x

An email from "square" asking you to Reverify your ID could be fake

In the past 48 hours, I received a text and two emails about reverifying my identity. Both emails supposedly came from square and they are attached below (with personal information removed).

 

em1.png

 

em2.png

 

 

Upon speaking to an agent on the phone, I'm told that if they actually send emails, it would be from square@help-messaging.squareup.com and the email return path should match that, which in my case is:

Return-Path: <square@help-messaging.squareup.com>

However, the phishing email shown above is phishing for these reasons:

 

1. The return path is vastly different:

0101019344afb76a-41ceb6d1-c21c-451d-9ca1-97dbe0273dad-000000@amazonses.messaging.squareup.com

2. They don't use amazon when sending emails

3. They don't use noreply@messaging.squareup.com when they request info from you.

 

That is the info I gathered from the support agent I went on the phone with today, and I asked them to add a page on their website to help all of us identify what emails from them are legitimate and what ones are phishing.

397 Views
Message 1 of 3
Report
1 Best Answer
Square Community Moderator

Best Answer

Thank you for flagging this, @osd

If you havenโ€™t already, please forward the email to spoof@squareup.com so our team can look into it further. Also, remember to mark the email as spam and remove it from your inbox.

For more information on how to recognize and report phishing scams, check out this Support Center article.

You can also find helpful guidance on identifying phishing scams in the following articles on Square's blog, The Bottom Line by Square:


Appreciate you taking the time to share this with the Community!

View Best Answer >

358 Views
Message 2 of 3
Report
2 REPLIES 2
Square Community Moderator

Best Answer

Thank you for flagging this, @osd

If you havenโ€™t already, please forward the email to spoof@squareup.com so our team can look into it further. Also, remember to mark the email as spam and remove it from your inbox.

For more information on how to recognize and report phishing scams, check out this Support Center article.

You can also find helpful guidance on identifying phishing scams in the following articles on Square's blog, The Bottom Line by Square:


Appreciate you taking the time to share this with the Community!

359 Views
Message 2 of 3
Report

Thanks for taking the time to call in and then to post the response you got. I received a similar email today and it looks very convincing. I found it an odd request though so checked the Square site and found your comment. Thanks. 

320 Views
Message 3 of 3
Report

Type a product name