[This question was merged from a discussion on a similar topic: Received email from " SquareINC" customer refund, possible scam?]
Ok so I have received 3 of these lately. The first freaked me out, said it was issuing a refund for an amount I never charged. I reported it to spoof team. Second one, yesterday, didn't mention Square but was demanding a refund for that same amount, which was never charged. That one said it was from ConstantContact (who I don't use) , but referenced the same email address as the one from months ago. And I JUST received a third one, from Square, supposedly. Different amount but again, an amount I have never charged. And this one uses the "right" email address (email@example.com). I'm very confused. And nervous. I sent it to spoof (again). Any ideas/suggestions appreciated.
Re: Received email from " SquareINC" customer refund, possible scam?
@Poesy70 Thank you for forwarding these emails to Square. It’s not uncommon for an attacker to send the same email, in an attempt to get the recipient to click through. If you’re ever in doubt about an email you receive, open your browser and manually navigate to Square (https://squareup.com/dashboard/) and log into your account. Financial activity is always recorded in your account, where you’ll be able to verify.
Re: Does Square ever have you open an email from Square Services?
@JW2019 Hi, are you referring to an email from Square Secure? If so, this article will have more detail on why you’re receiving the email and what types of content you can expect to read about in it: Square Secure Information Requests FAQ. When in doubt, as we’ve mentioned, visit the Square Dashboard in a web browser. Notices and alerts about your account can be found there.
Thank you for raising your questions! To recap the themes that we discussed, please keep the following information in mind.
✔️ Stay Calm
If an email catches you by surprise, don’t panic! Take a breath and visit your Square Dashboard. The online Square Dashboard is the source of truth for all of your account information.
Phishing emails are becoming increasingly good at impersonating real companies and organizations. The tools to create professional emails are widely accessible and the content is meant to alarm you. The scammers want to encourage you to take an action without second guessing the sender. Taking a few minutes to breath and analyze an email will help you identify phishing attempts.
🔎 How to Spot Fake Emails
Common themes phishing emails use:
- Noticing account activity or issues with your account that require your immediate attention
- Links that mention you'll need to "log in" to confirm something, receive something, or cancel something
- Free items and services or too-good-to-be-true discounts
Something else to keep in mind: scammers love holidays. You’ll most likely see an influx in phishing attempts, spam emails, and even phone calls on or before holiday. A way scammers will try to remove friction is getting you to take action when you are most distracted.
An email that's missing key personal information like your first name, contains spelling errors, or contains grammar errors is a high indicator that the email is not real. As we've mentioned before, Square will not ask for sensitive information in an email. We'll always direct you to log in to your account or contact our Square Customer Success team.
🔒 Protect Your Account
One of the ways you can protect your Square account is by enabling 2-Factor Authentication. This extra layer of security requires a code to be confirmed by an application or through a text message.
Unfortunately, phishing emails are difficult to completely block. Some email application filters (like GMail) are sophisticated enough to catch and mark these emails as spam. If something seems suspicious, don’t hesitate to take the extra steps to log into your account or reach out to Square Support. If you think you’ve received a phishing email, you can always forward it to firstname.lastname@example.org before you delete it so we can investigate.