Thank you for the warning and hopefully Square will be able to take action.
But just as a warning, you should not reply to scam emails. In the off chance it is deliverable you will add yourself to their database of active email accounts. This will lead to further scam emails landing in your inbox, sometimes this takes a little time to happen. You may also be interpreted by the mail server of the business that you might reply to as being a spam bot and get yourself blacklisted on a number of Spam protection sites and find you have access denied to sites that use the "spam police" to filter their traffic. The number of sites that do filtering is increasing.
For some spam blacklist providers see:
To use any of these services yourself they do have a cost but the relative peace of blocked spam may be entirely worth the outlay.