I think I see how some people are losing their accounts to RMT. I recently received an email from Square Support stating I had registered a new email address and that, by clicking the provided link, the request would be finalized. All very official looking, too. Shame, though, that the email wasn't sent to the address I have registered with my Square account. Following official links to check my account I didn't see a second email registered on it so it was pretty clear to me that someone tried phishing me. Not sure who, the reply address was very official looking.

I'm pretty wary when it comes to things I have an interest in but I can see some people being fooled by these emails. Just a heads up, if it looks official but says something you don't remember doing, then it's likely a phishing attempt and best ignore. Or better, reported... just need to figure out how to do that.