Phishing scams targeting Stripe accounts
We love the Stripe online payment processing platform almost as much as we love its origin story: it was launched in 2011 by the Collison brothers from rural Ireland when they were in their early twenties.
At Regional Rising we’ve helped dozens of small businesses and entrepreneurs build websites on the Squarespace platform. Stripe is an important integration with many website platforms, including Squarespace, for collecting customer payments online.
Like all major organisations Stripe is not immune from the attempts by scammers to deceive its customers but we do like this approach to alerting customers to scams and how to safeguard themselves.
Message from Stripe to its customers…
Stripe sent the following message to all of its customers today (29 July 2025).
“This message is here to help you safeguard your Stripe account against recent phishing attempts we’ve observed. We’ve noticed an increase in scams targeting Stripe accounts. These are often in the form of phishing: emails or phone calls that claim to come from Stripe to try and steal sensitive information like passwords, two-step authentication codes, or personal financial details.
Stripe works hard to protect your business, but it’s important to stay informed about threats to keep your account secure.
How to identify phishing attempts
Phishing emails often claim there's an urgent problem with your Stripe account, such as paused payments or payouts. They want to scare you into providing sensitive information that can be used to steal your money or data.
Phishing can happen over the phone as well – such as a call from someone who claims to be from Stripe. Stripe will never call you unexpectedly. When in doubt, hang up and contact support via official channels at support.stripe.com.
How to protect your account
We recommend reviewing the security practices below to ensure you stay protected against future phishing attempts.
Validate email addresses and websites. Make sure emails come from stripe.com and be suspicious of email addresses that contain any unusual characters, dashes, underscores, misspellings, or numbers. Always verify that you're on an official Stripe website when using our products.
Sign in with a bookmark. Add bookmarks to official Stripe websites and only sign in using those bookmarks. This helps ensure you’re always accessing authentic Stripe webpages.
Use strong authentication methods. Strengthen the security of your account by requiring two-step authentication with a security key or authenticator app.
Check browser extensions. Only install browser extensions from companies you know and trust. Malicious browser extensions can read passwords and compromise your security.
You can learn more about making your account secure on our support site. We’re here to help.”
Stripe’s origin story
If you’d like to learn more about their fascinating origin story have a listen to the interview the brothers did with the How I Built This podcast in 2018.
