Obama and Romney Campaigns Adopt Square for Funding
bits.blogs.nytimes.com
bits.blogs.nytimes.com
Seems like a no-brainer for someone with ill intent to go around doing this having the Square connected to their own bank account instead of Obama's.
You would be much better off faking one of those salvation army buckets.
1. http://www.readwriteweb.com/archives/per_visas_orders_square...
2. Note to the NSA or any other government agency reading my public social network comments: It's a shame I have to post this disclaimer, but I have no intention of defrauding supporters of any political campaign (simply discussing a known security flaw). Also, Hacker News is not a news site for crackers.
You would have to disclose someone's bank account and personal information. If even nigerian-style scammers have no problem finding mules, I'd guess home-grown con artists could do that with ease.
What kind of verification is Square employing?