This is a version of Documents Ready To Sign Scam.
Fake Copilot Secure Document Notification Email (French & English)
This scam variation targets users with an email in French (sometimes also found in English), claiming you have received confidential documents through Microsoft Copilot. The email mimics legitimate business communications and pressures you to click a link (“Consulter mes documents” or "View my documents") that leads to a fake login page designed to steal your account information.
What’s different in this version
These traits set this message apart from the usual pattern.
-
Emails often closely mimic legitimate Microsoft Copilot, DocuSign, or Adobe branding and language
-
Uses both French and English to target users in multiple regions or international companies
-
The sender and web links appear slightly unusual (such as copilotdocusend.it.com), which is a strong red flag
-
Creates pressure by calling the documents “confidential” or “certified,” encouraging urgent action
How this scam works
- 1
Step 1: An email claims a contract, invoice, or certificate is waiting for your signature.
- 2
Step 2: The email includes a button like “Review Document” or “View Documents.”
- 3
Step 3: The link leads to a fake login page (often Microsoft 365/Outlook or Google) on an unrelated website.
- 4
Step 4: If you sign in, the scammers capture your password and may immediately try it on your email and other accounts.
- 5
Step 5: Once in your inbox, they can reset passwords, read messages, and send new scams to your contacts.
✓ Do this
- Open DocuSign or your e‑signature account by typing the official website address yourself (e.g., docusign.com).
- Call or text the sender using a number you already know to confirm they sent the document.
- Hover over links to check the real web address before clicking. It should match the real service (e.g., docusign.com).
- Turn on two‑factor authentication (2FA) for your email and work accounts.
- Report suspicious emails to your IT/help desk or email provider.
- If you clicked and entered a password, change it immediately and sign out all sessions.
✗ Avoid this
- Don’t open unsolicited documents or links.
- Don’t click “Review” or “Sign” on unexpected emails, especially for payments or certificates.
- Don’t enter your password on a page you reached by clicking a link in an email.
- Don’t trust senders whose email ends in the wrong company domain (for example, not @docusign.com).
- Don’t ignore small web address changes (e.g., random domains like example.live or misspellings).
Verbatim excerpts from the scam
Exact lines from emails or messages—searchable text so you can compare wording.
- 1 Excerpt 1**French Example:** Notification de Documents Recommandés Bonjour , Vous avez reçu des correspondances confidentielles transmises par l’intermédiaire du service Copilot. Ce service vous permet de consulter en toute sécurité les fichiers et documents certifiés qui vous sont adressés par e-mail. [Consulter mes documents]
- 2 Excerpt 2**English Example:** Notification of Recommended Documents Hello , You have received confidential correspondence sent via the Copilot service. This service allows you to securely view certified files and documents sent to you by email. [View my documents]