USDA has issued an alert regarding a phishing scam targeting organic certifiers and certified operations. Fraudulent emails, falsely displaying the USDA logo, are being sent to unsuspecting recipients in an attempt to obtain sensitive information. Officials urge individuals to remain vigilant, verify the authenticity of emails, and avoid sharing personal or business data with unverified sources.

What to Be Aware of:

Always check the Sender; if it is not an email address associated with the organization, then it is likely SPAM. Keep an eye out for emails with the following information:

• Fake Sender: amendez@rootedschool.org
• Email Subject: 2025 information verification/update

Phishing emails are deceptive messages designed to steal personal or business information, such as email passwords. These fraudulent emails often appear to come from a trusted organization to increase the likelihood of engagement. In this case, the scammers are using the USDA logo to make their emails appear legitimate.

The email may ask you to verify information, click on links, or enter sensitive details. It may also include threats to suspend or revoke your organic certification. However, these messages are NOT from the USDA and should not be trusted.

How to Protect Yourself:

Do not respond to these emails, click any links, or provide any information.

• USDA, AMS, or NOP emails will always come from the “usda.gov” email domain.
• To verify an email’s authenticity, check the email address (not just the display name). Fraudulent senders often spoof legitimate names but cannot use a “usda.gov” email domain.

Signs of a Phishing Email:

• The Sender’s address may closely resemble, but not match, a legitimate government or business email.
• The message demands urgent action or threatens penalties.
• The email has generic greetings and lacks proper contact information.
• Links in the email may not match their actual URLs when hovered over.
• The message contains spelling mistakes, poor grammar, or unusual formatting.
• Suspicious attachments request downloads or other actions.

What to Do if You Receive a Suspicious Email:

If you receive an email claiming to be from the USDA, AMS, or NOP and are unsure of its legitimacy:

• Do not click any links, respond, or provide information.
• If you have already clicked on a link or provided sensitive information, report it immediately to your organization’s IT department, reset your passwords, and scan your device for malware.