Suspicious-Scam "User has invited you to view the file"Untitled" " emails being sent to contacts

Hi ​@rsimons, thanks for flagging this! 

I flagged this to our Security team, and they confirmed that this looks like a legitimate Figma file invite. Figma owns no-reply@email.figma.com.

If this user does not have a Figma account, it is expected that without a Figma account, they can/will receive file invites such as this one. Again, the email address corresponds to our real outgoing notifications email for file invites. 

I can see that you’ve redacted who the file invite was from, but I would advise the user reach out to that specific user who sent the invite directly to check if they intended to send out the file invites, especially since this sounds unexpected to everyone. 

Hello ​@djv.  Here’s a little more information about the issue.  I work for an IT support company and we support the user that these emails are showing were sent from, when she did not send these emails.  She called us because her bank notified her that they received one of these invitation emails.  That’s when I noticed that one of these emails was also sent to me.  Neither of us have a Figma account, the “sender” or myself, so I’m confused how the Figma database got her information and her contact information.  This is why I’m wondering if there has been a compromise of Figma’s system, or if someone is relaying these emails through Figma’s servers.

Thanks.

Thanks for following up, ​@rsimons! 

That is very odd. We’re not aware of anything compromised on our end. These invite emails are only be generated when inviting others within Figma.

Can you please provide this user’s email address via a private message. We can create a ticket to get them connected with the support team to investigate further. 

I’m having the same issue. What is the best way to resolve this? 

Hi ​@jnix - sorry to hear about this. Since your reply was posted to an older thread, I wanted to make sure and emphasize that we are not aware of any kind of security compromise on our end at this specific time (September 2, 2026).

Just to make sure I understand your report: 

Does it appear that your email is sending out this same kind of file invite to contacts you have? And you do not recall creating or having a Figma account?

Is this happening on your particular email, or another person at your company?

If it is another person, please PM me the email address that the invites are coming from. I will connect you with support to investigate this.

In the meantime, I would highly suggest that you take additional security measures to make sure your email address is protected (reset your password, verify MFA, etc). Please contact your IT department for assistance.

I also work for an IT support company and one of our clients is experiencing this issue where emails are being sent from no-reply@email.figma.com, but are acting as the client. They do no have a figma account and have never created one. The recipients of the emails also do not have figma accounts. 

​@jnix Thank you for the clarification. I will need to connect you and your client to our support team, because I do suspect that your client’s email has been compromised (via phishing).

Please PM me the email of the client where the invites are being sent from, as well as the best contact for you as well. 

Thank ​@jnix - just followed up with you via PM. Please take a look when you have a moment, and look out for a support ticket under #2111127. Thank you again for your patience.