How can I tell if a signature request is a phishing attempt?

A genuine DocuSign signature request link begins https and contains a link to docusign.net:

 

 

Anything else is likely a fake. When in doubt, do not click any link in an alleged signature request. Instead, go directly to DocuSign and log into your account. Any documents/envelopes that legitimately require your signature will be in the "Action Required" section. However, please note that your DocuSign account is automatically created the first time you log into DocuSign using the @vcu.edu format of your email address. Envelopes addressed to you from before you created the account will not display in the account.

If you have any concerns about the validity of any email you receive or to report a phishing scam, please contact the VCU IT Support Center (828-2227, itsc@vcu.edu) for assistance.

• View up-to-date information regarding phishing attempts at VCU.
  
  
• View up-to-date information regarding DocuSign phishing attempts and other security alerts.