An email from "square" asking you to Reverify your ID could be fake

[osd]

In the past 48 hours, I received a text and two emails about reverifying my identity. Both emails supposedly came from square and they are attached below (with personal information removed).

Upon speaking to an agent on the phone, I'm told that if they actually send emails, it would be from [email protected] and the email return path should match that, which in my case is:

Return-Path: <[email protected]>

However, the phishing email shown above is phishing for these reasons:

1. The return path is vastly different:

0101019344afb76a-41ceb6d1-c21c-451d-9ca1-97dbe0273dad-000000@amazonses.messaging.squareup.com

2. They don't use amazon when sending emails

3. They don't use [email protected] when they request info from you.

That is the info I gathered from the support agent I went on the phone with today, and I asked them to add a page on their website to help all of us identify what emails from them are legitimate and what ones are phishing.

[Katie_SQ · Accepted solution]

Thank you for flagging this, @osd! 

If you haven’t already, please forward the email to [email protected] so our team can look into it further. Also, remember to mark the email as spam and remove it from your inbox.

For more information on how to recognize and report phishing scams, check out this Support Center article.

You can also find helpful guidance on identifying phishing scams in the following articles on Square's blog, The Bottom Line by Square:

• How to Spot Phishing Emails
• 8 Ways to Protect Your Business from Phishing Scams

Appreciate you taking the time to share this with the Community!

[PaulV2]

Thanks for taking the time to call in and then to post the response you got. I received a similar email today and it looks very convincing. I found it an odd request though so checked the Square site and found your comment. Thanks. 

[bishopandbeale]

We've been getting these notifications in our Square account, and text messages. Within the Square Account, we've verified it and still get the messages. Square support hasn't been very helpful. First time I reached out, they said that our account wasn't approved and we wouldn't be able to accept credit card payments (despite already taking payments for over a year now). Support admitted their mistake and forwarded to another person. I keep asking them to confirm that we're good to go -- for over a month now. I'm at a loss now and just have to roll the dice to see if we're going to be locked out now.

[Katie_SQ]

Thanks for reaching out, @bishopandbeale. Sorry to hear about this issue!

To confirm, are you receiving these notifications via email, or within your Square Dashboard?

Would you mind sharing screenshots of what you’ve received (without revealing any personal information)?

Thanks, I’ll keep an eye out for your reply.