Scammers copy file-sharing and e-signature notifications to send you to fake sign-in pages. How to check.
“A document has been shared with you.” “Please review and sign.” These notifications are so common that scammers copy them to send people to fake sign-in pages that steal passwords. Docusign and other services regularly warn about spoofed notifications.
Signs to look for
- A document you weren't expecting, from someone you don't usually work with
- Generic names such as “Invoice”, “Payment advice” or “Updated contract”
- The link asks you to sign in to see the file, sometimes after a blurred preview
- The sign-in page's web address isn't the real one
What to do
- Check with the sender another way, using contact details you already have.
- Go to the service yourself. Real shared files also appear in OneDrive under Shared. A real Docusign document can be opened at docusign.com using the security code in the email.
- Report it in Outlook using Report > Report phishing.
Entered your password? Call us on 707-755-8000 straight away.
