@Jinx - I recommend you report the issue to DocuSign support immediately. They can help you investigate how the document was completed and if your signature was used fraudulently.  Also, if you can change your DocuSign account password to a strong, unique one to prevent unauthorized access and enable 2FA for an additional layer of security on your account.

Hello,

I got an email from DocuSign with the status as completed. I did not click the email because the name is unfamiliar. The email has since disappeared. So, I checked my DocuSign account. The document is in my account as completed. 

I attempted to view the documents; however, when I click the link it says, “Unable to access the envelope.”

There is a download option, but I’m afraid to download anything because I don’t know the sender. My account is secure with a strong password and two-step authorization.

How does this happen? How can I view the documents in the envelope without downloading attached files?

Hi @C_Wil,

Thank you for reaching out to the Docusign Community. 

We appreciate you making us aware of bad actors using the DocuSign product inappropriately. Our Security teams have created an Incident Reporting guide on our Trust site.

Please click the link below for up-to-date information on how to let Security know about   phishing or fraud attempts: https://www.docusign.com/trust/security/incident-reporting  

There is also the “Combating Phishing: A Proactive Approach” whitepaper available here: https://www.docusign.com/sites/default/files/docusign_combating_phishing_whitepaper.pdf

In the meantime, I would recommend updating your email and Docusign credentials to prevent any future inconveniences.

Feel free to let us know if you need further assistance with this. 

Best regards,

Alejandro R. | Docusign Community Moderator  

Please click "Best Answer" below if you find my reply to be a valid solution to your issue!

I came here looking for the same answer. I did not download either because I don’t know what kind of files they are or if there may be viruses or trojans attached. According to Alejandro Ramos above, on the linked page to “Report Abuse”, you need to “Electronic Record and Signature Disclosure page, select OTHER ACTIONS > Report Abuse”, but when I go to the Envelope, I do not see that option.

In this envelope, it says I have already signed it, but I did not.

I have already securerd my account by adding 2FA and authenticator app.

What I want to know is how do I report abuse when I do not see the options as described in the Report Abuse feature at this link https://support.docusign.com/s/document-item?language=en_US&bundleId=yca1573855023892&topicId=uec1690221505200.html&_LANG=enus

Hi @stellamoeller,

Thank you for making me aware of the situation.

The reason why the Other Actions menu is not present in this scenario is that this envelope was already completed. However, there are 2 more alternatives to the Report Abuse option included in the Other Actions menu, one in the envelope email notification, and as a last option you could file the report manually in the i-Sight tool. I would recommend the last option (so you don’t have to locate the email notification), you can report the envelope, here:

https://docusign.i-sight.com/portal

Please don't hesitate to let me know if you have any other questions or concerns and I will address them as soon as possible. 

Best regards,

Alejandro R. | Docusign Community Moderator  

Please click "Best Answer" below if you find my reply to be a valid solution to your issue!