No, they just got an email from someone that happened to have my address in the `From` field. Since we're in the realm of phishing already, let's not forget th

No, they just got an email from someone that happened to have my address in the `From` field. Since we're in the realm of phishing already, let's not forget that people still commonly enter their email address and email password into sites claiming to "Find your friends who are using this service". The problem with social attacks is that they spread socially, and it's not enough for just "some", or even "most" people to be educated for it to be stopped. I don't think Square are ignorant about this, but I'd like to see some confirmation that some measures are in place to counter threats like these.