It's possible. But also possible it is a scam. You can report it for investigation at https://security.intuit.com/.
The sender should be turbotax.com or intuit.com (although that can be faked). If you click on the link, you should not enter any user name, password, or personal information unless you see a padlock icon in your browser address window that means the site is secure.
