Home / Scam emails by brand / DocuSign
Is this DocuSign email real or a scam?
What fake DocuSign emails look like, how to check a real one, and where to report it.
What the fake DocuSign emails say
“Please review and sign this document”
The button leads to a page that asks for your email password before showing anything.
An invoice sent through a real DocuSign account
Scammers open genuine accounts and send fake invoices with a phone number to call.
An attachment instead of a link
Real DocuSign requests do not carry the document as a zip or HTML attachment.
What one looks like
From: DocuSign <[email protected]>
Completed: Please review your document
You have a new document to review and sign. Sign in with your email account to view it.
This is an illustration built from the common pattern, not a real message. Note the sender address: it contains the brand name but does not end in the company’s own domain.
How to tell a real DocuSign email
Genuine signature requests come from addresses ending in @docusign.net or @docusign.com and contain a security code.
A matching address alone is not proof, because sender addresses can be forged. The reliable check is your own account.
The safe way to check: Do not click the button. Go to docusign.com yourself, choose Access Documents and enter the security code from the email. A fake has no valid code.
Where to report it
Forward the email as an attachment to [email protected].
You can also report it in your mail app and to the FTC.
If you already clicked
Close the page. If you entered your password, change it on the real DocuSign website now, and anywhere else you used the same one. If you entered card details, call your bank. The step-by-step guide covers each case.
Not sure about the one in your inbox?
Paste it into the free check with the sender address, and you get a plain answer in a few seconds.