Malware Alert: How to Identify and Report Suspicious Squarespace Emails
Phishing attempts targeting Squarespace users are increasingly common. Here's how to protect yourself and identify suspicious communications:
How to Report Suspicious Emails
- Forward suspicious emails to [email protected]
- Include the full email header and subject line
- Don't click links, download attachments, or respond to suspicious messages
Common Signs of Phishing Scams
- Requests for sensitive information (bank details, passwords, SSN)
- Claims about compromised accounts
- Unsolicited account verification links
- Misspelled sender addresses (e.g., squareespace.com)
- Suspicious URLs not leading to squarespace.com
- Emails mimicking Squarespace design
- HTML attachments
- Form submissions claiming to be from Squarespace
Form Submission Scams
- Squarespace never contacts customers through website form blocks
- Official form emails come from [email protected] or [email protected]
- Suspicious submissions will show a warning banner
- Use the "Report spam" button for unreported suspicious forms
Phone Scams Squarespace does not make unsolicited phone calls to customers. Be wary of callers requesting private information.
Official Squarespace Email Domains:
- @mail.squarespace.com
- @squarespace.com
- @squarespacescheduling.com
- @acuityscheduling.com
- @unfold.com
- And several other verified domains for specific services
Information Squarespace Will Never Request:
- Complete credit card numbers
- Account passwords
- Unsolicited personal information
Information Squarespace May Legitimately Request:
- Last four digits of credit card
- Government ID (for specific account issues)
- Banking information (only through secure portals for Squarespace Payments)
Additional Security Measures:
- Enable Google ReCAPTCHA on website forms
- Regularly review security settings
- Monitor form submissions carefully
- Keep contact information updated
If unsure about any communication's legitimacy, forward it to [email protected] for verification.