Avoid eMail Phishing Scams

We understand your documents contain highly sensitive information which is why protecting your data when using Constellation1 eSignature is our top priority. In recent news, there have been many outbreaks of ransomware, malware, and viruses. Phishing attempts can easily lead to these outcomes; therefore, learning how to properly identify these attacks should be your first line of defense.

What exactly is phishing?

Email phishing (or spoofing) is an online scam where criminals send an email that appears to be from a legitimate company asking you to provide sensitive information. This is usually done by including a link that supposedly takes you to the company’s website where you are asked to fill in your information. The email format may look very similar to a legitimate email.

Phishing Examples

Scare Tactics

Scammers will attempt to scare you by claiming your account will be locked, disabled or suspended. This is an attempt to acquire your log in credentials and gain access to your account.

Fraudulent Activity

They will claim irregular or fraudulent activity has been detected on your account. This is also an attempt to acquire your log in credentials in order to “securely update” your account.

Secure or Important Message

Scammers will convince you of an important message that can only be read via a link or attachment. They may also attach HTML pages that request login credentials.

Billing Themed Notices

They will warn that you owe money, or your credit card has been declined. This is an attempt to acquire your financial information such as credit card or account numbers.

Tips & Techniques to Avoid Phishing SCAMS

Use these easy techniques to help you combat the above examples as well as help you and your clients identify real Constellation1 eSignature emails:

Falsified Sessions

If an eSignature email or session doesn’t seem legitimate or if you were not expecting an invitation to an eSignature document, do not open or click any links. Contact the sender immediately offline if you have any doubts.

Email Authentication

Grammatical errors, typos, or bad spelling should immediately warn you of a phishing attempt. All Constellation1 eSignature emails are templates. If you have any questions, you can compare to previous Constellation1 eSignature emails.

Sender Email Address

Be aware of the sender email address. Constellation1 eSignature will only send from esign@constellationreg.com. We will never send an email from your email. Report suspicious emails to your IT department and esign@constellationreg.com.

Invitation Links

All links in Constellation1 eSignature emails will link to our SMTP provider, Mandrillapp.com, then esignonline.net. You can easily mouse over all signing links or download links to see the URL to which you will be forwarded. Ensure the link always begins with HTTPS. The S stands for ‘Secure’ and protects all communication and customer information.

Passwords

Create different, strong passwords for each website. You should regularly change your online passwords as good practice. If possible, set up multi-factor authentication on all accounts that offer it.

PC Protection

Ensure your anti-virus software and firewalls are turned on and up to date. Your browsers should also have the latest updates and patches.

Conclusion

Scammers are continuously updating and evolving their phishing attempts. This includes attempting to send from companies the user regularly does business with. Their emails and URL links can be sophisticated and built to look like the actual website to trick you into providing your sensitive information.