Both the FDA and the CBP (Customs and Border Protection) are issuing scam warnings to the food industry. Both are seeing an increasing trend of communications to food manufacturers and importers, in which they are posing as government or registrar representatives to solicit secure company and personal information.
The fraud is being focused, in particular, on Food Facility Registration information and import IEEPA refunds.
Food Facility Registration (FFR) Fraud. Issues regarding potential FFR fraud for which FDA is issuing warnings is:
- Third-party businesses or “registrars” requesting FFR number, PIN, FIS-FURLS username, and/or FIS-FURLS password to verify registration status.
- The TikTok Shop and other third-party seller platforms asking food companies to provide a copy of their FDA Food Facility Registration, or a certificate, as part of their product-listing process.
Sharing registration information with third-party platforms creates opportunities for it to be misused for fraudulent purposes. Anyone who has your FFR number and PIN (or username and password) can link your FFR to their own FIS-FURLS accounts, then view, change, or even cancel your FFR.
IEEPA Refund Fraud. CBP has issued warnings that Scammers are using emails, notices, social media and other communications to solicit secure company and personal information from importers related to the International Emergency Economic Powers Act (IEEPA) duty refund process. The scams include unsolicited emails, calls, or texts; requests for personal or financial information; and offers of refunds in exchange for data.
CBP advises importers to be wary of pressure to act quickly; watch for poor grammar, spelling errors, or suspicious links in solicitation emails; and report suspicious activity to IEEPAFraud@cbp.dhs.gov. If you do receive a request from CBP to verify your identity with additional information, check that the request is from an official CBP email address (ending in “@cbp.dhs.gov” or “@associates.cbp.dhs.gov”)
Both FDA and CBP have also provide advice on protecting your information and your business.
FDA advice related to FFR and FIS-FURLS information:
- Do not share your FIS-FURLS username and password for any FDA registration system. Each account is designated for a single individual; if additional personnel are desired to help manage registrations, etc., the account holder can create subaccounts.
- The FDA does not require you to share your FFR number with third parties, and FFR information is not public. However, for imports, a facility may need to provide its FFR number to the downstream commercial entity submitting prior notice to FDA for an imported food.
- Consider cancelling your FFR and re-registering your facility if you’ve already shared your number and/or PIN, or you feel your registration is compromised in any way.
CBP recommendations related to IEEPA for importers:
- Ensure your ACE account owner information is accurate and up to date. Do not share your ACE passwords.
- Do not respond to unsolicited emails about IEEPA refunds.
- Remember that CBP will not independently schedule email reports.
- Always use official CBP email addresses for any questions or concerns.
- Beware of phishing attempts: always verify the sender and avoid clicking suspicious links.
- Never send your information to unverified parties.
With both FDA and CBP seeing an increase in fraudulent outreach to the food industry, and the facility registration period coming up, food manufacturers and importers should be hyper-alert for such scams.
If in doubt about any communications, reach out to the official government site or your trusted partner to ensure its validity. TAG is an industry-trusted consulting group, with experts who can assist with your FFR and import registrations and other activities. Give us a call!
In Summary: Both the FDA and the CBP (Customs and Border Protection) are issuing scam warnings to the food industry. Both are seeing an increasing trend of communications to food manufacturers and importers in which they are posing as government or registrar representatives to solicit secure company and personal information. To protect yourself, do not share your FIS-FURLS username and password for any FDA registration system. Ensure your ACE account owner information is accurate and up to date. Do not share your ACE passwords. Be vigilant and do not click on anything that appears suspicious.
