An email from "square" asking you to Reverify your ID could be fake

[osd]

In the past 48 hours, I received a text and two emails about reverifying my identity. Both emails supposedly came from square and they are attached below (with personal information removed).

Upon speaking to an agent on the phone, I'm told that if they actually send emails, it would be from square@help-messaging.squareup.com and the email return path should match that, which in my case is:

Return-Path: <square@help-messaging.squareup.com>

However, the phishing email shown above is phishing for these reasons:

1. The return path is vastly different:

0101019344afb76a-41ceb6d1-c21c-451d-9ca1-97dbe0273dad-000000@amazonses.messaging.squareup.com

2. They don't use amazon when sending emails

3. They don't use noreply@messaging.squareup.com when they request info from you.

That is the info I gathered from the support agent I went on the phone with today, and I asked them to add a page on their website to help all of us identify what emails from them are legitimate and what ones are phishing.

[Katie_SQ · Accepted solution]

Thank you for flagging this, @osd! 

If you haven’t already, please forward the email to spoof@squareup.com so our team can look into it further. Also, remember to mark the email as spam and remove it from your inbox.

For more information on how to recognize and report phishing scams, check out this Support Center article.

You can also find helpful guidance on identifying phishing scams in the following articles on Square's blog, The Bottom Line by Square:

• How to Spot Phishing Emails
• 8 Ways to Protect Your Business from Phishing Scams

Appreciate you taking the time to share this with the Community!

[PaulV2]

Thanks for taking the time to call in and then to post the response you got. I received a similar email today and it looks very convincing. I found it an odd request though so checked the Square site and found your comment. Thanks.