November 25, 2025

A Message from the Ohio Secretary of State's Office...

Dear Ohio Business Owner:

We recently received reports that malicious emails spoofing the Connecticut Secretary of State's office are being sent to Connecticut businesses. The emails contain a malicious DocuSign link that asks a user to review and sign a digital document.

While we are unaware of this occurring in Ohio, we would like to remind you that the Ohio Secretary of State's office WILL NEVER send businesses unsolicited documents for signature.

If you believe you received a suspicious email or are unsure about the legitimacy of a correspondence from our office, please email us at business@OhioSoS.gov or call 877.767.3452.

5 Tips to Identify a Phishing Email
 
1.  Check the Sender's Address Carefully
Phishing emails often look like they come from trusted sources, such as banks or government offices, but the sender's email address is slightly incorrect, for example, [support@paypa1.com] instead of [support@paypal.com]
 
2.  Watch for Urgent or Threatening Language
Phishers often try to create panic or urgency ("Your account will be locked in 24 hours!") to make you act without thinking.
 
3.  Inspect Links Before Clicking
Hover over links (without clicking!) to preview the web address. If the link doesn't match the legitimate domain of the company, or looks suspiciously long, includes random characters, or uses unfamiliar domains, it's probably a phishing attempt.
 
4.  Look for Spelling, Grammar, and Formatting Errors
Professional organizations usually proofread their messages. Poor grammar, awkward phrasing, or strange logos and design inconsistencies are clear signs of phishing.
 
5.  Don't Trust Unexpected Attachments or Requests for Sensitive Info
Phishing emails often include malicious attachments or request personal information like passwords, Social Security numbers, or financial details.