Conversation Starter

Solved

Phishing Emails from Docusign.net Domain

Forum|Forum|2 years ago
May 7, 2024
20 replies
87447 views

I'm suddenly getting 3-5 phishing emails a week from the docusign.net domain and none of the standard reporting email addresses like abuse@ or admin@ work. They reject my email, and I can’t find any reporting information on their FAQ page. I guess I'm left with the choice of blocking the domain? Why do they make is difficult to contact support or report phishing? Keeping customers at arms length is bad practice. Edit: Spam@docusign.com. What a waste of my time finding that. Edit 2: Spam@… blocked my email as spam. This is BS. Going to block the domain on the server.

Best answer by nathaly.monge

Hello @cmac59 and @LarryAZ ,

Welcome to the Docusign Community and thank you for posting your concerns!

I’m sorry to hear that you are getting these emails, I understand you are suspicious of them as they can be fraudulent emails.

We appreciate you making us aware of bad actors using the DocuSign product inappropriately. Our Security teams have created an Incident Reporting guide on our Trust site. We recommend you do not click on any links from emails that are looking suspicious.

Please click the link below for up-to-date information on how to let Security know about phishing or fraud attempts: https://www.docusign.com/trust/security/incident-reporting

There is also the “Combating Phishing: A Proactive Approach” whitepaper available here: https://www.docusign.com/sites/default/files/docusign_combating_phishing_whitepaper.pdf

Let us know if you need further assistance with this.

Best regards,

Nathaly | Docusign Community Moderator
"Select as Best" below if you find the answer a valid solution to your issue!

Alexandre.Augusto

Docusign Employee

Hello, @LarryAZ

You are welcome to the Docusign Community!

I'm sorry you're experiencing this issue.

Let me recommend two practical articles to help combat and protect against email Phishing:

https://support.docusign.com/s/articles/What-Should-I-Do-if-I-Receive-a-Suspicious-Email?language=en_US&rsc_301
Combating Phishing white paper:
chrome-extension://efaidnbmnnnibpcajpcglclefindmkaj/https://www.docusign.com/sites/default/files/docusign_combating_phishing_whitepaper.pdf

I hope that helps!

Best,

Alexandre

Your feedback is very appreciated! You can give a Like and mark this answer as the "Best Answer" for your issue. DocuSign University http://dsucustomers.docusign.com

L

LarryAZ

Author

Conversation Starter

Not much. I’ve already been to the 1st link and my email was rejected as spam. 2d, no. I have my own mail server and good spam filtering. DocuSign either has a problem with phishers using their service, or well spoofed mail headers in addition to making it cumbersome to report.

C

cmac59

New Voice

I’ve been getting those as well, and like you, I’m managing the issue. Just got this one today:

from dse AT eumail DOT docusign DOT net <=== Dead giveaway that it’s a scam

Embedded link in the button

https://eu DOT docusign DOT net/Signing/EmailStart.aspx?a=6ad21c0b-3476-4bf2-a973-fd59e76ccad8&acct=af1c29b3-e43c-4f33-a8c1-9a84e59e528f&er=a9b23abe-d970-4430-8305-6616fd119e0b

Event the “Report this email” link points to the Dot net domain.

Not really sure where to report fraud at DocuSign though.

N

nathaly.monge

Answer

Docusign Employee

Hello @cmac59 and @LarryAZ ,

Welcome to the Docusign Community and thank you for posting your concerns!

I’m sorry to hear that you are getting these emails, I understand you are suspicious of them as they can be fraudulent emails.

We appreciate you making us aware of bad actors using the DocuSign product inappropriately. Our Security teams have created an Incident Reporting guide on our Trust site. We recommend you do not click on any links from emails that are looking suspicious.

Please click the link below for up-to-date information on how to let Security know about phishing or fraud attempts: https://www.docusign.com/trust/security/incident-reporting

There is also the “Combating Phishing: A Proactive Approach” whitepaper available here: https://www.docusign.com/sites/default/files/docusign_combating_phishing_whitepaper.pdf

Let us know if you need further assistance with this.

Best regards,

Nathaly | Docusign Community Moderator
"Select as Best" below if you find the answer a valid solution to your issue!

V

vijayk

New Voice

Link to the white paper is broken, the working link is as below
https://assets.ctfassets.net/0jnmtsdzg6p5/6SvJ0lqpwUSX50UfX8ek1l/3385810f09fc854384787073bbcdacf4/Combat-Phishing_24-08_whitepaper_EN-US.pdf

U

userPNAJ

New Voice

I have exactly the same problem today. Is docusign.net legit or not? Can someone from Docusign give a clear answer?

M

mr1

Respected Advisor

@userPNAJ

You may need to expand a bit more on your question - and maybe create a new post rather than adding onto the end of a ‘solved’ post.

What is the problem you’re having? Did you get an email to sign something? If you have a DocuSign account, you can sign into your account and see if there are any documents waiting (rather than follow a suspicious link). Or you could contact the sender and ask if have sent you something.

good luck

mr1

MR1

U

userPNAJ

New Voice

@userPNAJ

You may need to expand a bit more on your question - and maybe create a new post rather than adding onto the end of a ‘solved’ post.

What is the problem you’re having? Did you get an email to sign something? If you have a DocuSign account, you can sign into your account and see if there are any documents waiting (rather than follow a suspicious link). Or you could contact the sender and ask if have sent you something.

good luck

mr1

On 2/18 I was asked to use DocuSign to sign a document with my real estate agent. One day after that on 2/19, I received three emails from domain docusign.net and title as “PayPal Customer Care via DocuSign” . These email claim that my PayPal account was used to purchase crypto currencies from Coinbase and clearly these are scams. I don’t understand how this can happen just after my using DocuSign and it raises my concern about security of your service. The most confusing part is that the sender’s domain is docusign.net.

J

Jogill

Newcomer

I had the same exact thing happen to me. I got an email yesterday about unauthorized activity on my pay pal account. I don’t use pay pal anymore. The email address I was to respond to is dse_NA4@docusign.net . I obviously I didn’t click the link but the the domain name is concerning

A

androidua

Newcomer

got a second one this week

Show more replies

Sign up

You can login or register as either a Docusign customer or developer. If you don’t already have a Docusign customer or developer account, you can create one for free when registering.

Docusign Community

You can login or register as either a Docusign customer or developer. If you don’t already have a Docusign customer or developer account, you can create one for free when registering.