Fake DocuSign email scam
Scammers send fake e-signature emails with documents like invoices or contracts. To view them, you are asked to log in with your email and password.
How this scam works
The fake login page steals your email password. Some versions lead to fake invoices with payment instructions.
Common versions of the message
- An unexpected document to sign
- A login with your email password
- A same-day expiration
What the message looks like
Email from DocuSign <dse@docusign-review.top>: Completed: Please review and sign your document
You have received a document to review and sign: Payment_Invoice_8823.pdf. To view it, log in with your email and password. The document expires today: http://docusign-review.top/view
Fictional example based on common, publicly reported scam patterns.
The red flags
- 1
Unexpected document: “Payment_Invoice_8823.pdf”
Not something you were waiting for
A document you were not expecting is the first warning sign.
- 2
Asks for your password: “log in with your email and password”
DocuSign does not need your email password
Real e-signature services do not need your email password.
- 3
Rushed deadline: “expires today”
Pressure so you click before checking
The deadline is pressure.
- 4
Not DocuSign: “docusign-review.top”
Real links end in docusign.net or docusign.com
Real DocuSign links end in docusign.net or docusign.com.
What to do
- Do not click the link if you were not expecting a document.
- Contact the sender using details you already have.
- Report the email as phishing.
If you already replied, clicked, or paid
- Change your email password and turn on two-step verification.
- Check for email forwarding rules you did not create.
- If you paid an invoice, call your bank.
Got a message like this?
Paste it into TrustShield's free checker to see the warning signs in seconds. No sign-up needed to try it.