untrappable

DocuSign email scam: is that document real?

Editorially reviewed · Last updated July 7, 2026

Yes — this is a scam. DocuSign never sends documents from "docusign-verify.info".

You have a document waiting — action required
D
DocuSign
no-reply@docusign-verify.info
10:42 AM
A document was sent to you for signature and expires in 24 hours. Review and sign now to avoid cancellation: docusign-verify.info/review
Review document
The Email, as received

Other versions you might get: A fake "your account has been suspended" notice, a shared invoice or contract from a name you half-recognize, or a "voicemail" or "fax" attachment that's really a phishing link.

What to do right now

  1. Don't click the link or button, and don't open any attachment.
  2. Check directly — go to docusign.com yourself and sign in. A real document will be in your account; the fake one won't.
  3. Report it. File at reportfraud.ftc.gov and mark the email as phishing.
  4. Delete it so you don't tap it later by mistake.
  5. If you already tapped and entered your login, change that password now, turn on two-factor, and check any account that used the same password.

How to make sure it never bites you

Phishing reaches you because your email is on breached lists that scammers buy and reuse. You can't undo the leak, but you can shrink what it's worth — lock down your logins so a stolen password opens nothing. See how to lock down your accounts.

Untrappable · Public service advisory

Stop the next one at the source

You got this because your details are on lists that get bought, sold, and leaked. You can't unspill that, but you can make it useless to a scammer. Start with the free steps — they do most of the work.

Optional — if you'd rather it was handled for you

If you'd rather have it watched for you, an identity-protection service monitors your accounts, SSN, and the dark web, warns you the moment something new appears, and helps you recover if someone gets through.

See identity protection →

Affiliate link — we may earn a commission at no extra cost to you. It never changes our verdicts. Why we can still be trusted.

Keep this · forward it to someone who needs it

Frequently asked

How can I tell a real DocuSign email from a fake one?
Ask the one question the FTC recommends: were you actually expecting a document from this person or company? If you don't know the sender and weren't expecting anything to sign, treat it as phishing and don't click. When you do have a real signing in flight, don't use the email's link — go to docusign.com yourself and sign in to see if a document is genuinely waiting. Legitimate companies won't send you a link that asks for your login or payment details.
The email says the document expires in 24 hours — should I sign fast?
No. The countdown is a pressure tactic, not a real deadline. Phishing messages manufacture urgency — “action required,” “expires soon,” “account on hold” — so you click before you check. A genuine agreement doesn't punish you for pausing. Slow down, verify at docusign.com directly, and if you weren't expecting it, report and delete it.
I clicked the DocuSign link and entered my login — what should I do?
Change that password right now, and turn on two-factor (multi-factor) authentication — the FTC recommends it because it makes a stolen password much harder to use. Change the password anywhere else you reused it, too. If you opened an attachment, update your security software and run a scan. Forward the phishing email to reportphishing@apwg.org and report it at reportfraud.ftc.gov.

Related scams

Sources

A public service

Help protect someone else

Scams spread because people stay quiet about them. If this could have fooled you, it can fool someone you know — a parent, a friend, the family group chat. Passing it on is the easiest good thing you'll do today. It's safe to forward, and stands on its own as a record for a bank or the police.