Email Security Index / Payments and fintech
Can squareup.com be impersonated by email?
No: forged email “from” squareup.com is refused.
squareup.com tells receiving mail servers to reject any message that fails its authentication (DMARC p=reject). A forged email claiming to be from squareup.com is refused by Gmail, Outlook, Yahoo and every other receiver that follows DMARC.
- Grade
- C 70/100
- Rank
- 36 of 48
- In payments and fintech
- 7 of 8
- DMARC
- reject
Measured 2026-11-07. Full live report card · Signed proof
Beyond impersonation
- OffMTA-STS Makes mail sent to the domain travel encrypted, so delivery can’t be silently downgraded to plain text.
- OffDNSSEC Signs the domain’s DNS answers, so the records above can’t be forged in transit.
- OffBIMI logo Shows the brand’s verified logo next to its messages in supporting inboxes.
Payments and fintech
The daily score is recorded from the next measurement.
No confirmed change yet. A change is listed once two checks six hours apart agree.
About this page
Measured from public DNS with the same checks anyone can run on their own domain, as part of the Email Security Index of 48 well-known brands. It describes what public DNS shows about email impersonation and delivery, not squareup.com’s security overall. Spotted something wrong? Tell us and it’s re-checked.