Is square.com legit?
Square.com appears to be Mostly Safe, backed by a very long domain history and strong technical security. However, some red flags like incomplete legal pages and excessive hidden content warrant caution.
Finance average: 80/100 · based on 48 sites
Checked: April 18, 2026 at 8:25 AM UTC · Refresh
Is square.com a scam? Here's what we found.
While the technical security, like TLS 1.3 and HSTS, is robust and Google Web Risk shows no threats, the mention of non-reversible payment methods like Bitcoin is a significant warning for user transactions.
The domain is exceptionally old at over 31 years and registered with a reputable registrar, MarkMonitor, providing strong evidence of a well-established and stable entity.
The site isn't blacklisted and has custom branding, indicating a professional, recognized entity. The lack of a Trustpilot profile is not unusual for a company of its type, but also means less external validation.
Despite having contact info, the presence of excessive hidden content and no social media links on the homepage makes it less transparent than ideal for a major financial services provider.
The missing privacy policy or terms of service is a notable oversight for a financial services website, especially one dealing with payments, and reduces confidence in its legal adherence.
The underlying infrastructure is well-maintained, featuring proper email authentication, multiple name servers, and efficient page loading, although the redirect and missing sitemap are minor points.
Signals Detected
This site appears in the top 1 million websites
No structured data markup found
This business has no Trustpilot presence — not unusual for smaller or newer companies
Domain created 1994-06-04T04:00:00Z (31 years, 4 months ago)
Registered through MarkMonitor Inc.
Expires in 410 days
DNSSEC status from WHOIS
crt.sh returned status 429
Valid certificate, expires in 76 days
Certificate issued by Google Trust Services
Connection uses TLS 1.3
Mentions non-reversible payment methods: bitcoin
Excessive hidden content found — may indicate cloaking or deceptive content
No robots.txt file — common for small sites
Site redirects to https://squareup.com/us/en
Site enforces HTTPS via HSTS
X-Frame-Options: SAMEORIGIN
Web server: cloudflare
No threats detected by Google Web Risk
Not found on any DNS blacklists
Site has custom branding and social media metadata
Resolves to: 162.159.140.28, 172.66.0.28
Mail servers: inbound-smtp.us-west-2.amazonaws.com.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: ns-1816.awsdns-35.co.uk., ns-311.awsdns-38.com., ns-810.awsdns-37.net., ns-1248.awsdns-28.org.
No sitemap found — common for smaller sites
Website is live and responding
Website appears to have contact information
Website is missing either privacy policy or terms of service
No social media links found on homepage
Could not query Wayback Machine
Fast page load
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.