Docusign login URL: the real address
Docusign's real sign-in page is on account.docusign.com. If a link takes you anywhere else and asks for your Docusign password, close it. We opened each address below on 9 November 2026.
Docusign accounts
Domains Docusign uses
Not a complete list. Each address below can have subdomains in front of it (www., login.), and they are still Docusign's.
docusign.comdocusign.net
Real Docusign domains where anyone can publish
These belong to Docusign, but the pages on them are made by its customers. A sign-in form here is not Docusign's sign-in page.
| Address | Why | Live phishing URLs |
|---|---|---|
docusign. | Docusign envelopes come from Docusign's real servers, but the sender can be anyone with a Docusign account. | 0 |
Live phishing URLs: any brand, counted in PhishTank's list on 5 November 2026.
How to read the address
Look at the part between https:// and the first single /. Read it from the right. The real thing ends in docusign.com or another domain listed below, with nothing but a dot before it.
https://login.docusign.com/…is Docusign: it ends in.docusign.com.https://docusign.com.account-check.example/…is not: it ends inaccount-check.example, and Docusign's name at the front is decoration.https://docusign-secure-login.example/…is not: a hyphen makes a different domain, and anyone can register one.
Everything after the first / is chosen by whoever made the page, so …/docusign.com/signin in the path proves nothing.
What fake Docusign pages looked like
On 5 November 2026, PhishTank listed 33 live, verified phishing URLs that its volunteers labelled Docusign.
- 93.9% used HTTPS. The padlock means the connection is encrypted, not that the site is Docusign.
- 3% had "docusign" in the hostname. Most fakes give no such clue, so the absence of Docusign's name doesn't make a link safe either.
- 33.3% sat on services anyone can sign up to, such as website builders, file sharing and QR-code links, rather than on a domain the attacker registered.
Hostnames from the same list that use Docusign's name without being Docusign's, newest first. Dots are written as [.] so none of them is a working link.
- docusignredtail[.]web[.]app
Report a fake Docusign email or page
Forward the message as an attachment to verify@docusign.com, or use Docusign's Report Abuse option. (Older Docusign alerts named spam@docusign.com.)
Source: Docusign Trust Center fraud alert, 20 August 2026, checked 9 November 2026.
Lures to watch for
- Docusign warns that scam envelopes are sent from registered Docusign accounts, so a real Docusign email does not prove the document is honest.
- Instead of clicking, go to docusign.com and use the security code from the email to open the document there.
Not sure about a link? Paste it into the free link checker. It reads the address only and doesn't open the page. The PhishClean browser extension also checks each page you open for signs of a fake sign-in form.
Questions
What is Docusign's official login URL?
account.docusign.com (Docusign accounts). A real Docusign address ends in docusign.com, docusign.net, read from the right of the hostname.
How do I report a fake Docusign email or website?
Forward the message as an attachment to verify@docusign.com, or use Docusign's Report Abuse option. (Older Docusign alerts named spam@docusign.com.)
Do fake Docusign sites use Docusign's name in the address?
In PhishTank's list of live phishing URLs on 5 November 2026, 1 of the 33 URLs labelled Docusign (3%) had the brand's name in the hostname, so most gave no such clue. 93.9% used HTTPS, so a padlock proves nothing.
Can a phishing page be on a real Docusign domain?
Yes. docusign.net belongs to Docusign, but the pages there are made by its customers, so a sign-in form there is not Docusign's sign-in page. PhishTank's list on 5 November 2026 held 0 live phishing URLs on it.
How we checked
- Sign-in addresses: opened on 9 November 2026 and followed through every redirect to where the sign-in page loads.
- Phishing numbers: PhishTank's online-valid list, downloaded 5 November 2026. Only URLs its volunteers labelled Docusign count, and many fakes are labelled "Other", so these are a sample. We didn't open any of them. Data shared under CC BY-SA 2.5; method as in our phishing URL statistics.
- Example hostnames: hostnames in the whole list that contain "docusign" but aren't on Docusign's domains, one per domain.
See also: official sign-in addresses of 15 brands.
Last updated: , when the sign-in addresses were checked.