I had a phishing attempt with my account so went to reset my password. Well the email wasn't getting to me, so I had to contact customer support with a ticket. The "Square Customer Success" member, Osvin H, gave me access to an account I DON'T OWN. Similar registration email address, but it is not mine (*******@gmail.com is not my email address).
Beware, square has incompetent staff that are a security breach waiting to happen. It would not surprise me to find out some of their staff are the ones benefiting from the phishing attempts.
I have attached photos of myself logged into Kenneth's account that Square has given me access to. They did email the correct email (email@example.com) for the support ticket so there is no way there should be this mix up.