Threat actors, or cyberattackers, can send phishing emails that appear to come from trusted e‑signature platforms, requesting that you review and/or sign a document. You may receive messages that appear to be from a legitimate service such as DocuSign or Adobe Sign.
These emails are often vague and contain little detail, but create a sense of urgency. To appear convincing, they may include company logos, branding, and a button prompting you to “Review Document” or “Sign Now.”
What Happens If You Click?
If you click the link or button, you may be directed to:
- A phishing website designed to look like a real e‑signature platform
- A fake login page asking for your email and password
If login credentials are entered, attackers can use that information to:
- Gain access to your email and accounts
- Spread additional phishing emails to others
- Access sensitive company or personal information
Warning Signs to Watch For
Be cautious and look out for these red flags:
- Receiving an unexpected request to sign a document
- Urgent or threatening language pressuring you to act quickly
- Generic greetings (e.g., “Dear User”) instead of your name
- Suspicious sender email addresses (slight misspellings or unfamiliar domains)
- Links or buttons that don’t match the official website when hovered over
Tips to Stay Safe
Follow these best practices to protect yourself and your organization:
- Pause before you click—take a moment to verify the request
- Verify the sender by contacting them through a trusted method (not replying to the email)
- Check the URL carefully before entering any login information
- Access documents directly by logging into the official e‑signature platform instead of clicking email links
- Use multi-factor authentication (MFA) on your accounts whenever possible
- Report suspicious emails according to your organization’s security policies