DocuSign email received. Thoughts, and BOLO.

[Sayjac]

Got an email from a "Scott Cline via DocuSign" yesterday. Says " McAfee Total Secure License has been successfully processed. A charge of $499 was applied to your account on May 8, 2025." Has a link to review document and sign. Obviously I made no such purchase, and think it's some kind of phishing scam. Why does it seem McAfee often mentioned these type emails/things? I'm not clicking on anything, but I do admit this one is new to me, looks quite official and a bit unnerving. I did check my CC accounts and banking info, and found nothing out of the ordinary. Any thoughts on this, thanks?

 

[Zee09]

That's the new game they are playing.. DELETE....

 

[Pablo]

I am getting a lot of fake order spams. I mean real clownish with generic goog or hotmail email addresses. Come on guys step it up!!

 

[Sayjac]

I checked the sender email address and it does end in @docusign.net. Not sure if that docusign address.

Edit, found a good link that says docusign.net bogus. Makes me feel better.

https://www.docusign.com/trust/security/incident-reporting

 

[Leo99]

The intended impact of the email is to make the recipient, think oh my, I have not ordered this. Let me call them and get this straightened out.

 

[alarmguy]

Yeah, just ignore it. They use in this case McAfee because it makes people think that it might be official, since McAfee is an internet security company.
I get it, but it works, you even made sure to check your accounts. Now think of someone less "intune" with the internet of things. They will click and allow access to whatever the spam is looking for.

 

[Sayjac]

The intended impact of the email is to make the recipient, think oh my, I have not ordered this. Let me call them and get this straightened out.

Exactly! Usually I see it more cut and dry and just block sender. As noted, this one new to me. But now seeing the link example, exactly what I got. Now I'll block sender.

 

[rijndael]

That's the new game they are playing.. DELETE....

It's probably better if you mark it as spam rather than delete.

 

[Pew]

I checked the sender email address and it does end in @docusign.net. Not sure if that docusign address.

Edit, found a good link that says docusign.net bogus. Makes me feel better.

https://www.docusign.com/trust/security/incident-reporting

Don't trust it, phishers are using their fake links through DocuSign also.

 

[K-Man]

I get loads of these DocuSign e-mails, not sure why. Every one is deleted without opening. Generally they go straight to the spam/junk folder anyway.

Check your spam/junk folder and you'll probably see more e-mails like that one.

 

[Zee09]

It's probably better if you mark it as spam rather than delete.

I do both

 

[opus1]

I've been getting those along with generic "your invoice is attached" e-mails. Delete, delete, delete.

 

[Sayjac]

So , I did check my spam folder and have nothing similar to topic. Docusign a completely new one to me and made it past spam. My biggest concern not that I had done something, but some identity theft type deal. After seeing example very similar example in link, phishing it is. This one, one of the most sophisticated attempts I've gotten. As noted, blocking any future emails from address. Appreciate the replies.

 

[Hermann]

I am getting a lot of fake order spams. I mean real clownish with generic goog or hotmail email addresses. Come on guys step it up!!

Same here

 

[mikeduf]

Ditch the antivirus software get it off your system and get yourself a good VPN. End of game for spammers, malware and phisers.
Get your browser cleaned up, turn off all subscriptions by any of your digital payment methods. Your own security is all on you.

 

[Pablo]

Ditch the antivirus software get it off your system and get yourself a good VPN. End of game for spammers, malware and phisers.
Get your browser cleaned up, turn off all subscriptions by any of your digital payment methods. Your own security is all on you.

VPN doesn't stop all spammy emails. But yeah. Those subs suck, agree.

The thing about security is this: Do all YOU can do. Absolutely. But you are always one terrible employee away from "badness" at any given otherwise OK company/facility/health care provider/gov/etc. I mean there is more than one example of LE doing malicious things with pretty girls information/data/etc..............

 

[Dave Hess]

Ditch the antivirus software get it off your system and get yourself a good VPN. End of game for spammers, malware and phisers.
Get your browser cleaned up, turn off all subscriptions by any of your digital payment methods. Your own security is all on you.

I thought antivirus was ‘1 leg of the stool’ for security ?

 

[Sayjac]

Ditch the antivirus software get it off your system.......

I don't have McAfee antivirus, never have. I do have Webroot. Besides the topic em the reason noted McAfee is because years ago got one those popup deals pretending to be them saying system at risk etc. Had to go in control panel, notifications from apps and click 'off'. Problem solved. Apparently not uncommon. As noted, the fake Docusign a just new on 'to me' on my email, thus the post.

 

[dogememe]

Ditch the antivirus software get it off your system and get yourself a good VPN. End of game for spammers, malware and phisers.
Get your browser cleaned up, turn off all subscriptions by any of your digital payment methods. Your own security is all on you.

I think using a VPN at your house is literally pointless in terms of general security. You'll still get spam email. You can still get malware on your computer. And you're simply moving the potential logging of your internet activity from your ISP (a big company everyone has heard of) to some random VPN provider that you found through YouTube sponsorship or some other ads that rents a server from somewhere and does who knows what with your information. I'm not saying ISPs are perfect and all VPNs are trash, but you're just kicking the can down the road and probably lowering your internet performance in the process.

OP, that email is a phishing scam, just delete it and move on.