Ongoing Scam Targeting Squarespace Websites.
OmniWorx Design was made aware, by Squarespace, of an ongoing scam affecting Squarespace websites designed by Squarespace Circle Partners in October of 2025. We took action to alert all of our current and past website clients at the time through this email. We wanted to inform our clients that this scam is ongoing and continues to target Squarespace users. At OmniWorx we have not recieved any reports of scammers targeting our clients at this time but please continue to be vigilant. We have included some information from Squarespace and some information on how you can protect yourself and your website in this post.
Sample scam email. Click to enlarge. Source: Squarespace
We’ve been made aware of fraudulent emails currently circulating that pretend to be from legitimate Squarespace Circle members like OmniWorx Design. These messages often warn of urgent actions such as “account verification,” “compliance requirements,” or “license confirmation,” and claim your website could be suspended or limited if you don’t act immediately.
To appear convincing, scammers may reuse official branding, logos, or screenshots taken from real communications. A typical message may say something like: “All active Squarespace websites must complete a new compliance and technical verification process. Failure to verify may result in service interruption…”
Squarespace has confirmed that these emails are phishing attempts. Their security team has found no indication of a system breach within Squarespace or its partner network.
How to Protect Yourself
To reduce the risk of falling victim to these scams, please keep the following in mind:
Review the sender’s email address closely. Legitimate emails from OmniWorx Design will only come from an @omniworxinc.ca address. We would never use @gmail.com, @protonmail.com or any other email domain for business communications for any reason. Also carefully check the domain, the address should be omniworxinc.ca not omniworks.com, omniworks.ca, omniworx.com, omniworx.ca or any other layout of our name. Messages sent from public email services or look-alike domains are not from us.
Turn on two-factor authentication (2FA) for your Squarespace account, email, and any connected services. We keep our accounts secure through 2FA as well.
Never provide login details or payment information in response to unexpected messages, regardless of how official they appear. Unless you have requested that we remove our access to your site, we already have access to the back end of our clients websites. We don’t need to be added or use your login information. Therefore, if someone appearing to be OmniWorx Design is asking for access to your site through an unsolicited message, treat it as a red flag.
If something feels off, pause and reach out to us directly through our established email and phone number before clicking links or replying.
Report suspicious emails by marking them as phishing in your inbox or forwarding them to phishing-report@squarespace.com and reporting them through your email client.
Our Approach to Client Security
At OmniWorx Design, protecting our clients’ information is a priority. We use verified email authentication methods, including SPF, DKIM, and DMARC, to help ensure our communications are legitimate and secure. If you receive an email mentioning your website, billing, or account status and you’re unsure about its authenticity, contact us. We’ll confirm whether the message is genuine.
Please note: Squarespace does not require additional license checks, surprise compliance reviews, or extra fees outside of your regular subscription and any services you’ve arranged with OmniWorx Design.
Staying Informed Matters
Online scams continue to evolve, but staying informed is one of the best ways to stay protected. We’re keeping a close eye on this issue and will notify our clients if there are any important updates from Squarespace. If you have questions or would like us to review a suspicious message, get in touch with us, we’re always happy to help!