🚨 Cyber Protect Warning: Fraudsters Impersonating DocuSign

🚨 Cyber Protect Warning: Fraudsters Impersonating DocuSign

Cyber Protect have recently become aware of phishing emails in circulation claiming to be from DocuSign.

What is DocuSign?

DocuSign is a legitimate and widely used online service that allows people and organisations to securely sign documents electronically. It is used by businesses, solicitors, councils, banks, police forces and many other organisations worldwide.

⚠️ How does the scam work?

Criminals may send emails that appear to come from DocuSign claiming you need to:

Sign a contract or agreement.

Review a property or tenancy document.

Check an invoice or payment request.

Access a shared document.

Verify account information.

The email will often contain a button or link inviting you to view the document.

If clicked, victims may be directed to:

A fake Microsoft 365, Google or other login page designed to steal passwords.

A website that collects personal information.

A malicious file download.

A payment scam requesting bank or card details.

🚨 Warning signs

Be cautious if:

You were not expecting the document.

The sender's email address looks unusual or does not match the organisation.

The message creates urgency or pressure.

The greeting is generic rather than using your name.

Hovering over links shows a website address that is not connected to DocuSign or the organisation concerned.

The document relates to something you know nothing about.

✅What should you do?

If you receive a suspicious DocuSign email:

Do not click links or open attachments.

Contact the organisation yourself using contact details you thoroughly trust, not those provided in the email.

Report the email as phishing or spam.

Forward the email to report@phishing.gov.uk.

Delete the email once reported.

If you entered your password in any fields, change it immediately.

Ensure that you have enabled Two-Step Verification (2SV) / Multi-Factor Authentication (MFA) on all your on-line accounts (if available).

✅Remember

DocuSign itself is a legitimate service. However, criminals often impersonate trusted brands to make their messages appear genuine.

If you are not expecting a document, stop and check, then check again, before taking any action.

✅Think ABC: Assume nothing. Believe nothing. Check everything

✅If you are the victim of Fraud or Cybercrime

🌐 Report online here: UK's Home for Reporting Cyber Crime & Fraud - Report Fraud

📞 Or call: 0300 123 2040

📞 To quickly contact your bank dial 159

Please feel free to share this message.

Reply to this message

Message Sent By
Mick Harrison
(Devon & Cornwall Police, Cyber Protect Officer, Devon & Cornwall)