July 20, 2026
The FDA is reminding businesses that it is important they register their food facilities with the FDA only when required and to protect their Food Facility Registration (FFR) information from potential misuse.
The FDA has become aware of a number of issues regarding when registration is required and potential misuse of FFR, including:
- An uptick in businesses registering their facilities with the FDA when they are not required to.
- Third-party businesses or “registrars” requesting FFR number, PIN, FIS-FURLS username, and/or FIS-FURLS password to verify registration status.
- The TikTok Shop and other third-party seller platforms asking food companies to provide a copy of their FDA Food Facility Registration, or a certificate, as part of their product-listing process.
The above issues can create problems for both these businesses and for the FDA, including:
- Security Risks: Having an FFR number when you don’t need one, and then sharing it with third-party platforms, creates opportunities for bad actors to misuse your registration information for fraudulent purposes. When you provide your FFR number and PIN (or username and password), these entities can link your FFR to their own FIS-FURLS accounts. Once linked, they can view, change, or even cancel your FFR. To check your FFR status always use the official FDA website.
- Regulatory Confusion: Registering when exempt or otherwise not required to may subject your facility to unnecessary inspections or create confusion about your compliance obligations.
- Straining FDA Resources: Unnecessary registrations divert FDA resources away from monitoring facilities that are required to register, including those that pose increased food safety risks.
If you are registered with the FDA, it is critical to safeguard your business’ FFR information. Below are some steps you can take to keep your business’ information safe:
- Never share your FIS-FURLS username and password for any FDA registration system. Each FIS-FURLS account is designated for the individual who created it and should not be shared. If additional personnel are desired to help manage registrations or other submissions, an account holder may create subaccounts for those personnel as necessary.
- Remember that the FDA does not require you to share your FFR number with third parties. FFR information is not public. However, for imports, a facility may need to provide its FFR number to the downstream commercial entity submitting prior notice to FDA for an imported food (see 21 CFR part 1, subpart I). Note that the FEI (FDA Establishment Identification) number is a separate, unique public identifier that can be looked up via FEI Search Portal.
- Consider cancelling your FFR and re-registering your facility if you’ve already shared your number and/or PIN in error.
Remember not all food businesses are required to register with the FDA. Understanding whether your company must register is the first step in compliance. Food facilities that manufacture/process, pack, or hold food must register unless exempt (21 CFR 1.225; 21 CFR 1.226). Private residences are not considered facilities (21 CFR 1.227). See Section II.B of the FDA Guidance for Industry: Questions and Answers Regarding Food Facility Registration for assistance in determining if an exemption applies.
Additional Information
- Information on Food facility registration
- Food Facility Registration Requirements: 21 CFR Part 1, Subpart H
- Information on exemptions: 21 CFR 1.226 and Section II.B of the Guidance for Industry: Questions and Answers Regarding Food Facility Registration (Seventh Edition)
- If you suspect misuse or fraudulent use of your registration number, report it to the FDA.