EDWARD J. DAVILA, District Judge.
In this putative class action suit, six individual Plaintiffs
Intuit develops and offers various financial and tax preparation software and related services, including TurboTax, a tax preparation software program. TurboTax can be utilized online or it can be downloaded and installed on a customer's personal computer. Inuit charges persons who file tax returns through TurboTax a "tax preparation fee" generally between approximately $50 and $150, in addition to other fees.
Plaintiffs allege that Intuit has known for years that fraudsters exploit Intuit's lax security in order to open fraudulent accounts with Intuit and file numerous fraudulent tax returns through TurboTax in other peoples' names. Intuit allegedly allows the fraud to occur through TurboTax in two ways: (a) Stolen Identity Refund Fraud ("SIRF"), where a fraudster gathers data about a taxpayer from outside means, such as the black market or "phishing," creates a fraudulent, new TurboTax account in the victim's name, and files a fraudulent tax return in the victim's name through TurboTax; and (b) Account Takeover Refund Fraud ("ATO"), where a fraudster hacks into an existing TurboTax account and files a fraudulent return in the victim's name through TurboTax.
Intuit allegedly knew that it was allowing SIRF and ATO fraud to occur through TurboTax, and that its allegedly lax security protocols were enabling and assisting the fraud. An internal Intuit strategy presentation allegedly showed that the number of "suspicious" customers who successfully filed a return using TurboTax was approximately 900,000 in 2010 and 2.5 million in 2012. In 2015, Intuit's Chief Information Security Officer allegedly stated in an interview with KrebsOnSecurity.com that about 40% of the tax returns flagged as likely fraudulent by Intuit were the result of ATOs and 60% appeared to be the result of SIRFs.
Intuit also allegedly knew that the risk of fraud perpetrated through TurboTax was continuing to increase as the number of major external "data breaches" increased, exposing the personal identifying information of millions of Americans to would-be fraudsters. Despite knowledge of widely reported data breaches involving identify theft, and knowledge of SIRF and ATO fraud, Intuit allegedly maintained lax security protocols in order to boost its revenues.
Fox example, Intuit allegedly placed few requirements on individuals seeking to open accounts with Intuit and file tax returns using TurboTax. Further, Intuit allegedly eliminated one important protection it previously had in place —multi-step authentication—despite its security benefits. Plaintiffs allege on information and belief that Intuit dropped multi-step authentication in order to make it more convenient to open new accounts and to file returns through TurboTax, thereby generating more revenue for Intuit. Intuit also allegedly allowed the re-use of the same Social Security number across numerous TurboTax accounts, and failed to apply reasonable limits to the number of tax returns that could be filed from the same account and/or the same mailing address. Intuit also allegedly permitted tax filers to file state tax returns through TurboTax without filing a corresponding federal return, an option which allegedly is recognized in the industry as facilitating the filing of fraudulent state returns and is not offered by Intuit's competitors.
Intuit also allegedly enabled and assisted fraudulent filings through a policy of allowing TurboTax "tax preparation fees" to be paid out of tax refund proceeds. This option allegedly enabled fraudsters to file fraudulent returns through TurboTax without making any financial outlay. For TurboTax filers who opted to pay "tax preparation fees" out of refund proceeds, Intuit charged an additional "refund processing fee" of approximately $35.
Intuit also allegedly enabled and assisted fraudulent filings through its policy of allowing filers to receive tax refunds in non-traceable forms, such as pre-loaded debit cards or "Green Dot" cards. As another example, Intuit allegedly enabled and assisted fraud by failing to notify and timely notify consumers when fraudulent tax returns and/or tax returns that Intuit deemed suspicious were filed in their names, and by failing to timely notify the relevant tax authorities when tax returns deemed suspicious by Intuit were filed through TurboTax. Intuit allegedly made a deliberate and knowing decision to maintain the protocols described above in order to generate revenue and market share. Plaintiffs allege that Intuit's desire to maximize fee revenue cause it to ignore the recommendations of its own security experts, Robert Lee and Shane MacDougall.
Plaintiffs allege that they were the victims of SIRF fraud, "meaning that Intuit allowed a fake TurboTax account to be opened in their names and allowed fraudulent tax returns to be filed from that account in their names." SCAC at ¶¶88, 98, 108, 115, 124, 133, 142, 152. Plaintiffs assert claims for unfair competition, negligence, aiding and abetting fraud, "negligent enablement of third party imposter fraud," and unjust enrichment.
Plaintiffs Knoch, Lebinski, Stock and Williams agreed to the TurboTax online Terms of Service or the TurboTax desktop End User License Agreement, both of which contain a dispute resolution and class waiver provision. The dispute resolution provisions provide that "ANY DISPUTE OR CLAIM RELATING IN ANY WAY TO THE SERVICES OR THIS AGREEMENT WILL BE RESOLVED BY BINDING ARBITRATION, RATHER THAN IN COURT." Co Decl., Ex. 2 (emphasis in original). The dispute resolution provisions also specify that the Federal Arbitration Act ("FAA") governs the interpretation and enforcement of the arbitration provision.
The FAA provides that written agreements to arbitration disputes "shall be valid, irrevocable and enforceable, save upon grounds as exist at law or equity for the revocation of any contract." 9 U.S.C. §2. "By its terms, the Act `leaves no place for the exercise of discretion by a district court, but instead mandates that district courts shall direct the parties to proceed to arbitration on issues as to which an arbitration agreement has been signed.'"
In the present case, the parties' dispute resolution agreements expressly provide that arbitration will be conducted by the American Arbitration Association ("AAA") before a single AAA arbitrator under the AAA's rules. Rule 14(a) of the AAA empowers the arbitrator "to rule on his or her own jurisdiction, including any objections with respect to the existence, scope, or validity of the arbitration agreement or to the arbitrability of any claim or counterclaim." Virtually every circuit has determined that incorporation of the AAA arbitration rules "constitutes clear and unmistakable evidence that the parties agreed to arbitrate arbitrability."
Plaintiffs oppose arbitration, asserting that courts within the Ninth Circuit are split as to whether a reference to AAA rules clearly and unmistakably delegates the issue of arbitrability to an arbitrator when the parties to the arbitration agreement are not sophisticated parties. This is not so. Two of the three cases relied upon by Plaintiffs, predate
Despite the delegation to arbitrate arbitrability, Knoch, Lebinski, Stock and Williams next ask the Court to conduct a "limited" inquiry to determine whether the assertion of arbitrability is "wholly groundless."
For the reasons set forth above, Intuit's motion to compel Plaintiffs Knoch, Lebinski, Stock and Williams to arbitration is GRANTED, and their cases are STAYED pending resolution of their respective arbitrations.