Protect yourself against scams!
I received an email from Stripe today regarding phishing scams targeting Stripe accounts but these types of scams are happening with EVERY payment processing company including PayPal and Square. I can’t emphasize enough the importance of NOT clicking on links within emails you receive and NEVER give your financial information over the phone if you get a call from someone claiming to be from your bank, etc.
Make sure you know the web address of all your financial companies and keep them bookmarked! Scammers can easily purchase domain names that are similar to the real website URLs like stripepaiments.com, which, at first glance, looks legit!
Please read the following email from Stripe as this pertains to almost everyone:
This message is here to help you safeguard your Stripe account against recent phishing attempts we’ve observed. We’ve noticed an increase in scams targeting Stripe accounts. These are often in the form of phishing: emails or phone calls that claim to come from Stripe to try and steal sensitive information like passwords, two-step authentication codes, or personal financial details.
Stripe works hard to protect your business, but it’s important to stay informed about threats to keep your account secure.
How to identify phishing attempts
Phishing emails often claim there’s an urgent problem with your Stripe account, such as paused payments or payouts. They want to scare you into providing sensitive information that can be used to steal your money or data.
Phishing can happen over the phone as well—such as a call from someone who claims to be from Stripe. Know that Stripe will never call you unexpectedly. When in doubt, hang up and reach out to support via official channels at support.stripe.com.
How to protect your account
We recommend reviewing the security practices below to ensure you stay protected against future phishing attempts.
- Validate email addresses and websites. Make sure emails come from stripe.com and be suspicious of email addresses that contain any unusual characters, dashes, underscores, misspellings, or numbers. Always verify that you’re on an official Stripe website when using our products.
- Sign in with a bookmark. Add bookmarks to official Stripe websites and only sign in using those bookmarks. This helps ensure you’re always accessing authentic Stripe webpages.
- Use strong authentication methods. Strengthen the security of your account by requiring two-step authentication with a security key or authenticator app.
- Check browser extensions. Only install browser extensions from companies you know and trust. Malicious browser extensions can read passwords and compromise your security.