Certified organic operations should be on alert for a phishing scam misusing USDA branding to deceive recipients into possibly sharing sensitive information. CCOF has heard from clients that fraudulent emails are being sent under false pretenses, using USDA logos, banners, and other official-looking elements to appear legitimate.
These emails, claiming to come from the USDA, have been sent from fake email addresses such as:
Fake Sender: Hillary Brown, Compliance Manager AMS-USDA <hillary.brown@organic.ams.usda.fed.agriculture.marianaciriani.com>
Subject: Organic Integrity Certification USDA 44876
These phishing emails attempt to trick recipients into clicking on fraudulent links or providing confidential details, falsely claiming that failure to comply will result in certification suspension or revocation. However, these messages do not originate from the USDA.
Key warning signs of phishing emails include:
✅ Suspicious sender email addresses mimicking official domains
✅ Urgent demands for immediate action
✅ Generic greetings and missing contact details
✅ Links that, when hovered over, show a mismatched or suspicious URL
✅ Poor grammar, spelling errors, or inconsistent formatting
✅ Suspicious attachments asking to be downloaded
What to Do If You Receive a Suspicious Email
🚨 Do not click any links, respond, or provide information.
🚨 Verify the sender’s email address by checking what appears between brackets [ ] or angle brackets < > in your email program. Authentic USDA, AMS, and NOP emails always come from usda.gov.
🚨 If you have already interacted with a phishing email, immediately reset your passwords, notify your IT department, and run a malware scan on your device.
Protecting the Organic Community
We urge USDA to take action by issuing a public notice and posting a visible warning on the Organic Integrity Database to help safeguard certified operations. Increased awareness and vigilance are essential in preventing fraud and protecting organic businesses from cyber threats.
