WATCH OUT FOR...
What’s the threat?
Scammers are sending fake PayPal emails from Docusign, a genuine service for securely signing, sending and managing documents that can be signed digitally. They do this by setting up a Docusign account and then using its templates to create what look like legitimate PayPal invoices.
Because the emails are associated with a genuine Docusign account, they bypass many of the scam filters in email tools. The example spotted by security firm Malwarebytes has the real Docusign logo at the top left ( 1 in our screenshot) and uses the headline ‘PayPal Customer Care sent you a document to review and sign’ 2 . It claims PayPal has “identified an unauthorized transaction” to Coinbase 3 , which is a cryptocurrency trading site.