System updates

We’re experiencing issues that may affect your Square services. We’ll continue to update our status page with more information.

Home>Privacy & Security At Square

Recognize and Report Phishing Scams

Be on the lookout for scam invoices
Did you receive a suspicious invoice, estimate, contract, or message from Square? If you don’t recognize it, don’t pay it. Invoice phishing scams are on the rise, and we want to keep you safe. Report the email by clicking Report message to Square in the footer of the email or forwarding it to spoof@squareup.com if you don’t find the Report message to Square option in the email.

What is phishing?

Phishing is an attempt by a fraudster to collect personal and/or financial information over email, phone, or via text message. These fraudsters typically get this information by verbally requesting it over the phone, by posting links or false phone numbers on social media sites, or by sending unsolicited emails or texts messages that direct recipients to enter personal information into fake websites or phone systems posing as real ones.

Learn more about protecting yourself from phishing scams on Square’s blog.

Protect sensitive information

Square will never ask you to provide sensitive information such as your username, password, social security number, full bank account details, or payment card information over email, phone, or text message.

If you believe you called a fraudulent number for Square or if you receive a suspicious phone call, do not provide any personal or account information, and hang up immediately.

If you receive a suspicious email from or regarding Square, don’t reply to the message, click any unknown links, or open any attachments. Additionally, if you receive any communications via Square Messenger, invoices, contracts, estimates, or other outlet requesting payment for services you do not recognize, do not reply or submit payment. Instead, click Report message to Square in the footer of the email, and the appropriate team will investigate and take action if needed. To confirm the Report message to Square link isn’t phishing, hover over the link to confirm the URL is profile.squareup.com/report-message.

If you don’t find the Report message to Square link in the email footer, you can report it to us by forwarding the email to spoof@squareup.com.

Verify the phone number

To contact support, sign in to your account, and visit Square's contact page – or call (855) 700-6000. Keep in mind, if our phone line is unavailable or you are contacting us outside of our business hours, you will not see the option to call, but are able to request a callback or send us an email.

If a third party provides you with contact information for Square, please verify the information through an official Square channel before calling.

Verify the URL

Always be sure that you’re on a secure site before entering your Square login information. To do so, check that the web address in your browser is “https://squareup.com/login” and that the Block, Inc. padlock icon appears next to this web address.

safe square browser bar

It is common for phishing emails to contain links that direct recipients to a non-secure page where you may be prompted to enter your username and password (and sometimes additional sensitive information).