My Square Card was compromised on December 30. I have never used the card with any merchant. The card was added to a fraudulent Google Pay account and used to make purchases in Dubai. They got away with over $800. I locked the card and disputed the transactions. The dispute was initially denied, with Square stating, "We are not able to dispute transactions where a passcode or biometrics was used as authentication during a transaction, as is the case for Apple Pay transactions. Through these authentication methods, we have confirmation that permission was given from a registered device to process the payment." I appealed the denial and Square refunded the money.
On January 9, it happened again, even though the card shows as "locked." This time it was with Apple Pay at the same merchant in Dubai. This time, it was over $1600. Card is still "locked." I disputed these transactions.
Then, last night, January 11, it happened again for another $800. Square had reissued two more cards. I never asked for cards to be reissued and the status of my card shows that it hasn't even been activated yet.
This time, Square is denying the dispute and let me know that they were deactivating all my cards, even though they show and have shown a status of "locked" and not yet activated. Square can provide no support.
As I have never used any of these cards nor given the number to any merchant, it's obvious that Square's systems are not secure. Think twice before opening one of these accounts.
