I got an email saying I have a document to sign in DocuSign — is it a scam?

Treat it as suspicious until you check. DocuSign-branded phishing is one of the most-copied email templates because everyone recognizes the logo and expects to click without thinking — the “review document” button usually leads to a fake Microsoft or Google login built to steal your password, or a file carrying malware. If you weren't expecting a document, don't click; contact the supposed sender directly to confirm, and only ever log in to DocuSign through docusign.com typed in yourself.

Educational verdict from documented scam patterns — not a live report. For a 0–100 risk score on the exact link in your hand, run the checker.

From the research desk — this pattern is one of those documented in This Week's Scam Wave, in Numbers — August 9, 2026 →