffs' discovery, Intuit used information provided by Diaz and her husband "to retroactively
analyze tax returns previously submitted to the IRS and state revenue agencies and identify
fraudulent tax returns filed in their names." Intuit's Motion, p.11. Plaintiffs do not allege that
Intuit could have or did conduct such an analysis at the time of the fraudulent activity.
CASE NO.: 5:15-CV-01778-EJD
ORDER GRANTING DEFENDANT'S MOTION TO DISMISS SECOND AND THIRD
CLAIMS IN THE THIRD CONSOLIDATED AMENDED COMPLAINT
14

1

several problems with efilings in her name, but Intuit made no effort to notify Ms. Diaz about the

2

unusual and suspicious activity. Id., ¶124. These and other failure to act allegations regarding,

3

inter alia, maintaining deficient protocols, policies and practices enabling fraud, failing to provide

4

notice, and failing to provide data to the IRS or state tax agencies (Complaint, ¶¶38-64, 228, 229,

5

233, 237-38, 240) are insufficient to establish substantial assistance for purposes of aiding and

6

abetting liability. See Fiol v. Doellstedt, 50 Cal.App.4th 1318, 1326 (1996) (“Mere knowledge

7

that a tort is being committed and the failure to prevent it does not constitute aiding and

8

abetting.”).

9

Plaintiffs attempt to allege several ways in which Intuit purportedly provided affirmative
assistance to fraudsters, all of which are deficient. Among other things, Intuit allegedly modified

11
United States District Court
Northern District of California

10

its fraud prevention technology with the goal of blocking fewer suspicious users, eliminated multi-

12

step authentication, allowed the re-use of the same Social Security number across numerous

13

accounts, and permitted filers to file state tax returns without filing a corresponding federal return.

14

Complaint, ¶¶43, 46, 47, 51. Lacking, however, are any allegations connecting the alleged acts of

15

affirmative assistance to the fraudulent returns filed in Plaintiffs' names. See In re Mortgage Fund

16

'08 LLC, 527 B.R. 351, 365 (N.D. Cal. 2015) ("To plead substantial assistance, a plaintiff must

17

allege that the defendant's conduct was a substantial factor in bringing about the injury allegedly

18

suffered by the plaintiff."); see also United States v. United Healthcare Ins. Co., 848 F.3d 1161,

19

1181-82 (9th Cir. 2016) (allegations describing some details of a generalized fraud scheme

20

insufficient under Rule 9(b) because allegations "provide[d] no details linking" defendants to

21

scheme).

22

With respect to Diaz, Plaintiffs allege that Intuit affirmatively assisted the fraud by

23

notifying the putative taxpayer of a potential error. Complaint, ¶124. This error message is too

24

insignificant and passive to constitute substantial assistance. Alfus v. Pyramid Tech. Corp., 745

25

F.Supp. at 1520. The error message fails to establish that Intuit "reach[ed] a conscious decision to

26

participate in tortious activity for the purpose of assisting another in performing a wrongful act."

27

CASE NO.: 5:15-CV-01778-EJD
ORDER GRANTING DEFENDANT'S MOTION TO DISMISS SECOND AND THIRD
CLAIMS IN THE THIRD CONSOLIDATED AMENDED COMPLAINT

28

15

1
2

Howard v. Superior Court, 2 Cal.App.4th 745, 749 (1992).
Two affirmative acts relate to processing payments and refunds: Intuit allows TurboTax

3

fees to be paid from refund proceeds and allows refunds to be paid by non-traceable means.

4

Complaint, ¶¶228, 231-32. Although in theory these two services offered by Intuit may facilitate

5

fraud, the Complaint does not include any allegation that Intuit knew these services were used by

6

fraudsters to commit fraud against Brown and Diaz. See In re Mortgage Fund '08 LLC, 527 B.R.

7

at 365 (N.D. Cal. 2015. Indeed, with respect to payment of TurboTax fees, Plaintiffs' allegations

8

are to the contrary: Brown and Diaz allege that they each received bills from Intuit. Complaint,

9

¶¶114, 127. Lastly, Plaintiffs allege that Intuit provided affirmative assistance by transmitting
"suspicious" tax returns. Transmission of the allegedly "suspicious" tax returns, without more, is

11
United States District Court
Northern District of California

10

insufficient to establish substantial assistance because Intuit is required by law to transmit returns

12

within three days. IRS Pub. 1345, p. 34.

13

The cases relied upon by Plaintiffs are readily distinguishable from the instant action. In,

14

Facebook, Inc. v. MaxBounty, Inc., No. 10-04712 JF, 2011 WL 4346514, at *4 (N.D. Cal. Sept.

15

14, 2011), Facebook alleged, among other things, that the aider and abettor interacted with a

16

specifically identified primary tortfeasor, providing encouragement, direction, and even technical

17

support to implement the alleged fraud. Here, Plaintiffs have not alleged that Intuit provided

18

encouragement, direction or technical support directly to a specific fraudster. In Benson v. JP

19

Morgan Chase Bank, N.A., Nos. 09-5272 EMC, 09-5560 EMC, 2010 WL 1526394, at *4 (N.D.

20

Cal. Apr. 15, 2010), the plaintiffs alleged facts showing that a bank aided and abetted the primary

21

tortfeasor, who was identified by name, in a Ponzi scheme by allowing the tortfeasor and his

22

associates to deposit monies into accounts, permitting them to commingle funds, allowing them to

23

transfer large amounts of investment deposits to offshore banking accounts, allowing the tortfeasor

24

to use investor monies to pay for personal expenses, and authorizing remote banking platforms

25

that prevented oversight. In contrast, Plaintiffs in this case fail to allege the identity of any

26

primary tortfeasor, much less that the Intuit knew that a specific tortfeasor was committing fraud

27

CASE NO.: 5:15-CV-01778-EJD
ORDER GRANTING DEFENDANT'S MOTION TO DISMISS SECOND AND THIRD
CLAIMS IN THE THIRD CONSOLIDATED AMENDED COMPLAINT

28

16

1

using Plaintiffs' personal identifying information or that Intuit made a conscious decision to

2

participate in the fraud.
V. CONCLUSION

3
4

For the reasons set forth above, Intuit’s motion to dismiss Plaintiffs’ second and third

5

claims is GRANTED. The Court sets a case management conference for June 7, 2018 at 10:00

6

a.m. The Parties shall file a joint case management statement in accordance with Local Rule 16-8

7

no later than May 25, 2018.

8
9
10

United States District Court
Northern District of California

11

IT IS SO ORDERED.
Dated: May 15, 2018
______________________________________
EDWARD J. DAVILA
United States District Judge

12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

CASE NO.: 5:15-CV-01778-EJD
ORDER GRANTING DEFENDANT'S MOTION TO DISMISS SECOND AND THIRD
CLAIMS IN THE THIRD CONSOLIDATED AMENDED COMPLAINT
17