Hello all,
We've gotten a few reports of fraudulent emails that purport to be from Docusign (a company that is often used for secure delivery of emails and digital signature handling). Impersonating these kinds of emails has become more common in the past month (at least in our investigations).
How do you know if you receive an email like this whether it is fraudulent or not?
- Who is the company or organization that the email says it is from? Is it a company or organization that you deal with? If not - then it is almost certainly fraudulent.
- Does it even SAY where it comes from?
- In the screenshot below it just says it is from "Microsoft" but the Microsoft warning messages says it is from communications@jmhtechnology.com (A company I've never heard of, and the person who reported it to me said they didn't know if it either).
- It later says "E-Signature sent you a document". That doesn't tell you anything about the company or organization.
If you don't know the sender and don't expect a message like this from them, ignore it (or report it). If you do know the sender but aren't expecting something like this from them, reach out to them (via a phone number or email you already have - not by replying to the email) and ask them for more information.
