DocuSign email scam targets healthcare workers

Trending 2 months ago

Cyber master shares tips to debar AI phishing scams

Kurt 'The CyberGuy' Knutsson shares applicable ways to debar falling unfortunate to AI-generated phishing scams and discusses a study that North Korean agents are posing arsenic I.T. workers to chimney money into nan country's atomic program.

NEWYou tin now perceive to Fox News articles!

Most of america motion documents online without reasoning twice. A speedy DocuSign petition appears successful your inbox. You click nan link, reappraisal nan archive and move connected pinch your day. That convenience is precisely what scammers trust on. Recently, we received a connection from a CyberGuy scholar that shows really convincing these scams tin look. In this case, nan email appeared to travel from a wellness licensing authority and asked nan recipient to reappraisal a archive tied to a master licence renewal.

Here is nan email we received from Susie, a registered caregiver successful Florida who astir fell for nan scam.

"I americium a Registered Nurse, and my bi-annual renewal is approaching. Last month, I received a astonishing (at slightest to me) email pinch a archive to DocuSign from nan authorities Board of Health. It didn't consciousness right, moreover though I person utilized DocuSign aggregate times successful nan past. Those experiences were known transactions. I contacted nan authorities board, and they confirmed that it IS a SCAM. I sent them screenshots, etc. and reported nan connection for phishing. I want to convey you, Kurt, because it was acknowledgment to you that I questioned nan veracity of this outreach. Reading nan articles and tips you supply saved maine a awesome woody of trouble. Thanks again, and each you nurses retired location renewing your license, beryllium wary." - Susie C, Orlando, FL

Susie did precisely what information experts recommend. She paused and verified nan message earlier clicking anything. That 1 measurement apt prevented a phishing attack.

SCAMMERS ARE USING DOCUSIGN EMAILS TO PUSH APPLE PAY FRAUD
 

A personification signs a integer statement connected a tablet.

Security experts pass that DocuSign scams utilization regular online habits to bargain passwords and entree individual aliases master accounts. (ilkercelik/Getty Images)

Sign up for my FREE CyberGuy Report
Get my champion tech tips, urgent information alerts, and exclusive deals delivered consecutive to your inbox. Plus, you’ll get instant entree to my Ultimate Scam Survival Guide - free erstwhile you subordinate my CYBERGUY.COM newsletter

What nan suspicious DocuSign email looked like

Susie besides shared a screenshot of nan connection she received. At first glance, nan email looks familiar. The bluish layout resembles existent DocuSign notifications. There is moreover a ample yellowish Review Document button. But 1 item stood retired immediately.

The email reside sending nan connection was:
info.florida-department-of-health-email-notification@cc.ncu.edu.tw

That reside has thing to do pinch a U.S. authorities wellness department. 

Why DocuSign scams activity truthful well

DocuSign is utilized by millions of businesses and authorities agencies. Because group expect these requests, they often click without hesitation. Scammers utilization that habit. A emblematic DocuSign phishing email tries to create urgency. It whitethorn declare a licence renewal, a statement update, aliases a payroll shape requires contiguous action. Once you click nan button, respective things whitethorn happen:

  • You whitethorn onshore connected a clone login page designed to bargain your email password.
  • The tract whitethorn punctual you to download a malicious file.
  • The nexus whitethorn redirect you to respective phishing pages.

In galore cases, nan extremity is simple. Attackers want your email credentials truthful they tin take complete your account aliases motorboat much scams.

10 WAYS TO PROTECT SENIORS FROM EMAIL SCAMS
 

The exterior of a building is shown pinch a motion that sounds "DocuSign."

A Florida caregiver avoided a DocuSign phishing scam aft spotting a suspicious email tied to a clone wellness licence renewal request. (Smith Collection/Gado/Getty Images)

Red flags successful nan DocuSign scam email

A fewer informing signs tin thief you spot a clone petition quickly.

Suspicious sender address

Always look intimately astatine nan sender's domain. Government agencies seldom nonstop messages from overseas world domains like .edu.tw. That unsocial signals thing is wrong.

Unexpected documents

Legitimate DocuSign requests usually travel a known interaction. For example, a statement you discussed aliases paperwork you expect. An unexpected archive should ever raise questions.

Pressure to enactment quickly

Many phishing emails include connection that urges contiguous action. The extremity is to extremity you from thinking. Take a infinitesimal earlier clicking immoderate button.

Generic archive descriptions

The connection shown successful nan screenshot simply states that a archive is fresh to review. It provides nary existent discourse aliases explanation. Legitimate documents often see specifications astir nan transaction.

How clicking nan nexus could discuss you

Many group presume they will admit a clone page. In reality, phishing sites look very convincing. Some scams moreover usage cloned DocuSign pages. Once victims participate their credentials, attackers summation entree to their email accounts.

From there, criminals can:

  • Reset passwords for financial services
  • Send phishing emails to contacts
  • Search inboxes for sensitive documents

In healthcare professions, that consequence tin besides expose licensing accusation aliases patient-related communications.

APPLE APP PASSWORD SCAM EMAIL WARNING
 

The DocuSign website is shown connected a laptop screen.

Cybercriminals are utilizing clone DocuSign emails to instrumentality users into clicking malicious links and handing complete delicate login credentials. (Gabby Jones/Bloomberg via Getty Images)

Ways to enactment safe from DocuSign phishing scams

Fortunately, a fewer habits tin dramatically little your risk.

1) Verify nan petition separately

If a archive claims to travel from a authorities agency aliases employer, interaction them straight utilizing a known telephone number aliases website. Never usage nan interaction accusation wrong nan suspicious email.

2) Hover complete links earlier clicking

Move your cursor complete nan fastener and cheque nan destination link. If nan URL looks unfamiliar aliases unrelated to DocuSign, do not click it.

3) Don't click links and usage beardown antivirus software

If an email seems suspicious, do not click nan nexus aliases unfastened immoderate attachment. Strong antivirus package tin thief artifact malicious downloads, pass you astir vulnerable websites and drawback threats earlier they dispersed crossed your device. Get my picks for nan champion 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

4) Use a information removal service

Scammers often stitchery individual specifications from information agent sites and nationalist records to make phishing emails look much believable. A information removal work tin thief trim your exposed accusation online, which whitethorn make it harder for criminals to target you pinch convincing messages. Check retired my apical picks for information removal services and get a free scan to find retired if your individual accusation is already retired connected nan web by visiting Cyberguy.com 

5) Access documents done charismatic accounts

If you regularly usage DocuSign, motion successful straight astatine nan charismatic website and cheque your pending documents there. That attack avoids email traps entirely. 

6) Report phishing attempts

Forward suspicious messages to your organization's information squad aliases nan Federal Trade Commission phishing reporting strategy at ReportFraud.ftc.gov. The FTC besides advises forwarding phishing emails to nan Anti-Phishing Working Group at [email protected]. Reporting scams helps protect others from nan aforesaid attack.

Kurt's cardinal takeaways

Scams win because they blend into mundane routines. Signing documents online has go normal for work, healthcare licensing and financial paperwork. That convenience besides gives criminals a cleanable disguise. Susie's communicative shows really a mini infinitesimal of uncertainty tin extremity a phishing onslaught earlier it begins. A speedy telephone to nan licensing committee revealed nan truth. The connection was ne'er legitimate.

Now nan mobility is 1 each scholar should consider. If a DocuSign email arrived successful your inbox correct now, would you announcement nan informing signs earlier clicking nan button? Let america cognize by penning to america at Cyberguy.com


CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report
Get my champion tech tips, urgent information alerts, and exclusive deals delivered consecutive to your inbox. Plus, you’ll get instant entree to my Ultimate Scam Survival Guide - free erstwhile you subordinate my CYBERGUY.COM newsletter 

Copyright 2026 CyberGuy.com.  All authorities reserved.  
 

Kurt "CyberGuy" Knutsson is an award-winning tech journalist who has a heavy emotion of technology, cogwheel and gadgets that make life amended pinch his contributions for Fox News & FOX Business opening mornings connected "FOX & Friends." Got a tech question? Get Kurt’s free CyberGuy Newsletter, stock your voice, a communicative thought aliases remark astatine CyberGuy.com.

More
Source foxnews.com
foxnews.com