Phishing Campaign: “Complete with DocuSign Updated Employee Compensation & Incentive Framework.docx”

February 25, 2026

ADP’s Global Security Organization is aware of phishing emails being sent to ADP clients. These messages may contain malicious content and do not originate from ADP. ADP is taking appropriate actions to address this event.

Please see the example below, which may vary in content and be alert for this fraudulent email. It’s important that all suspicious emails are reported to ADP (see instructions below).

How to Report a Phishing Email

Follow the instructions below to report a suspicious email to ADP.

• Do not click on any links or open any attachments within the message.
• Forward the email as an attachment within a new message to abuse@adp.com.
• Delete the original email once you’ve received confirmation of receipt from abuse@adp.com.
• If you clicked any links or opened an attachment in the email, immediately contact your local IT support team for further action.