In the past day or so, I've received two emails from different .gov addresses that purport to be from Intuit and encourage me to click on a link to "restore access to your QuickBooks account." They aren't pretending to be government addresses. If I click reply, the mail-to field says John.Doe@xxx.gov, just as the email states in the From section.
I have forwarded these emails to the FTC's recommended address for phishing scams, but I'd like to let the agencies involved know that they have compromised accounts. Is there an easy way to do that? I looked on the website of one agency, but there wasn't any contact that seemed right (Texas agriculture.gov).
Would emailing that person (at the compromised address) directly be useful? I don't want to spend all day on this, since I'm working. I just want to give someone a heads up. I was hoping there was a "report misused government email" contact box somewhere, but I can't find anything like that.