Recieved this email claiming to be from Square. 

I received one too!

Hey @rayspizza and the others I merged into this thread.

We're aware of this email going around unfortunately. Thanks for flagging it for other sellers. 

These can be forwarded to spoof@squareup.com and marked as spam with your email providers.

Is the spoof email down?

Just FYI, it’s not enough to ‘verify’ the senders address.  It is very easy to fake a ‘from’ address in emails.   The easy way to double check the validity of a link in an email is to hover your mouse cursor over the link and look at the address it points to.  Depending on the browser, the address may show as a ‘hint’ pop up, or in the status bar at the bottom of the window.  If there is no hover address hint, you can right-click on the link and choose ‘copy link address’ and the paste it into notepad or other text editor.  

Always look at the address of the ‘action’ link - the one they are trying to trick you into clicking.  Other links within the email may be real, such as a link to support or contact, but if it’s a phishing email, the action link will always be fake.  Examine the link carefully.   If you aren’t sure it’s genuine, then verify the information in the email another way - such as logging directly in to the site without using the email link.  

-Greg

Thanks to Square and EVERYONE for the heads-up!

Painterlady 

If you tried to sign in on the phishing email, stop reading right now and change your Square password.  Seriously, right now.  The failed signin was because you were not on Square's site, you were on the hackers site and they now have your password.

-After- you change your password, go through every setting and make sure nothing has changed.   Let Square know your credentials may have be compromised between yesterday and today and ask them to check the audit logs for any activity between then and when you change the password.