When a familiar name appears in your inbox, it's easy to let your guard down.  

A document that looks like it came from DocuSign. A payment request from a vendor. A signature request from a trusted partner. These are everyday business tasks that many teams handle without a second thought.  

Unfortunately, cybercriminals know this – and they are using trusted platforms like DocuSign to make phishing attacks more convincing.  

DocuSign recently warned users about an increase in phishing attempts where attackers impersonate the brand to trick recipients into clicking malicious links, sharing login credentials, or sending fraudulent payments.  

These emails often look legitimate at first glance, but their goal is simple: gain access to your accounts, your data, or your money.

How the DocuSign Phishing Scam Works

Cybercriminals are becoming more sophisticated in how they build these attacks. Instead of obvious spam messages filled with mistakes, many phishing emails now mimic the tools and workflows businesses use every day.

A fraudulent DocuSign email may appear to be:

• A request to review and sign an important document
• An invoice or payment confirmation
• A subscription renewal notice
• A message requiring immediate action

Some scams include links to fake DocuSign login pages designed to steal usernames and passwords. Others include QR codes that redirect users to malicious websites. In some cases, attackers even provide a phone number and attempt to convince victims to complete a fraudulent payment over the phone.

The message looks real. The urgency feels real. But the request is fake.

How to Spot a DocuSign Email Scam

Before clicking a link or opening any attachment, take a moment to look for these warning signs:

1. Check Sender's Email Address: Legitimate DocuSign communications typically come from official DocuSign domains, such as @docusign.com or @docusign.net. Be cautious of addresses that look similar, but are slightly altered.
   ‍
2. Ask Yourself: Was I Expecting This? Did you recently request a signature? Are you expecting an invoice, subscription notice, or signature request from this sender? If the answer is no, take a closer look before interacting.
   ‍
3. Watch for Urgency or Pressure: Phishing emails often create a sense of urgency or panic with phrases such as:
   • "Your account will be suspended"
   • "Payment is overdue"
   • "Immediate action required"
4. Hover Before You Click: Before clicking a link, hover over it to see where it actually leads. If the URL does not point to a legitimate DocuSign website, do not enter any information. Be especially cautious of unexpected QR codes, which can send you directly to fraudulent websites.

What To Do If You Receive a Suspicious DocuSign Email

If something feels off, do not click the link, scan the QR code, or call any phone number included in the message.

Instead:

1. Visit DocuSign directly by typing the website address into your browswer.
2. Use the security code provided in the email to verify the document if applicable.
3. Confirm the request with the sender using a trusted phone number or communication method.
4. Report suspicious emails to your IT department or forward them to DocuSign at verify@docusign.com for review.

The Best Defense is a Layered One

Cyber threats continue to evolve, and so should your defenses. Modern cyberattacks continue to rely on both technical exploits and social engineering, making layered security more important than ever (Verizon 2025 Data Breach Investigation Report).

Cybersecurity starts with informed employees. That's why Lightspeed Solutions offers Security Awareness Training to help your team recognize phishing attempts, identify suspicious emails, and build safer habits.

But even the most well-trained employees can make a mistake, which is why education should be paired with technology. That's where our Managed Email Security steps in to detect and block phishing attempts, malicious links, harmful attachments, and brand impersonation attacks before they reach your team.

‍

Together, Security Awareness Training and Managed Email Security create a layered defense that helps protect your business from today's evolving cyber threats.

Ready to strengthen your organization's defenses? Contact Lightspeed Solutions to learn how our layered cybersecurity solutions can help keep your team, and your business, safe.

‍

‍

‍