Phishing schemes target cannabis operators across multiple statesCannabis operators and industry professionals across multiple states are reporting a wave of phishing attempts designed to exploit familiar names, regulatory obligations, and routine business communications. Clicking the invitation may direct the recipient to a page that requests an email address, password, phone number, or verification code. The DCC said legitimate information requests will come from an agency employee using an email address ending in @cannabis.ca.gov . (Greenway has verified instances in which the originating email address was compromised rather than spoofed.) Using unique passwords and multifactor authentication for email, regulatory, banking, payroll, and point-of-sale accounts.