Certified organic operations should be on alert for a phishing scam misusing USDA branding to deceive recipients into sharing sensitive information. CCOF has heard from clients that fraudulent emails are being sent under false pretenses, using USDA logos, the Organic Integrity Database banner, and other official-looking elements to appear legitimate.
These emails, claiming to come from the USDA, have been sent from fake email addresses such as:
- Fake Sender: admin @ organic-ams-usda.gov (<amendez@rootedschool.org>)
- Subject: 2025 Information Verification/update
- Fake Sender: admin @ usda.gov ([bwhiting26 @ springcreekacademy.com])
- Subject: 2025 Certificate Holder Information Verification
How the Scam Works
These phishing emails attempt to trick recipients into clicking on fraudulent links or providing confidential details, falsely claiming that failure to comply will result in certification suspension or revocation. However, these messages do not originate from the USDA.
Key warning signs of phishing emails include:
✅ Suspicious sender email addresses mimicking official domains
✅ Urgent demands for immediate action
✅ Generic greetings and missing contact details
✅ Links that, when hovered over, show a mismatched or suspicious URL
✅ Poor grammar, spelling errors, or inconsistent formatting
✅ Suspicious attachments asking to be downloaded
What to Do If You Receive a Suspicious Email
🚨 Do not click any links, respond, or provide information.
🚨 Verify the sender’s email address by checking what appears between brackets [ ] or carats < > in your email program. Authentic USDA, AMS, and NOP emails always come from usda.gov.
🚨 If you have already interacted with a phishing email, immediately reset your passwords, notify your IT department, and run a malware scan on your device.
Protecting the Organic Community
We urge USDA to take action by issuing a public notice and posting a visible warning on the Organic Integrity Database to help safeguard certified operations. Increased awareness and vigilance are essential in preventing fraud and protecting organic businesses from cyber threats.