An important reminder for members to stay alert, following some reports of spoofed Dropbox DocSend emails impersonating GMCU and other trusted organisations in our community, which are designed to trick people into clicking unsafe links.
Online scammers continue to refine their techniques, often making fraudulent messages look legitimate. Staying vigilant helps protect your personal information and your money.
What these fake emails look like
We have received multiple reports of DocSend‑style emails where:
- The sender’s email address is not from @gmcu.com.au (often appearing as an @outlook.com address)
- The email urges you to “view” or “review” a document
- The link leads to a website that is not affiliated with DocSend
These emails can appear convincing, so careful checking is essential.
How to spot a fraudulent DocSend or GMCU email
✔ Check the sender’s address
Scammers may spoof a name, but the domain (the part after @) is usually a giveaway. Genuine GMCU emails only come from @gmcu.com.au.
Legitimate DocSend emails typically come from docsend.com or dropboxmail.com and are used for secure document sharing.
✔ Hover before clicking links
Before clicking “View Document,” over links before clicking to ensure they direct to "docsend.com/view/..." rather than a misspelled or different domain, do not click it.
✔ Watch for other red flags
Be cautious of emails that include:
- Unexpected or urgent requests
- Poor grammar or unusual formatting
- Suspicious attachments such as .zip or .exe files
- Anything that feels out of the ordinary
What to do if you receive a suspicious email
If you receive an email that seems unusual or claims to be from GMCU or DocSend:
- Do not click any links or attachments.
- Forward the email as an attachment to GMCU for verification.
- Delete the email from your inbox and from your deleted items folder.
- If you are unsure, contact us directly. We are here to help.
Your security is our priority
We take the security of your personal and financial information seriously. We will never ask you to open unexpected attachments or provide sensitive information through email links. If you ever have concerns about an email you receive, please reach out to us.
