Connect with us

Technology

DocuSign email scam targets healthcare workers

Published

on

DocuSign email scam targets healthcare workers

NEWYou can now listen to Fox News articles!

Most of us sign documents online without thinking twice. A quick DocuSign request appears in your inbox. You click the link, review the document and move on with your day. That convenience is exactly what scammers rely on. Recently, we received a message from a CyberGuy reader that shows how convincing these scams can look. In this case, the email appeared to come from a health licensing authority and asked the recipient to review a document tied to a professional license renewal.

Advertisement

Here is the email we received from Susie, a registered nurse in Florida who nearly fell for the scam.

“I am a Registered Nurse, and my bi-annual renewal is approaching. Last month, I received a surprising (at least to me) email with a document to DocuSign from the state Board of Health. It didn’t feel right, even though I have used DocuSign multiple times in the past. Those experiences were known transactions. I contacted the state board, and they confirmed that it IS a SCAM. I sent them screenshots, etc. and reported the message for phishing. I want to thank you, Kurt, because it was thanks to you that I questioned the veracity of this outreach. Reading the articles and tips you provide saved me a great deal of trouble. Thanks again, and all you nurses out there renewing your license, be wary.” – Susie C, Orlando, FL

Susie did exactly what security experts recommend. She paused and verified the message before clicking anything. That one step likely prevented a phishing attack.

SCAMMERS ARE USING DOCUSIGN EMAILS TO PUSH APPLE PAY FRAUD
 

Security experts warn that DocuSign scams exploit routine online habits to steal passwords and access personal or professional accounts. (ilkercelik/Getty Images)

Advertisement

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter

What the suspicious DocuSign email looked like

Susie also shared a screenshot of the message she received. At first glance, the email looks familiar. The blue layout resembles real DocuSign notifications. There is even a large yellow Review Document button. But one detail stood out immediately.

The email address sending the message was:
info.florida-department-of-health-email-notification@cc.ncu.edu.tw

That address has nothing to do with a U.S. state health department. 

Why DocuSign scams work so well

DocuSign is used by millions of businesses and government agencies. Because people expect these requests, they often click without hesitation. Scammers exploit that habit. A typical DocuSign phishing email tries to create urgency. It may claim a license renewal, a contract update, or a payroll form requires immediate action. Once you click the button, several things may happen:

Advertisement
  • You may land on a fake login page designed to steal your email password.
  • The site may prompt you to download a malicious file.
  • The link may redirect you to several phishing pages.

In many cases, the goal is simple. Attackers want your email credentials so they can take over your account or launch more scams.

10 WAYS TO PROTECT SENIORS FROM EMAIL SCAMS
 

A Florida nurse avoided a DocuSign phishing scam after spotting a suspicious email tied to a fake health license renewal request. (Smith Collection/Gado/Getty Images)

Red flags in the DocuSign scam email

A few warning signs can help you spot a fake request quickly.

Suspicious sender address

Always look closely at the sender’s domain. Government agencies rarely send messages from foreign academic domains like .edu.tw. That alone signals something is wrong.

Unexpected documents

Legitimate DocuSign requests usually follow a known interaction. For example, a contract you discussed or paperwork you expect. An unexpected document should always raise questions.

Advertisement

Pressure to act quickly

Many phishing emails include language that urges immediate action. The goal is to stop you from thinking. Take a moment before clicking any button.

Generic document descriptions

The message shown in the screenshot simply states that a document is ready to review. It provides no real context or explanation. Legitimate documents often include details about the transaction.

How clicking the link could compromise you

Many people assume they will recognize a fake page. In reality, phishing sites look very convincing. Some scams even use cloned DocuSign pages. Once victims enter their credentials, attackers gain access to their email accounts.

From there, criminals can:

  • Reset passwords for financial services
  • Send phishing emails to contacts
  • Search inboxes for sensitive documents

In healthcare professions, that risk can also expose licensing information or patient-related communications.

APPLE APP PASSWORD SCAM EMAIL WARNING
 

Advertisement

Cybercriminals are using fake DocuSign emails to trick users into clicking malicious links and handing over sensitive login credentials. (Gabby Jones/Bloomberg via Getty Images)

Ways to stay safe from DocuSign phishing scams

Fortunately, a few habits can dramatically lower your risk.

1) Verify the request separately

If a document claims to come from a government agency or employer, contact them directly using a known phone number or website. Never use the contact information inside the suspicious email.

2) Hover over links before clicking

Move your cursor over the button and check the destination link. If the URL looks unfamiliar or unrelated to DocuSign, do not click it.

3) Don’t click links and use strong antivirus software

If an email seems suspicious, do not click the link or open any attachment. Strong antivirus software can help block malicious downloads, warn you about dangerous websites and catch threats before they spread across your device. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

Advertisement

4) Use a data removal service

Scammers often gather personal details from data broker sites and public records to make phishing emails seem more believable. A data removal service can help reduce your exposed information online, which may make it harder for criminals to target you with convincing messages. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com 

5) Access documents through official accounts

If you regularly use DocuSign, sign in directly at the official website and check your pending documents there. That approach avoids email traps entirely. 

6) Report phishing attempts

Forward suspicious messages to your organization’s security team or the Federal Trade Commission phishing reporting system at ReportFraud.ftc.gov. The FTC also advises forwarding phishing emails to the Anti-Phishing Working Group at reportphishing@apwg.org. Reporting scams helps protect others from the same attack.

Kurt’s key takeaways

Scams succeed because they blend into everyday routines. Signing documents online has become normal for work, healthcare licensing and financial paperwork. That convenience also gives criminals a perfect disguise. Susie’s story shows how a small moment of doubt can stop a phishing attack before it begins. A quick call to the licensing board revealed the truth. The message was never legitimate.

Now the question is one every reader should consider. If a DocuSign email arrived in your inbox right now, would you notice the warning signs before clicking the button? Let us know by writing to us at Cyberguy.com

Advertisement

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts, and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter 

Copyright 2026 CyberGuy.com.  All rights reserved.  
 

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Technology

Barret Zoph is out at OpenAI again after just five months

Published

on

Barret Zoph is out at OpenAI again after just five months

Five months after returning to OpenAI, Barret Zoph — the company’s head of enterprise AI sales — has departed, The Verge has learned.

Zoph returned to OpenAI in mid-January after a stint as co-founder and CTO of Thinking Machines Lab, the competing AI company founded by former OpenAI CTO Mira Murati. Shortly after Zoph returned to OpenAI, the company said he would lead its push into enterprise — a significant role at OpenAI, since in recent months it had vowed to stop chasing so-called “side quests” and focus on key revenue drivers like enterprise and coding ahead of its planned IPO.

OpenAI confirmed to The Verge that Zoph will be departing. He posted a goodbye message in the company’s Slack channels. Zoph did not immediately respond to a request for comment.

Zoph originally left OpenAI in the fall of 2024 for Murati’s Thinking Machines Lab, but departed the role abruptly in January 2026 after reports of alleged misconduct involving an undisclosed relationship with a colleague. Murati posted on X in January that Thinking Machines Lab had “parted ways” with Zoph and that he would be replaced as CTO.

Thinking Machines Lab has its own tensions with OpenAI. Murati briefly took over as CEO from OpenAI CEO Sam Altman during his November 2023 ouster, and during the recent OpenAI trial, Murati testified that she couldn’t trust everything Altman said. In September 2024, when Murati left OpenAI to start Thinking Machines Lab, a group of OpenAI employees followed shortly after. But three of them — including Zoph — all returned to OpenAI together this past January. Fidji Simo, OpenAI’s CEO of Applications, wrote on X at the time that she was “excited to welcome Barret Zoph, Luke Metz, and Sam Schoenholz back” and that the decision had “been in the works for several weeks.”

Advertisement
Continue Reading

Technology

6 in 10 identity crimes now begin with a new account

Published

on

6 in 10 identity crimes now begin with a new account

NEWYou can now listen to Fox News articles!

For years, two women in Bremerton, Washington, opened credit cards and lines of credit in other people’s names, working from documents they pulled out of stolen mail. Emily Vranic and Heather Marquis redirected the new accounts’ statements to an address they controlled, so no bill ever reached the victims. They pleaded guilty in federal court this month to bank fraud and aggravated identity theft in a scheme prosecutors say stole nearly $229,000 from banks and bank customers.

If you have ever worried about a credit card opened in your name, this case shows how quickly stolen mail can turn into a much bigger identity theft problem. Opening a new account is the leading form of identity misuse reported to the Identity Theft Resource Center. In its latest data, 62.1% of attempted misuse cases began with a new account application rather than the takeover of an account the victim already held.

Sign up for my FREE CyberGuy Report

  • Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
  • For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com trusted by millions who watch CyberGuy on TV daily.

Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

WARNING SIGNS YOUR MAIL HAS BEEN FRAUDULENTLY REDIRECTED

Advertisement

A credit card opened in your name can start with stolen mail, exposed personal details or documents pulled from the trash. (Nastasic/Getty Images)

How stolen mail helped thieves open credit cards

When people picture an account opened in their name, they may imagine a checking account at a bank they have never set foot in. The more likely target is a credit card. Credit cards made up 41% of attempted account misuse reported to the ITRC last year. Checking accounts came to 17.7% and personal loans to 8.5%.

A credit card is one of the easier accounts to open in someone else’s name, and the reason is in how the application is cleared. A lender matches the submitted name, date of birth, address and Social Security number (SSN) against the bureau file. When those details fit a record that already exists, an automated system can approve the application with no one confirming that the applicant is the person being described. Assemble enough of someone’s information from breaches and stolen mail, and the check clears.

Why identity thieves rarely stop at one account

Vranic and Marquis did not stop at one account per victim. Once they controlled someone’s identity, they activated existing cards, opened new credit lines and moved money out of bank accounts tied to the same name.

This is common. The ITRC found that 25.6% of victims are now handling two or more identity incidents at once, up from 23.5% the year before. The same stolen details, including name, date of birth, address and SSN, can open the next account as easily as the first.

Advertisement

DON’T LET THIS CREDIT CARD FRAUD NIGHTMARE HAPPEN TO YOU

A fraudulent credit card may stay hidden for weeks if statements and notices are sent to an address controlled by the thief. (Kurt “CyberGuy” Knutsson)

Why weeks can pass before you learn about the account

A new account does not announce itself. It reaches your credit report only after the first statement closes, which puts the first record 30 to 60 days behind the opening. Banks report to the bureaus monthly, and the bureaus need up to two weeks more to post the change.

The first paper notice goes wherever the application is listed. Vranic and Marquis had the statements mailed to their own address, not the victims’. When the mail reaches the right house, it may read like a routine offer or a card no one ordered, which makes it easy to set aside.

By the time a denied loan or a collections call makes the account impossible to ignore, it has been open and drawing money for weeks.

Advertisement

WHY THAT $4 CHARGE ON YOUR STATEMENT COULD BE FRAUD

Freezing your credit, watching for new accounts and acting quickly can help limit the damage if your identity is used. (Kurt “CyberGuy” Knutsson)

What to do if a credit card appears in your name

Move quickly, because every day an account stays open gives a thief more time to spend money, damage your credit or try the same information somewhere else.

1) Contact the card issuer immediately

Call the credit card company or lender that opened the account and tell them the account is fraudulent. Ask them to close or freeze the account, stop any pending charges and send written confirmation that you are not responsible for the debt.

2) Start at IdentityTheft.gov

Go to IdentityTheft.gov. The Federal Trade Commission’s site generates an Identity Theft Report and recovery plan to help you report identity theft, limit the damage and fix your credit.

Advertisement

3) File a police report if a creditor asks for one

Your FTC Identity Theft Report is usually the key document for disputing fraudulent accounts. Some lenders, banks or debt collectors may also ask for a police report. If that happens, file one with your local police department and keep a copy for your records.

4) Save every document and confirmation number

Keep copies of account statements, collection letters, emails, dispute letters, FTC reports, police reports and confirmation numbers. A clear paper trail can make it easier to prove the account was fraudulent if a creditor, credit bureau or debt collector questions your claim.

5) Dispute the account in writing

Dispute the fraudulent account directly with the lender that opened it, in writing. Also dispute it with Equifax, Experian and TransUnion if it appears on your credit reports. Under the Fair Credit Reporting Act, companies that furnish information to credit bureaus have a duty to investigate disputed information.

6) Freeze your credit at all three bureaus

Place a freeze at Equifax, Experian and TransUnion to help block the next application. Freezes have been free since 2018 and can be lifted online when you need to apply for credit.

7) Add a fraud alert

A credit freeze blocks access to your credit file. A fraud alert tells lenders to take extra steps to verify your identity before opening new credit in your name. You only need to contact one of the three major credit bureaus to place a fraud alert, and that bureau must notify the other two.

Advertisement

8) Report suspected mail theft

If you believe stolen mail helped someone open the account, report it to the U.S. Postal Inspection Service, the law enforcement arm of the Postal Service. You can report mail theft, identity theft, fraudulent change-of-address requests, fraudulent mail holds and fake Informed Delivery accounts at mailtheft.uspis.gov.

9) Request an IRS Identity Protection PIN

If your Social Security number was used, request an IRS Identity Protection PIN at irs.gov/ippin. This helps keep a thief from filing a tax return in your name.

10) Change passwords and lock down your accounts

Change the passwords on your bank, credit card and email accounts, especially if your email address was part of the fraud. Use a password manager to create and store strong, unique passwords for each account, so one exposed password cannot unlock the rest of your financial life. Turn on two-factor authentication (2FA) where available. Then review recent transactions, saved payment methods and automatic payments for anything you do not recognize. 

11) Get help cleaning up the damage

Cleaning up identity theft can mean dealing with creditors, credit bureaus, debt collectors and repeat follow-ups. Keep copies of every report, dispute letter, confirmation number and account closure notice so you have a clear paper trail if the fraud resurfaces.

No service can prevent every account opened in your name. Continuous three-bureau credit monitoring may alert you to new accounts as they are reported, rather than weeks later when a lender turns you down or a collections notice arrives. See my tips and best picks on Best Identity Theft Protection at Cyberguy.com

Advertisement

Kurt’s key takeaways

A stolen credit card account can quietly grow into a much bigger identity theft mess before you ever see a bill. That is what makes this Washington case so alarming. The victims were not ignoring warning signs. The statements were being sent somewhere else. The best move is to make it harder for thieves to open the next account. Freeze your credit at Equifax, Experian and TransUnion, watch for hard inquiries and check your credit reports for accounts you do not recognize. If something appears, go straight to IdentityTheft.gov, file a report and dispute the account in writing with the lender. Credit monitoring can also give you a faster heads-up when a new account or inquiry hits your file. It will not stop every scam, but it can shorten the time between the fraud starting and you finding out.

Have you ever found a credit card, loan or account on your credit report that you did not open? Let us know how you discovered it and what it took to fix it by writing to us at Cyberguy.com

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report

  • Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
  • For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com trusted by millions who watch CyberGuy on TV daily.
  • Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

Copyright 2026 CyberGuy.com. All rights reserved.

Advertisement
Continue Reading

Technology

Valve is so behind on Steam Controller orders that some won’t ship until 2027

Published

on

Valve is so behind on Steam Controller orders that some won’t ship until 2027

Valve has some good news and bad news about Steam Controllers. The good news: if you make a reservation for a Steam Controller, the company will now show you one of three estimates of when you’ll be able to actually order your gamepad: by September 2026, by December 2026, or sometime in 2027. The bad news: any reservations made today “indicate a 2027 date for shipping,” Valve says.

“We have no plans to stop making Steam Controller,” according to Valve. “But as we look at the current demand compared to how many we know we can make by the end of the year, we want to manage expectations as much as we can with regards to when folks can expect to receive their order.”

Valve’s very good new Steam Controller went on sale in early May, and the initial rush led some people to run into frustrating problems with trying to check out ahead of the controllers eventually going out of stock. A few days later, the company announced that it would be implementing a reservations queue for interested buyers so they could get on a waitlist. If you’re on the waitlist, when you get notified that a Steam Controller is ready for you to buy, you have 72 hours to actually make the order.

“When we launched Steam Controller last month, we quickly saw that initial demand exceeded our expectations,” Valve says. “Switching to a reservation queue has (hopefully) cut down on the headaches on the customer side, and for us it’s also been helpful as we plan ahead and try to get as many out as quickly as we are able.”

All three of Valve’s big hardware products were delayed from a planned early 2026 launch because of the component crisis, Valve still hasn’t announced when the Steam Machine PC or Steam Frame VR headset might go on sale. However, just yesterday, Valve officially launched its big SteamOS 3.8 update with support for the Steam Machine. It’s also been importing a lot of hardware into the US as of late.

Advertisement
Continue Reading
Advertisement

Trending