Suspicious-Scam "User has invited you to view the file"Untitled" " emails being sent to contacts

Hi ​@rsimons, thanks for flagging this! 

I flagged this to our Security team, and they confirmed that this looks like a legitimate Figma file invite. Figma owns no-reply@email.figma.com.

If this user does not have a Figma account, it is expected that without a Figma account, they can/will receive file invites such as this one. Again, the email address corresponds to our real outgoing notifications email for file invites. 

I can see that you’ve redacted who the file invite was from, but I would advise the user reach out to that specific user who sent the invite directly to check if they intended to send out the file invites, especially since this sounds unexpected to everyone. 

Hello ​@djv.  Here’s a little more information about the issue.  I work for an IT support company and we support the user that these emails are showing were sent from, when she did not send these emails.  She called us because her bank notified her that they received one of these invitation emails.  That’s when I noticed that one of these emails was also sent to me.  Neither of us have a Figma account, the “sender” or myself, so I’m confused how the Figma database got her information and her contact information.  This is why I’m wondering if there has been a compromise of Figma’s system, or if someone is relaying these emails through Figma’s servers.

Thanks.

Thanks for following up, ​@rsimons! 

That is very odd. We’re not aware of anything compromised on our end. These invite emails are only be generated when inviting others within Figma.

Can you please provide this user’s email address via a private message. We can create a ticket to get them connected with the support team to investigate further.