A user reported that several people in her contact list have received this email today and she doesn’t even have a Figma account. Was there a recent compromise to Figma’s system? If not, what is causing this? Emails are being sent from Figma’s domain, no-reply@mail.figma.com. See attachment for more information. Need to know what caused this and how to prevent future emails like this.
Hi
I flagged this to our Security team, and they confirmed that this looks like a legitimate Figma file invite. Figma owns no-reply@email.figma.com.
If this user does not have a Figma account, it is expected that without a Figma account, they can/will receive file invites such as this one. Again, the email address corresponds to our real outgoing notifications email for file invites.
I can see that you’ve redacted who the file invite was from, but I would advise the user reach out to that specific user who sent the invite directly to check if they intended to send out the file invites, especially since this sounds unexpected to everyone.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.