I got a strange email, is this a scam?

[Balloonman]

I received an email containing this -is this legit or is it a clever scam?

 

[Jay]

Hi @Balloonman, thanks for bringing this to our attention.

Does this email have any Dropbox logos, or was it sent from one of our official Dropbox domains?

If you hover over the blue link (don't clicking it please) does the URL have anything related to Dropbox?

This will help me to assist further!

[Balloonman]

Hovering over the blue bar gives a https://docsend.com/view/xxxxxxx (where xxxxxx is a series of letters and numbers

[Jay]

Okay, that is a valid URL for Dropbox, since DocSend is part of the services we offer. 

If the sender of the email is from docsend.com, then it is an official domain.

[Rich]

---

@Jay wrote:

If the sender of the email is from docsend.com, then it is an official domain.

---

@Balloonman 

But that doesn't necessarily mean that the document isn't a scam. Do you know the person that sent it to you? Were you expecting to receive the document or did it arrive without prior knowledge?

It wouldn't be the first time that a scammer used a legitimate service to deliver a possible scam. Just be careful if you open the file. If you have a way to contact the sender through a different channel, I'd first ask them if they actually sent you something.

[Balloonman]

Hello Rich, Thanks - The Dropbox message is from an email address I know is correct. At the bottom it has the logo address and telephone number of the company concerned. The email giving the Dropbox details us headed "Bacs receipt". It just seems too good to be true.  I do not want to contact them as I had legal fallouts with them some years ago.

[Balloonman]

I have looked at the link on docsend.com that takes me to a PDF download on [removed]. I have no idea what that is and so I will leave it as it looks unsafe. IPFS seems a bit strange. In addition it asks me to login to Microsoft which I do not understand.

[Rich · Accepted solution]

---

@Balloonman wrote:

In addition it asks me to login to Microsoft which I do not understand.

---

Sounds like a clear phishing attempt to me.