How to Report Malware and Phishing Attempts to Squarespace
Phishing emails can appear highly legitimate but often contain subtle clues that reveal their fraudulent nature. Here's how to identify and handle suspicious Squarespace communications:
Key Signs of Phishing Attempts:
- Requests for sensitive information (bank details, passwords, SSN)
- Notifications about compromised accounts
- Unsolicited account verification links
- Misspelled sender addresses (e.g., squareespace.com)
- Suspicious URLs not leading to squarespace.com
- Imitated Squarespace design
- HTML attachments
- Phone calls claiming to be from Squarespace
How to Handle Suspicious Communications:
- Don't click links or download attachments
- Never reply to suspicious messages
- Forward suspicious emails to [email protected]
- Report suspicious form submissions using the "Report as spam" button
Important Security Notes:
- Squarespace never requests sensitive information via email
- Official form submissions come from [email protected]
- Squarespace does not make unsolicited phone calls
- Only respond to emails from verified Squarespace addresses
Information Squarespace May Legitimately Request:
- Last four digits of your credit card
- Government-issued ID (for account verification)
- Bank details through secure portals (for Squarespace Payments)
Best Practices for Account Protection:
- Enable Google reCAPTCHA for your forms
- Verify sender addresses against official Squarespace email list
- Review form submissions carefully
- Report suspicious messages immediately
Official Squarespace Email Domains:
- @mail.squarespace.com
- @squarespace.com
- @squarespace.info
- @squarespacescheduling.com
- @acuityscheduling.com
- @unfold.com
For additional security measures, enable advanced security features and regularly monitor your account activity.
Related Articles
DNSSEC Protection Now Automatic for All Squarespace Domain Users
