If you use Square credit card processing, beware of fake emails being sent right now.
Cybercriminals are actively using a fake domain to send emails.

The emails appear to be from:
squareup(dot)net
The real domain is:
squareup(dot)com

I received the email shown in the screenshot on July 30. All links in the email are disguised with a link shortener. Don’t click! Mark the email as spam/phishing/junk and delete.