Is this email really from DulySigned?

Paste the link from the email. Do not open it first.

Or check these four things yourself

  1. The link starts with https://dulysigned.app/s/. Nothing else. Not a look-alike such as dulysigned-docs.com.
  2. The email comes from no-reply@dulysigned.app, and the sender name ends with "via DulySigned".
  3. DulySigned never attaches a document to an invitation, and never asks for a password, bank details, or a payment.
  4. The email names the person who sent it. If you did not expect a document from them, ask them directly, by phone or a message you started.

Check a signed PDF

Pick a signed PDF from DulySigned. Your browser calculates its fingerprint (SHA-256). Only the fingerprint goes to DulySigned, never the file.

The DulySigned seal

DulySigned seals each signed PDF with a digital seal and a trusted timestamp. A PDF reader shows the seal as broken if anyone changes the file. Adobe Reader can say that it does not know the signer, because the seal certificate is DulySigned's own. To confirm it, compare the certificate fingerprint in the PDF's signature panel with this one:

SHA-256 24:28:2A:76:CD:CE:81:FD:D8:08:41:ED:C7:F6:1F:B0:9F:39:84:16:E2:61:B5:5B:91:F0:4F:4D:A5:70:6B:0E

Download the seal certificate. In Adobe Reader you can add it as a trusted certificate. The seal protects the file. Each signature stays a simple electronic signature.

PDFs sealed before 15 November 2026 carry the seal of SignKaro, the former name of DulySigned. Its fingerprint is:

SHA-256 FF:9A:16:F4:70:17:2E:5F:6B:9C:C3:1B:E0:EB:2C:0A:03:E0:B2:82:EA:D9:81:46:5C:A2:80:74:0B:30:45:46

Download the SignKaro seal certificate.

Got a suspicious email? Do not open the link. Forward it to abuse@dulysigned.app.