Home>Privacy & Security At Square

Recognise and report phishing scams

Be on the lookout for scam invoices
Did you receive a suspicious invoice, estimate, contract or message from Square? If you don’t recognise it, don’t pay it. Invoice phishing scams are on the rise and we want to keep you safe. Forward any suspicious message you get to spoof@squareup.com, then delete it from your inbox.

What is phishing?

Phishing is an attempt by a fraudster to collect personal and/or financial information over email, phone, text message, or social media channels. These fraudsters typically acquire this information by verbally requesting it over the phone, by posting links or false phone numbers on social media sites, or by sending unsolicited emails or texts messages that direct recipients to enter personal information into fake websites or phone systems posing as real ones.

Learn more about protecting yourself from phishing scams on Square’s blog.

Protect sensitive information

Square will never ask you to provide sensitive information such as your username, password, Square customer code, full bank account details, or payment card information over email, phone, or text message.

If you believe you called a fraudulent number for Square or if you receive a suspicious phone call, do not provide any personal or account information and hang up immediately.

If you receive a suspicious email from or regarding Square, don’t reply to the message, click any links, or open any attachments. Additionally, if you receive any communications via invoices, contracts, estimates, etc., requesting payment for services you do not recognise, do not reply or submit payment. Please forward any suspicious messages to spoof@squareup.com to report the incident. Do not include any other information in the email you forward. The appropriate team will investigate and take action if needed.

If you think your information has been compromised due to a phishing scam, please change your email and Square account passwords immediately and report the incident through official channels.

Verify the Phone Number

To contact support, log in to your account, and visit Square’s contact page – or give us a call at 1800 760 137. Keep in mind, if our phone line is unavailable or you are contacting us outside of our business hours, you will not see the option to call, but are able to request a callback or send us an email.

If a third party provides you with contact information for Square, please verify the information through an official Square channel before calling.

Verify the URL

Always be sure that you’re on a secure site before entering your Square login information. To do so, check that the web address in your browser is https://squareup.com/login or that the locked Block, Inc. icon has populated next to this web address.

It is common for phishing emails to contain links that direct recipients to a non-secure page where you may be prompted to enter your username and password (and sometimes additional sensitive information).

Set up two-step verification

2-step verification — frequently known as two-step authentication or 2FA — is a tool that provides an extra layer of security for your Square Account, protecting your account from unauthorised access. All you’ll need is a mobile device and an authentication app like Google Authenticator for iOS or Android, Microsoft Authenticator or Authy. You can set up 2FA from your online Square Dashboard.

To learn more about how to identify a potential spam email, visit our Seller Community and blog. You can also read more on how to contact Square Support.

Can't find what you need?