Malware Alert: How to Identify Genuine Squarespace Communications
A suspicious email claiming to be from Squarespace should be treated with caution. Forward suspicious emails to [email protected], including the header and subject line, for investigation.
Common signs of phishing emails include:
- Requests for sensitive information (bank details, passwords, SSN)
- Claims about compromised accounts
- Unsolicited verification links
- Misspelled sender addresses (e.g., squareespace.com)
- Suspicious links not leading to www.squarespace.com
- Mimicked Squarespace design
- HTML attachments
Important safety notes:
- Squarespace never initiates phone calls to customers
- Form submissions from @squarespace.info are user-generated
- Suspicious form submissions display warning messages
- Use the "Report spam" button for suspicious form submissions
Official Squarespace email domains include:
- @mail.squarespace.com
- @squarespace.com
- @squarespace.info
- @squarespacescheduling.com
- @acuityscheduling.com
- @unfold.com
Squarespace will never ask for:
- Complete credit card numbers
- Passwords
Legitimate information requests may include:
- Last four digits of credit card
- Government ID (for specific account issues)
- Banking information (through secure portal for Squarespace Payments only)
To enhance security:
- Enable Google reCAPTCHA for forms
- Review form submissions carefully
- Avoid clicking suspicious links
- Forward suspicious emails to [email protected]
Related Articles
Email Campaign Security: How to Verify Subscribers and Prevent Spam
