Squarespace Designer Phishing Scam

What’s Happening

Scammers are impersonating EngageTaste and other Squarespace designers to defraud their clients. In September, 2025, several clients shared suspicious emails that appeared to come from my business. Squarespace has confirmed that, beginning in September of 2025, a coordinated scam has targeted thousands of Squarespace designers and website owners across several platforms, including Squarespace, Shopify, Showit, Wix, and others.

Scammers impersonate the website designer and claim there is a problem with the domain, SSL certificate, website security, AI visibility, or privacy law violations that requires urgent payment. More recently, tactics have evolved — some emails now read as genuinely helpful website audits, written in a consultative tone with specific, accurate observations about the client’s site. In at least one known case, the scammer accepted payment and performed actual work on a client’s site; the work was poor quality and was done without the client’s informed consent. Whether alarmist or helpful in tone, the goal is the same: to solicit payment for services that will never be delivered. I will never reach out unsolicited to request payment for website fixes or improvements. (If you’d like a genuine website review or quick fixes, I offer hourly consultations. You can book one here.)

From my client base alone, over 50 contacts have been documented. At least six individuals have confirmed financial losses, and at least 20 different Gmail addresses have been used so far. In several cases, clients were directed to make payments through Fiverr or Upwork accounts. Often, my name (Sara, no “h”) is misspelled, or there is a space added to my business name (EngageTaste). I sent email alerts out to all past clients, alerting them of the situation in October and December of 2025, and Squarespace sent their own in October and May of 2026 (if you didn’t receive any of these, be sure to sign up for my alerts and Squarespace’s, as well). I have reported the activity to the FBI and the Internet Crime Complaint Center (IC3), and I continue to monitor the situation closely.

You Are Safe

Squarespace has confirmed that their security team found no evidence of a breach affecting Squarespace or its partners. My own account has not been compromised, nor has yours (unless you intentionally provide login credentials or grant site access to the impersonator). Do not share login information or grant access to anyone claiming to represent me unless you have confirmed the request directly with me.