Help center › Help for signers
Is this email genuine?
How to tell a real Sovrasign invitation from a fake one (phishing), and what to do if you are not sure.
Fake signing requests (phishing) are a common trick to steal passwords. A real Sovrasign invitation:
- names the sender and their email address: "... (address) asked you to sign ...", and ends with "Sent by Sovrasign on behalf of" the same sender. Replying to it reaches the sender;
- says how you will confirm who you are, for example "You'll confirm it's you with the Google account for this address", and that "Sovrasign never asks for your password by email";
- links to the Sovrasign signing page at sign.sovrasign.com;
- sends you to Google, Microsoft or Apple to confirm who you are, in a separate window whose address bar shows that company's own address. Sovrasign never asks you to type a password on its own pages.
Warning signs
- You do not know the sender, or the sender would not normally send you this.
- The link goes to another address than the Sovrasign signing page.
- A page that looks like Sovrasign, Google, Microsoft or Apple asks for your password, but its address bar shows another site.
- The email pushes you to act within minutes, or asks for payment or bank details.
If you are not sure
- Do not open the link. Nothing happens if you ignore the email.
- Ask the sender through a channel you already know, such as their usual phone number or address. Not by replying to the suspicious email.
- Report it to abuse@sovrasign.com. Do not forward the link to anyone else. See Report abuse.
You can also report it from the invitation's Report this email link, or from the signing page: the report goes to our trust and safety team.
If you already signed in on a fake page, change that account's password at once and turn on two-step sign-in for it.
Questions about the document itself? Contact the sender: their name and email address are in the invitation and at the top of the signing page. Sovrasign cannot change the document or give legal advice.