Batmail

Guide: Scam emails

A Cash App email that asks you to send a fee to claim a payment is fake, and Batmail's checker reads it for you.

Published: 9 November 2026

Last updated: 9 November 2026

Cash App says its Support will never ask for your sign-in code or PIN by email, and that there is no such thing as “claiming” a payment by sending money to Cash App. So an email that asks for a fee and a code to release a payment is fake. Paste it into Batmail’s checker below, or use the signs on this page.

The checker reads one suspicious email. Batmail reads your whole inbox overnight.

Paste the Cash App email into the checker and it reads it for the signs below.

The checker reads the sender address, the wording, any link address you paste with the email and what the email asks you to do. It gives a verdict, a risk score from 0 to 100, the exact wording behind each red flag and what to do next. It is free and needs no signup.

Batmail phishing email checker

Include the sender address and subject if you have them. Never paste a password or a one-time code, and do not open attachments to copy them.

A fake Cash App email says a payment is waiting, asks for a fee and wants your sign-in code.

Cash App’s pages on scams describe the claim-a-payment trick, the fee that comes first and the code scammers want you to read back. The email below is invented, and each number is one of the signs.

From Cash App Help: Avoiding common scams with Cash App, read 9 November 2026.

From Cash App Help: Protecting you from social engineering attacks, read 9 November 2026.

From Cash App Help: Keep your account safe on Cash App, read 9 November 2026.

Read the sender's address from the right, because the last two parts say who owns it.

Anyone can put “Cash App” in front of an address. The part to read is the domain, after the @ in a sender or after the https:// in a link. Read it from the right: the last two parts name the owner, and everything in front of them is only a label the owner chose. Cash App says verified emails will always come from @cash.app, @square.com, @surveys.squareup.com or @squareup.com. If you have an open brokerage account you may also get emails from support@drivewealth.com.

From Cash App Help: Protecting you from social engineering attacks, read 9 November 2026.

From Cash App Help: Keep your account safe on Cash App, read 9 November 2026.

Cash App says it will never ask you to send a payment, and never request funds from a customer.

Cash App’s help pages give short rules for what its Support and its employees will and will not do. A fake payment claim breaks at least one of them.

Five questions to ask of a message that says it is from Cash App, what Cash App says about each, and what a fake does.
QuestionWhat Cash App saysWhat a fake payment claim does
Will Cash App ask for my sign-in code or PIN by email?What Cash App saysCash App says Support will never ask for your sign-in code, PIN, Social Security number or Individual Taxpayer Identification Number via email.What a fake payment claim doesAsks you to reply with the code it emails you.
Will Cash App ask me to send money?What Cash App saysCash App says it will never ask you to send a payment or make a purchase, and that its employees will never ask you to send money or bitcoin.What a fake payment claim doesAsks for a $25 clearance fee.
Can I claim a payment by sending money?What Cash App saysCash App says there is no such thing as "claiming" a payment by sending money to Cash App, and that it will never request funds from a customer for any reason.What a fake payment claim doesSays $750 is waiting if you pay first.
Will Cash App ask me to install something or run a test?What Cash App saysCash App says it will never ask you to download remote access apps or complete test transactions.What a fake payment claim doesAsks you to download a tool or send a test payment.
Which links does a real email have?What Cash App saysCash App says emails from the Cash Team or Square only contain links to square.com, squareup.com, cash.app or cash.me.What a fake payment claim doesA button that says cash.app and opens another site.

From Cash App Help: Keep your account safe on Cash App, read 9 November 2026.

From Cash App Help: Protecting you from social engineering attacks, read 9 November 2026.

From Cash App Help: Avoiding common scams with Cash App, read 9 November 2026.

Cash App says to close the email and contact Support through the app or at cash.app/help.

Cash App says that if you are ever unsure about a communication that claims to be from it, the safest course is to close the text or email and contact it directly. It gives one phone number for Support.

From Cash App Help: Protecting you from social engineering attacks, read 9 November 2026.

From Cash App Help: Keep your account safe on Cash App, read 9 November 2026.

Five steps tell you whether a Cash App email is real without clicking anything.

  1. Leave the button and every link alone. Cash App says an email with links to websites other than square.com, squareup.com, cash.app or cash.me was not sent by Square.
  2. Read the sender’s actual address from the right, as in the picture above. Cash App says a verified email comes from @cash.app, @square.com, @surveys.squareup.com or @squareup.com.
  3. Do not send a fee, a code or a PIN. Cash App says Support will never ask for your sign-in code or PIN by email, and will never ask you to send a payment. Open the app yourself to check your balance. The FTC says to contact a company using a phone number or website you know is real, not the information in the email.
  4. Paste the email into the checker at the top of this page for a second read.
  5. Report it to Cash App Support through the app or at cash.app/help. The FTC says to forward a phishing email to reportphishing@apwg.org. In Gmail you can also choose More next to Reply, then Report phishing.

Steps from Cash App Help: Protecting you from social engineering attacks, read 9 November 2026.

Steps from FTC Consumer Advice: How To Recognize and Avoid Phishing Scams, read 9 November 2026.

Steps from Gmail Help: Avoid & report phishing emails, read 9 November 2026.

If you clicked or sent money, Cash App says to stop all contact and tell the company you paid through.

Cash App’s article on being scammed says to stop all communication with the scammer and block them, and to contact the company you used to send money, because the sooner you report, the better the odds of recovering anything. It says a payment you authorized through a payment app is usually final once it goes through, so speed matters. For a sign-in code you did not ask for, its help page says someone may be trying to access your account.

From Cash App: What to do if you get scammed, read 9 November 2026.

From Cash App Help: Keep your account safe on Cash App, read 9 November 2026.

From FTC Consumer Advice: What To Do if You Were Scammed, read 9 November 2026.

From FTC Consumer Advice: How To Recognize and Avoid Phishing Scams, read 9 November 2026.

The same checks work on other payment apps.

A payment message can borrow the name of any app. The guide to fake Venmo emails covers a request for your verification code, the guide to fake Zelle emails covers an email that says to send money to upgrade your account, and the guide to fake PayPal emails covers an invoice for something you never bought. The holiday scam emails guide puts the kinds side by side.

These are the questions people ask next.

How can I tell a real Cash App email from a fake one?

Cash App says verified emails will always come from a @cash.app, @square.com, @surveys.squareup.com or @squareup.com address. If you have an open brokerage account you may also get emails from support@drivewealth.com. It says emails from the Cash Team or Square only contain links to square.com, squareup.com, cash.app or cash.me, and that an email with links to other websites was not sent by Square. It also says to check the actual phone numbers and email addresses of what you receive, because phishing scams often use spoofed email headers.

What does Cash App say it will never ask for?

Cash App says Support will never ask for your sign-in code, PIN, Social Security number or Individual Taxpayer Identification Number by email. It says it will also never ask you to send a payment, make a purchase, download remote access apps or complete test transactions. Its employees will never ask you to send money or bitcoin, or to share full card numbers or bank account numbers, and it will never request funds from a customer for any reason.

What is the claim-a-payment scam?

Cash App says scammers sometimes ask you to "claim" a payment you "deserve" by sending money to them, and that these attempts are always scams. It says never to send money to a person promising a larger payment in return. It also describes scammers who send a payment "by accident" and ask for it back: it says to refund the payment to the sender rather than create a new payment.

What if I get a sign-in code by email that I did not ask for?

Cash App says a one-time login code is sent each time you sign in, and that you should never share these codes with anyone. If you receive an unsolicited sign-in code by email, it says someone may be trying to access your account, and recommends securing the email account linked to your Cash App account by updating its password and enabling two-factor authentication.

Where do I report a fake Cash App email?

Cash App says to contact Support through the app or at cash.app/help to report a suspicious social media message, email, text message or phone call. The Cash App pages we read name no address for forwarding an email. The FTC says to forward a phishing email to the Anti-Phishing Working Group at reportphishing@apwg.org and to report it at ReportFraud.ftc.gov. In Gmail you can also choose More next to Reply, then Report phishing.

What if I clicked or sent money?

Cash App's article on being scammed says to stop all contact with the scammer and block them, and to contact the company you used to send money, because the sooner you report the better the odds of recovering anything. It says to change your passwords, starting with the account that was compromised, to freeze your credit if you shared personal details such as your Social Security number, and to report the scam at ReportFraud.ftc.gov. It also says a payment you authorized through a payment app is usually final once it goes through.

Every step on this page comes from these official pages.

A rule in plain English can send emails like this to spam while you sleep.

Batmail reads every email that lands overnight and runs the rules you wrote in plain English. A rule such as “looks like a scam” can send a message to spam, and Batmail writes down the reason for each action. Scout is free on one inbox, no card required.