Is this a phishing email?

Home / Scam emails by brand / DocuSign

D

Is this DocuSign email real or a scam?

What fake DocuSign emails look like, how to check a real one, and where to report it.

What the fake DocuSign emails say

“Please review and sign this document”

The button leads to a page that asks for your email password before showing anything.

An invoice sent through a real DocuSign account

Scammers open genuine accounts and send fake invoices with a phone number to call.

An attachment instead of a link

Real DocuSign requests do not carry the document as a zip or HTML attachment.

What one looks like

From: DocuSign <dse@docusign-esign-mail.com>

Completed: Please review your document

You have a new document to review and sign. Sign in with your email account to view it.

This is an illustration built from the common pattern, not a real message. Note the sender address: it contains the brand name but does not end in the company’s own domain.

How to tell a real DocuSign email

Genuine signature requests come from addresses ending in @docusign.net or @docusign.com and contain a security code.

A matching address alone is not proof, because sender addresses can be forged. The reliable check is your own account.

The safe way to check: Do not click the button. Go to docusign.com yourself, choose Access Documents and enter the security code from the email. A fake has no valid code.

Where to report it

Forward the email as an attachment to verify@docusign.com.

You can also report it in your mail app and to the FTC.

If you already clicked

Close the page. If you entered your password, change it on the real DocuSign website now, and anywhere else you used the same one. If you entered card details, call your bank. The step-by-step guide covers each case.

Not sure about the one in your inbox?

Paste it into the free check with the sender address, and you get a plain answer in a few seconds.