⚠️ IMPORTANT: Phishing Scam Targeting Our Clients
What's inside this post: Hide
ℹ️ This featured image was AI-generated to protect the privacy of anyone affected and to illustrate the concept of phishing emails. All phishing email example screenshots & pasted content within this post are real.
If you're reading this, you may have received a suspicious email claiming to be from me or my business, Launch the Damn Thing®.
Or, if you're a fellow designer, your clients might be getting similar emails pretending to be from you.
I'm writing this post to:
Warn my clients about ongoing phishing attempts
Help fellow designers protect their own clients
Create a central place to track updates and share information
What's happening in this scam?
Starting in late November 2025, for me, multiple clients began forwarding me suspicious emails that appeared to come from my business. These emails claimed their Squarespace websites needed urgent "compliance audits," "security reviews," or updates to meet new accessibility standards.
Here's the problem: I never sent those emails.
Since then, I've received reports from multiple clients about these phishing attempts, and the scammers have changed their tactics several times, using different email addresses, languages, and messaging strategies.
But this isn't just happening to me.
Squarespace has confirmed that scammers are impersonating legitimate web design professionals across their Circle partner program, targeting clients who have previously worked with designers. Squarespace's security team has investigated and found no evidence of a security breach affecting Squarespace or its partners. These scammers are likely just using bots to find publicly available information contact clients.
And it’s not just Squarespace users & designers being targeted.
For my awesome clients: how to spot a fake email
❌ It's NOT from me if:
The email address doesn't end in @launchthedamnthing.com — These scammers have used Gmail addresses like info.launchthedamnthing@gmail.com (note the Gmail domain)
The email asks you to reply "YES" to proceed — I would never ask you to respond this way for services.
It mentions urgent compliance deadlines or threats — Squarespace is not conducting mandatory audits that could suspend your website.
Sending an Upwork or Fiverr link – I don’t use freelancer platforms, so these & other platforms like them will never be part of our booking process.
It involves a phone call of any kind – I haven’t contacted my clients via phone in almost 10 years, and have no plans to start again.
It looks/sounds/feels like a form letter – Only in very rare circumstances do I send the same email to a mass group of clients & when I do, it won’t look like the examples shared below.
It's missing my identifiably charm & personality — If it doesn't sound like me, uses too few emojis/GIFs, or lacks exclamation points... it's probably not me! 😂
✅ It IS from me if:
The email comes from an official @launchthedamnthing.com address.
We've discussed the project via video call first — I almost always speak with clients via video before any money is exchanged, or you’ve booked the service yourself from emails to me, requesting help, or from my client portal.
It sounds like me — Hopefully you know my voice and style by now! 🤞🏻
Can scammers fake my email address?
Short answer: They can try, but your email provider will usually catch it.
While it's technically possible for scammers to make an email appear to come from my real @launchthedamnthing.com address, most email providers (Gmail, Outlook, etc.) have security measures that flag these fake emails.
If you receive an email that looks like it's from me:
Check for warning banners — Gmail and Outlook usually show warnings like "This message may not be from who it claims to be" if something's suspicious
Look closely at the sender — Click on my name/email to see the full details and any security warnings
Trust your gut — If something feels off or urgent, it probably is
Verify through another channel you’ve used in the past — Message me through the portal, DM me on social media, or email me directly to confirm before taking any action
The golden rule: If you receive ANY email from me requesting payment, urgent action, or asking you to reply "YES" to proceed—even if it looks legitimate—please reach out to me through a separate channel (message, DM, or an email you initiate) to verify before doing anything.
Your email provider is working to protect you, but a quick double-check never hurts! 💛
Examples of real phishing emails reported to me
The content from those screenshots is pasted below into this dropdown accordion:
-
From: Launch Damnthing <info.launchthedamnthing@gmail.com>
Date: Wed, Feb 11, 2026 at 11:36 AM
Subject: Urgent Update Squarespace EAA/AAA/AAT Compliance Required by 2026
Hello,
This is Launch the DamnThing we previously collaborated on your Squarespace website, and I'm reaching out to ensure your site stays compliant and secure.
Squarespace has recently begun conducting compliance reviews across all hosted websites. These reviews include checks on security configurations and license verifications. Sites that do not meet the updated standards risk restricted access or even temporary suspension.
Squarespace is aligning with the European Accessibility Act (EAA), American Accessibility Act (AAA), and Australian Accessibility Terms (AAT). These standards must be met by February 12, 2026, with existing content updated by June 20, 2026.
Squarespace may now require additional updates.To help you stay protected, I can perform a quick compliance audit to verify that your site meets all current requirements.
If you'd like me to proceed, simply reply "YES," and I'll start the audit right away.
Warm regards,
Launch the Damn Thing
Squarespace Partner | Website Security Specialist -
Inizio messaggio inoltrato (using Italian this time):
Da: Katelyn Dekle <hello.launchthedamnthing@gmail.com>
Data: 4 dicembre 2025 alle ore 23:53:30 CET
Oggetto: From Launch the damn thing: Important update for your Squarespace site
Hi,
This is Katelyn. We worked together on your Squarespace site. I want to help you stay ahead of a new platform check that now includes your robots.txt file.
Squarespace is reviewing every site for security settings, license validation, and robots.txt accuracy.
Sites that fail these checks can face restrictions or removal without notice.
Your current robots.txt file shows all paths blocked. This hurts your site performance because search engines cannot index your pages. Robots.txt guides crawlers, protects sensitive paths, and supports healthy traffic. When the file blocks everything, your visibility drops.
Your previous setup may no longer match the latest requirements. Squarespace also added new rules that affect how robots.txt should work.
I can run a fast robots.txt and security audit. This confirms your file is valid, your site is verified, and your settings match current standards. This reduces the chance of downtime and keeps your site accessible.
Reply YES and I will begin the audit.
Best,
Katelyn
Squarespace Partner | Website Security Specialist -
Inizio messaggio inoltrato (using Italian this time):
Da: Launch Damnthing <info.launchthedamnthing@gmail.com>
Data: 2 dicembre 2025 alle ore 02:37:01 CET
Oggetto: Re: Important: Review Needed to Keep Your Squarespace Site Secure
Hi,
i Just followed up about your squarespace site recent platform updates are affecting older sites, and I've seen cases where pages or features start breaking if updates aren't done in time.To prevent any issues, I recommend completing your site audit and updates before Dec 5. This keeps everything compliant, secure, and running smoothly with the latest squarespace standards.Would you like me to get started today so we can have everything ready before the deadline?
If you'd like me to proceed, simply reply "YES," and I'll start the audit right away.
Warm regards,
Launch the Damn Thing
Squarespace Partner | Website Security Specialist–––––
On Sun, Nov 30,2025 at 4:54 AM Launch Damnthing <info.launchthedamnthing@gmail.com> wrote:
Hello,
This is Launch the Damn Thing we previously collaborated on your Squarespace website, and I'm reaching out to ensure your site stays compliant and secure.
Squarespace has recently begun conducting compliance reviews across all hosted websites. These reviews include checks on security configurations and license verifications. Sites that do not meet the updated standards risk restricted access or even temporary suspension.
Since our last project, some settings may have changed, or Squarespace may now require additional updates. To help you stay protected, I can perform a quick compliance audit to verify that your site meets all current requirements.
If you'd like me to proceed, simply reply "YES," and I'll start the audit right away.
Warm regards,
Launch the Damn Thing
Squarespace Partner | Website Security Specialist -
From: Launch Damnthing <info.launchthedamnthing@gmail.com>
Date: Mon, Dec 1, 2025 at 8:40 PM
Subject: Re: Important: Review Needed to Keep Your Squarespace Site Secure
Hi,
i Just followed up about your squarespace site recent platform updates are affecting older sites, and I've seen cases where pages or features start breaking if updates aren't done in time.To prevent any issues, I recommend completing your site audit and updates before Dec 5. This keeps everything compliant, secure, and running smoothly with the latest squarespace standards.Would you like me to get started today so we can have everything ready before the deadline?
If you'd like me to proceed, simply reply "YES," and I'll start the audit right away.
Warm regards,
Launch the Damn Thing
Squarespace Partner | Website Security Specialist–––––
On Sun, Nov 30, 2025 at 4:53 AM Launch Damnthing <info.launchthedamnthing@gmail.com> wrote:
Hello,
This is Launch the Damn Thing we previously collaborated on your Squarespace website, and I'm reaching out to ensure your site stays compliant and secure.
Squarespace has recently begun conducting compliance reviews across all hosted websites. These reviews include checks on security configurations and license verifications. Sites that do not meet the updated standards risk restricted access or even temporary suspension.
Since our last project, some settings may have changed, or Squarespace may now require additional updates. To help you stay protected, I can perform a quick compliance audit to verify that your site meets all current requirements.
If you'd like me to proceed, simply reply "YES," and I'II start the audit right away.
Warm regards,
Launch the Damn Thing
Squarespace Partner | Website Security Specialist -
From: Launch Damnthing < info.launchthedamnthing@gmail.com>
Date: Sun, Nov 30, 2025 at 11:39 AM
Subject: Important: Review Needed to Keep Your Squarespace Site Secure
Hello,
This is Launch the Damn Thing we previously collaborated on your Squarespace website, and I'm reaching out to ensure your site stays compliant and secure.
Squarespace has recently begun conducting compliance reviews across all hosted websites. These reviews clude checks on security configurations and license verifications. Sites that do not meet the updated standards risk restricted access or even temporary suspension.
Since our last project, some settings may have changed, or Squarespace may now require additional updates. To help you stay protected, I can perform a quick compliance audit to verify that your site meets all current requirements.
If you'd like me to proceed, simply reply "YES," and I'II start the audit right away.
Warm regards,
Launch the Damn Thing
Squarespace Partner | Website Security Specialist
Email addresses used by scammers:
info.launchthedamnthing@gmail.com
hello.launchthedamnthing@gmail.com
Common subject lines:
"Urgent Update Squarespace EAA/AAA/AAT Compliance Required by 2026"
“Important: Review Needed to Keep Your Squarespace Site”
“From Launch the damn thing: Important update for your Squarespace site”
Common claims made:
"We previously collaborated on your Squarespace website"
"Squarespace has recently begun conducting compliance reviews"
"Sites that do not meet the updated standards risk restricted access or temporary suspension"
References to European Accessibility Act (EAA), American Accessibility Act (AAA), and Australian Accessibility Terms (AAT)
Deadlines like "February 12, 2026" or "June 20, 2026"
"Simply reply 'YES' and I'll start the audit right away"
Claims about being a "Squarespace Partner" or "Website Security Specialist"
What should you do if you receive one?
If you're my client:
Don't panic — Your website is fine. Nothing is wrong, and no action is required.
Don't reply, click links, or agree to any services — These are scams designed to steal money or access to your accounts
Report it as phishing/spam — Use your email provider's reporting feature:
For Gmail addresses: Report as phishing through Google
For other providers: Use your email client's spam/phishing report feature
Report it to Squarespace — Forward phishing emails to reportphishing@squarespace-security.com
Forward it to me — Send it to hi@launchthedamnthing.com so I can track patterns and add updates to this post
Delete it — Once reported, trash it
If you're unsure whether an email is legitimate:
Please reach out to me directly!
Send me a message in our client portal, DM on social media, a DM in my community if you’re a member, or forward the email to me. I'd much rather you double-check with me than fall for a scam. Even if you're not currently a client, please always feel free to verify!
Protect your account going forward:
While this scam does NOT involve a Squarespace breach, it's always a good time to review your security practices:
Use strong, unique passwords — Squarespace's password security tips
Enable two-factor authentication (2FA) — How to set up 2FA on Squarespace
Review security best practices — Squarespace's complete security guide
Learn to identify legitimate Squarespace emails — How to verify if an email is really from Squarespace
For my fellow designers: this could affect you too!
If you're a website designer reading this (especially if you work with Squarespace, but this scam is expanding to other platforms like Showit, etc), you may be targeted next.
What we know:
Squarespace confirmed no breach — Their security team investigated and found no evidence of platform or vendor breaches
Scammers are impersonating Circle partners — They're offering "critical website updates" for a fee and posing as designers who previously worked with the clients
Scammers are likely using public information — They're probably going through designer portfolios and reaching out to clients they find via basic Google searches
It's not just Squarespace anymore — Reports suggest Showit designers and other platform specialists are now being targeted too
A LOT of other designers (& our clients) have already been affected — You're not alone if this is happening to you
Squarespace is taking action — They're sending notifications to users with admin permissions, posting in their public forums, and discussing internal product changes to improve security
What you can do:
Warn your clients proactively — Don't wait until they get an email. Send a heads-up now.
Use my template — I've shared an email template below that you can adapt for your own clients
Document everything — Keep records of phishing attempts and report them to your platform's security team
Report to Squarespace — Forward any phishing emails to reportphishing@squarespace-security.com
Share this post — Help spread awareness in your designer communities
Report attempts in the UK to: reportfraud.police.uk
Monitor the official forums — Keep an eye on Squarespace’s Circle Forum thread announcements & updates:
this Squarespace's Circle Forum thread, Phishing email impersonating me
this official announcement thread in the forum: Update on ongoing scam affecting Circle Partner Clients
Email template for your clients
Feel free to copy, edit or adapt, and send this to your own clients. Let's protect each other!
Hi everyone!
I'm popping into your inbox with a quick but important heads-up.
This week, several web designers (including myself) have had clients receive phishing emails impersonating us. These messages pretend to be from [YOUR BUSINESS NAME] and claim your [PLATFORM] website needs a "compliance audit," "urgent update," or "security review." Even if the scammer's wording doesn't perfectly match the kind of work we did together, I want you to know what's going on.
📣 I want to be crystal clear:
Those emails are not from me. They're scams, spam, or phishing attempts.
They're currently sending from Gmail addresses or other fake domains that I don't own or manage, and the senders are not associated with my business in any way.
If the email feels off or doesn't sound like me... it's definitely not from me!
[PLATFORM] is already aware of this impersonation issue — several designers have had their clients contacted with emails like these. [Platform]'s security team has investigated and confirmed that there is no evidence of any breach on their platform or with any third-party vendors or partners. These scammers are likely just going through portfolios and reaching out to whoever they can find online via public information.
✅ What you should do if you get an email like this:
Please report the sender's email address as phishing/spam inside your Gmail/Outlook/etc.
Please ignore and delete any email claiming to be from me that is not sent from an address ending in @[YOURDOMAIN].com
Do not reply, click links, or agree to any audits/fees/updates
Forward it to me at [YOUR EMAIL] so I can track and report it
💬 Those scam emails typically claim things like:
I "worked on your website previously" (true for many of you, which is why the scammer is using that angle)
[Platform] is doing "mandatory compliance reviews" (they are not)
Your site could lose access unless you respond (you will not)
You should reply "YES" so I can "start the audit" (I would never do this)
⛔️ None of that is real or legitimate.
[Platform] does not run audits like that, and I don't offer surprise compliance checks. If your site ever actually needs updates, I would contact you directly using my official email address: [YOUR EMAIL] . [Add your own communication preferences here.]
🛡️ You're safe — no action is needed.
Nothing is wrong with your website and nothing is required from you. This is someone trying to sound technical and urgent just to scare people into responding.
If you ever receive something suspicious (or just… weird), please feel free to forward it to me anytime. Better safe than sorry, and I'd much rather confirm something is fake than have you second-guess it!
Thanks so much for taking a moment to read this — and for being one of the people I enjoy hearing from in my inbox! 💛
[YOUR NAME]
🔄 Updates & new reports
I'll be updating this post as new phishing attempts are reported. If you receive a suspicious email you want to share, please:
Comment below with details (you can share the sender's email address, subject line, or general content, but PLEASE do not include the recipient’s email address)
Email or DM me directly at hi@launchthedamnthing.com
Report it to Squarespace at reportphishing@squarespace-security.com (or other platforms, where applicable)
Report it to your email provider as phishing/spam
Timeline of my own reports:
October 10, 2025 — Squarespace sent official announcement to Circle partners about the scam
November 30, 2025 — First report received from one of my clients
Early December 2025 — Three more clients reported four separate emails & scammers began using client’s language in subject lines for my international clients
December 2025 — Squarespace sent broader phishing warning to all customers
February 11, 2026 — New attempt using references to Acts/laws in new scare tactics
🔗 Official Resources & Links
Report phishing:
Squarespace Security Team: reportphishing@squarespace-security.com
Report Gmail phishing: Google's phishing report guide
Squarespace official announcements:
Circle Forum Discussion: Phishing email impersonating Circle partners
Official Squarespace Update: Update on ongoing scam affecting Circle partner clients
Squarespace security resources:
Security Best Practices: Squarespace security tips
Strong Passwords Guide: Password security
Two-Factor Authentication: How to enable 2FA
Verify Squarespace Emails: Is this email really from Squarespace?
💬 Questions or concerns?
If you have ANY questions about whether an email is legitimate, please don't hesitate to reach out. I'm here to help, and I'd rather answer a hundred "Is this real?" messages than have one person fall for a scam.
💬 Comments & reports
Have you received a phishing email?
Share details in a comment below to help others spot the scam!
