Has anybody received a suspicious email about a refund?

[mimosbylizco]

I received an email about a refund to this account, there has been no transactions in months on the account. I have a new one and would like to deactivate the old one but I have to wait until tomorrow to call Support.

[Russell · Accepted solution]

Hi @mimosbylizco - thanks for making your first post to the 👥 community. 

Thanks for flagging this. It sounds like this email wasn’t sent by Square. It would be great if you could forward this email to “spoof@squareup.com” so that we can investigate and take any necessary actions. Please note that Square’s own system has not been breached, but we are working hard to mitigate these types of external phishing scams.

Please do not include any other information in the email you forward to spoof@squareup.com (including usernames or passwords).

As a security best practice, I recommend always verifying the sender of a message before entering any sensitive information. If you have a Square account, it’s good to keep in mind that Square’s sign-in page URL will always begin with www.squareup.com/login and will contain a lock icon indicating a secure and legitimate Square site.

If you’d like additional information on recognizing and reporting phishing scams, feel free to visit our Support Center.

[mimosbylizco]

Hi Russell! Thank you for your response, actually I forwarded the email to the spoof email but it was treturned as being blocked... This is a copy of the message I got

Message blocked

Your message to spoof@squareup.com has been blocked. See technical details below for more information.

LEARN MORE

[Russell]

Thanks for letting me know - it seems that the nature of this email is preventing it from being forwarded. This looks like an error message from Google. Most email providers like GMail have auto blockers that prevent malicious content from being spread. 

I took a look and see the messages you sent to our Support Team and have alerted the team that handles these types of messages. 

Thanks again for flagging this - rest assured we will look into this. 👍

[mimosbylizco]

I really appreciate your help, Thanks a lot for your response.

[cchardt]

My husband received an email today as well. He does use his for his business but the refund amount is nothing of what he took in. I logged in to his account using the computer and see nothing. I told him not to log in using that email. I will try and forward it. 

[2crabbie2c]

I received this email as well.  Says that a customer has started a refund process.  I forwarded it to the spoof email address.  It's very worrisome as everything about it looks just like an actual email from Square.  I hope we can learn more from Square about it soon.

[Anna_W]

I just received a suspicious email also! I didn’t follow the email and log into my account though.

[Tom]

Hi @Anna_W, thanks for flagging this! Can you forward that email to "spoof@squareup.com"? With that, the appropriate team at Square will be able to take a closer look. If any other questions remain, please get in touch with an account specialist on our Customer Success team. Hope this helps get you in the right direction.🙂

[noblec]

I got one yesterday. The refund amount was 1725.00. 

[BernadetteA]

Hi @noblec Thanks for reaching out. Emails from Square will come from an @squareup.com email address. I recommend forwarding the email to spoof@squareup.com if you notice a suspicious sender address.