Phishing scam: "A document has been shared with you."


Published: 20Feb2020

A phishing scam related to file sharing is currently targeting the McGill community. There are several variations, with different subject lines; however, they all contain the message "A document has been shared with you" in the body and the signature "Powered by DocuSign". 

View an example of the message on the left.

Please DO NOT click on the link or reply to the message. Delete this email immediately! It does NOT come from a McGill source.

These emails are a fraudulent attempt to gain access to your personal information and/or McGill institutional data. If you have already clicked on a link in these emails and submitted any personal information, you should call the IT Service Desk at (514) 398-3398 as soon as possible.  If no one is available to take your call you should change your McGill Password immediately. See the McGill Password Reset Checklist for instructions.  It is still important to follow up with the IT Service Desk after resetting your password to ensure that all the necessary actions have been taken.

If you have simply received a phishing email but have not clicked the link, please contact phishing [at] immediately to report the phishing attempt.

As a reminder: If you are unsure of the legitimacy of the email request, you should verify with the sender by contacting them directly using McGill's Global Address List (for McGill employees).

Quick links:

Back to top