DocuSign Becomes Latest Target in Phishing Scam

  
     
November 03, 2017

Earlier this week, a local North Alabama resident received an email claiming to be from DocuSign stating that she had new files waiting to be signed in her account. The scam email is displayed below.  How can you tell that this is a fake email? First, it is vague. It does not state who specifically the email is from or what documents need to be signed but only leads the consumer to a button that reads “View New File Now”. Clicking the link will either download malicious code on your computer, or take you to a website that will try to steal your personally identifiable information from you.  Best practice: access your documents directly from www.docusign.com.

DocuSign is a company that provides electronic signature technology and digital transaction management services for facilitating electronic exchanges of contracts and signed documents. Their goal is to make it simpler for businesses to receive signatures on time sensitive documents without having to meet with their client in person, thus speeding up the signing process significantly. 

DocuSign Scam Email

DocuSign offers the following tips to combat phishing attempts:

  • “Look for the unique security code at the bottom of the notification email. All DocuSign envelopes include a unique security code. If you do not see this code DO NOT click on links or open attachments within the email. 
  • The term "https" should always precede any website address where you enter personal information. The "s" stands for secure. If you don't see "https," you're not in a secure web session, and you should not enter personal data.”
·         Fake emails may include a forged email address in the "From" field. This field is easily altered. If you don’t recognize the sender of a DocuSign envelope, contact the sender to verify the authenticity of the email.
·         While no one is perfect, fake emails often contain misspellings, incorrect grammar, missing words, and gaps in logic. Mistakes like this help fraudsters avoid spam filters.

For more tips from DocuSign, please visit Fraudulent Email & Websites

Source: BBB of North Alabama and DocuSign

To report a scam, go to the BBB Scam Tracker. To find trustworthy businesses, go to https://www.bbb.org/northern-alabama