Red Flags to Avoid When Buying Hemp Products Online

Understanding the Unregulated Hemp Market: Why Buyer Beware Matters

The hemp industry exploded after the 2018 Farm Bill legalized hemp nationwide, but it came without guardrails. Unlike FDA-regulated supplements or pharmaceuticals, hemp products operate in a largely unpoliced marketplace where anyone can claim anything about their products—and many do. The USDA has a hemp licensing program, but compliance is inconsistent across states. Federal oversight exists only for delta-9 THC limits (<0.3% by dry weight), not for potency claims, pesticides, contaminants, or ingredient accuracy.

This creates a perfect storm for fraud, mislabeling, and unsafe products. Low-quality vendors cut corners on testing, use undisclosed additives, or even spike products with synthetic cannabinoids. Meanwhile, consumers—many seeking alternatives to traditional cannabis markets or looking to stay within federal law—have little way to verify what they're actually buying. That's why learning to spot red flags isn't just smart: it's essential.

At Ember Trees, we've seen the industry from the inside, worked directly with farms and manufacturers, and learned exactly what separates trustworthy brands from fly-by-night operators. This guide walks you through the seven most critical red flags you should watch for when shopping online, how to verify a brand before you buy, and how to protect yourself in a market that's still finding its footing.

Red Flag #1: No Certificate of Analysis (COA) or Missing Lab Data

What a COA Is and Why It Matters

A Certificate of Analysis is your window into what's actually in a product. It's a third-party lab report that tests for cannabinoid potency (THCA, THC, CBD, etc.), terpenes, pesticides, heavy metals, microbial contamination, and sometimes mycotoxins and solvents. A legitimate COA includes:

• The lab's name, license number, and accreditation status
• The product tested, batch number, and test date
• Exact potency percentages (e.g., "27.3% THCA")
• A full pesticide and microbial panel
• The lab director's signature and ISO certification

Without a COA, you literally don't know what you're buying. You don't know if the THCA percentage is 15% or 35%. You don't know if pesticides are present. You don't know if the product is contaminated with bacteria or mold. Many online customers assume "hemp from a reputable source" means it's been tested—but vendors often skip third-party testing altogether to save money.

What Happens When COAs Are Missing or Hidden

When a brand doesn't provide a COA upfront or buries it deep in their website, that's a massive red flag. Some vendors claim they "test everything" but won't provide actual lab results. Others provide results only upon request, hoping most customers won't ask. A few deliberately hide poor results: low potency, pesticide residue, or microbial issues that would scare buyers away.

The most egregious example is vendors who provide a generic COA that doesn't match their current inventory. They might show a test from Batch A (testing 30% THCA) while selling Batch B (actually 18% THCA) from the same farm. Without batch-specific tracking, you have no way to know what you'll receive.

How to Check: Your COA Verification Checklist

Before buying, do this: go to the product page, find the COA, and check these boxes:

• Is it visible without digging? Legitimate vendors put COAs right on the product page or easy-to-access download.
• Does the batch number on the label match the COA? Your shipment should arrive with a batch number you can cross-reference.
• Is the lab accredited? Google the lab name + "ISO 17025" accreditation. Accredited labs follow strict protocols.
• Is the test date recent? Within the last 6 months is reasonable; anything older than a year is outdated.
• Does it include a full panel? Pesticides, heavy metals, microbial (E. coli, salmonella), and potency at minimum.
• Can you verify the lab's signature? Many labs publish QR codes or allow you to verify results on their website.

Red Flag #2: Vague or Missing Lab Data

The "Third-Party Tested" Trap

You'll see "third-party tested" plastered everywhere online. But what does it actually mean? Third-party testing just means someone outside the company ran the test—it doesn't guarantee quality, recency, or transparency. A vendor could test one batch from six months ago, pass it, and now label all their inventory "third-party tested" even though current stock is completely different.

Red flags in vague lab claims:

• "Third-party tested" with no link, QR code, or actual COA attached
• "Lab tested" without naming the lab or its accreditation
• "We test every batch" but only one generic COA shown for dozens of products
• COAs that show only potency (THCA %) but no pesticide/microbial data

Incomplete Lab Panels: What's Missing?

Some vendors do provide COAs but omit crucial tests. For example, a report might show THCA potency and cannabinoid profile but skip the pesticide panel entirely. This isn't accidental—it's cost-cutting. Full-panel testing is more expensive, so low-integrity vendors cherry-pick which tests to run.

A complete hemp panel should include:

• Potency: THCA, THC (delta-9 and delta-10), CBD, CBN, CBC, and minor cannabinoids
• Pesticides: At least 37 pesticides (EPA list for food crops)
• Heavy metals: Cadmium, arsenic, lead, mercury
• Microbial: E. coli, salmonella, total aerobic count
• Mycotoxins: Aflatoxins, ochratoxin A
• Residual solvents: If extracted products (concentrates, vapes)

If your COA is missing any of these, ask the vendor why. A legitimate company will explain the reasoning or provide the full panel upon request.

Outdated COAs and Batch Mismatch Issues

Even with a COA present, age matters. Hemp flower degrades over time; potency can decline 10-15% over several months depending on storage. A COA from last year isn't reliable for this year's product. Similarly, if the batch number on your COA doesn't match the batch number on your label when it arrives, something's wrong—you may not have received what was tested.

Always cross-check batch numbers before opening your shipment.

Red Flag #3: Unrealistic Potency Claims

The 99% THCA Fantasy

You've probably seen it: "99% THCA flower," "92% pure extract," "strongest hemp on Earth." These claims should make you immediately suspicious. Why? Because it's botanically impossible for flower, and chemically suspect for concentrates.

Hemp flower—the dried plant material—contains not just THCA but also CBD, other minor cannabinoids, plant matter, water, terpenes, and more. Even the best, most potent flower maxes out around 30-35% THCA in real-world conditions. Laboratory-grade cannabinoid isolates can reach 99% purity, but that's a white powder in a lab, not flower or a practical consumer product.

When a vendor claims 99% THCA flower, they're either:

• Misrepresenting lab results (showing isolate potency, not flower potency)
• Lying outright
• Selling something that isn't actually hemp flower (possibly synthetic or adulterated)

Reality Check: What Real Hemp Potency Looks Like

Premium THCA flower from trusted farms ranges from 20-35% THCA. Top-shelf strains from established brands sit in the 25-32% range. Anything above 35% is extremely rare and should come with a corresponding COA and premium price. If you see 50%, 75%, or 99% THCA flower selling for $200/ounce or less, it's not what it claims to be.

For reference, premium flower typically costs $10-18 per gram ($280-500/oz) for truly high-potency products. If a vendor is selling "99% THCA" flower for $150/oz, do the math: something doesn't add up.

The Too-Good-to-Be-True Premium

This extends beyond just potency claims. Unrealistic claims include: "cures anxiety in 5 minutes," "30-day money-back guarantee on used products," "never burns out or loses flavor," or "industry-exclusive genetics found nowhere else." These marketing tactics prey on inexperienced buyers. Reputable brands make honest claims about their products and acknowledge individual variation in effects.

Red Flag #4: No Clear Origin or Farm Information

Untraceable Supply Chains

Where did your hemp come from? If a vendor can't or won't tell you, that's a red flag. Transparency-focused brands will tell you the farm name, location, farming practices, and how the product was processed. They might even include this on the packaging or website.

When vendors are vague—"sourced from premium U.S. farms" without naming them, or "indoor-grown premium genetics" with no details—it suggests they may not actually know where it came from, or they're hiding something. Some vendors source from multiple international suppliers and mix batches without tracking which came from where.

Overseas Hemp and Regulatory Concerns

The U.S. hemp market includes products sourced internationally, often from China, India, or Eastern Europe where regulations are even looser than in the U.S. While some international hemp is fine, the lack of oversight creates higher contamination risks—pesticides banned in the U.S., heavy metals, and mold are more common in unregulated markets.

A responsible vendor will either source exclusively from U.S. farms or clearly disclose international sourcing and provide extra testing documentation to verify safety.

Seed-to-Sale Documentation and Regulatory Compliance

Many states require "seed-to-sale" tracking for hemp: documentation from seed purchase through cultivation, harvest, processing, and distribution. Vendors operating in regulated states have this documentation. If a vendor is selling across multiple states but can't speak to compliance or traceability in your state, that's suspicious.

Ask: "Can you provide farm location, USDA hemp license information, and the harvest date?" If they hesitate or refuse, move on.

Red Flag #5: Synthetic Additives or Mystery Extracts

The Synthetic Cannabinoid Problem

This is where things get dangerous. Some unscrupulous vendors add synthetic cannabinoids—lab-created compounds designed to mimic natural cannabinoids—to bulk up potency numbers cheaply. Synthetics like K2 or Spice are known to cause rapid heart rate, extreme anxiety, seizures, and psychosis. They're illegal in many states and extremely risky.

How do synthetics end up in hemp products? A vendor buys low-potency hemp flower, sprays it with a cheap synthetic cannabinoid powder, and suddenly it tests at 40% "THCA." The COA might even show high potency if the lab isn't sophisticated enough to distinguish synthetics from natural cannabinoids.

How to Spot Synthetic Cannabinoids

Red flags include:

• Suspiciously high potency from an unknown brand at a low price
• Effects that feel "unnatural," harsh, or dangerous (extreme paranoia, rapid heart rate, dissociation)
• COAs that show THCA but no terpene profile (natural flower always has terpenes)
• Products that smell chemical or off—real hemp has a recognizable cannabis smell
• Vendors who won't explain how they achieve such high potency

Mystery Extracts and Unlabeled Additives

Some vendors add "proprietary blends," "premium extracts," or "natural flavor enhancers" without explaining what they are. When a product's COA doesn't match its ingredient list, or when additives are mentioned on packaging but not in the lab report, that's a problem. You deserve to know exactly what you're consuming.

Red Flag #6: Sketchy Shipping, Packaging, or Payment Practices

Bitcoin-Only or Untraceable Payment Methods

While some vendors accept cryptocurrency for legitimate reasons (decentralization preference), Bitcoin-only payment is often a red flag. Why? Because once the transaction completes, there's no recourse if the product never arrives, is mislabeled, or causes problems. You can't do a chargeback on Bitcoin.

Legitimate vendors accept credit cards, debit, and PayPal—payment methods that include buyer protection.

Unmarked or Sketchy Shipping

Your hemp products should arrive in discreet packaging that complies with USPS regulations (professional labeling, no obvious cannabis references), but the package itself should be clearly labeled with a tracking number, return address, and proper postage. Red flags:

• No tracking number provided
• Packages that arrive damaged or opened
• Blank or handwritten labels
• Vendors who refuse to ship to certain states (more than the actual legal restrictions)

Ember Trees ships via USPS with full tracking, professional labeling, and discrete packaging nationwide to 45 states.

Fake Reviews and Review Manipulation

Check product reviews, but be skeptical. Red flags in review sections:

• All five-star reviews with no variation
• Reviews that sound generic or copied
• No verified purchase badges (if the platform supports them)
• Suspicious timing (100 reviews posted in one week)

Legitimate product reviews vary—some 5-star, some 3-4 star. If everything is perfect, it's probably fake.

No Real Customer Service or Return Policy

A vendor's willingness to stand behind a product after the sale tells you how confident they are in it. Before you check out, look for a published return or replacement policy, a working phone number or email, and a physical business address. Then test it: send a pre-sale question and see whether a human answers. Operations that plan to be around next year answer the phone. Operations that plan to disappear do not.

Specific warning signs in this category:

• A contact page with only a web form and no email address, phone number, or business address
• No return policy at all, or a policy that voids itself the moment a package is opened
• Support emails that go unanswered for a week or come back as generic auto-replies
• Terms of service copied from another site, sometimes still naming the other company
• A domain registered within the last few months selling a large, mature-looking catalog

None of these are proof of fraud on their own. Together, they describe a business that has not invested in being accountable to its customers.

Red Flag #7: Medical Claims or Miracle Cure Marketing

What the FDA Does and Doesn't Allow

Hemp vendors cannot make medical claims. That means no "cures anxiety," "treats insomnia," "relieves pain," or "prevents seizures." The FDA strictly prohibits marketing hemp or cannabinoids as treatment or cure for disease. Companies that make these claims are breaking federal law and operating without oversight.

What IS allowed:

• "May promote relaxation" or "Some users report feelings of calm"
• "Popular among those seeking a natural alternative"
• "Many people find hemp beneficial for their wellness routine"

Vendors walking this line carefully—using language like "many users report" or "designed for wellness"—understand the rules. Vendors shouting "CURES ANXIETY!" do not.

Red Flags in Medical Marketing

Watch for:

• Before-and-after testimonials claiming medical improvement
• Unverified health claims on product pages
• Comparison to prescription medications
• Promises of clinical results without studies
• Testimonials from "doctors" (often fake credentials)

What to Do If You Already Bought Something Questionable

Stop Using It and Document Everything

If a product looks, smells, or feels wrong—visible mold, a chemical smell, effects that are unusually harsh or frightening—stop using it. Do not throw it away yet. Photograph the packaging, the batch number, the product itself, and the original listing or order confirmation. If you paid by card, save the transaction record. That documentation is what makes a refund request, a chargeback, or a regulatory complaint actionable rather than a story.

Contact the Seller in Writing

Email rather than call, so there is a written record. State the order number, the batch number, what is wrong, and exactly what you want—a refund, a replacement, or the batch-specific COA you were never given. Keep it factual and unemotional. A legitimate business will resolve it quickly because a single refund costs them far less than a public complaint. A vendor who stalls, blames you, or goes silent has told you what kind of operation it is.

Escalate Through the Right Channels

If the seller will not resolve it, you have real options, and they work better in combination:

• Card dispute: Contact your card issuer and dispute the charge as "item not as described." This is the single biggest reason to avoid crypto-only vendors.
• State agriculture department: Hemp is an agricultural product, and most states regulate it through their department of agriculture. They investigate mislabeling and contamination complaints.
• FDA MedWatch: If you experienced an adverse reaction, report it. These reports build the record regulators use to act on bad actors.
• FTC: False advertising and unsupported health claims fall under FTC jurisdiction.
• Public review: Leave an honest, specific, factual review. Vague anger helps nobody; a review naming the batch number and the exact problem helps the next buyer.

Seek Medical Attention When It Matters

Most uncomfortable hemp experiences resolve on their own with time, hydration, and a calm environment. But if you experience a racing heartbeat that will not settle, chest pain, severe vomiting, seizure activity, or a level of disorientation that frightens you or the people around you, get medical help. Bring the packaging with you so clinicians know what you took. Symptoms like these are more consistent with synthetic cannabinoids or contamination than with natural hemp, and that is worth taking seriously rather than waiting out.

How to Verify a Hemp Brand Before Buying

The Pre-Purchase Verification Checklist

Before you spend money, work through this list:

• COA availability: Is it easy to find? Batch-specific? From an accredited lab? ✓
• Farm transparency: Can the company name the farm and provide location? ✓
• Realistic claims: Do potency, effects, and prices match industry standards? ✓
• Company contact: Is there a phone number, email, or live chat? Can you actually reach them? ✓
• Return policy: Do they offer refunds or replacements if you're unsatisfied? ✓
• Payment security: Do they accept credit cards with buyer protection? ✓
• Shipping transparency: Do they clearly state which states they ship to and delivery times? ✓
• Third-party reviews: Check independent sites like Trustpilot or Google Reviews, not just their own site. ✓
• Better Business Bureau: Look up their BBB rating and complaint history. ✓
• Legal compliance: Do they mention compliance with state and federal laws? ✓

Research Resources

These resources help verify hemp brands:

• USDA Hemp Program: Search licensed farms and check compliance status
• State Agriculture Departments: Most states publish hemp license holders
• Lab Accreditation: ISO 17025 databases verify lab credentials
• Independent Lab Reviews: Some cannabis testing communities track lab reputation

How Ember Trees Measures Up

Ember Trees was built on the principle that customers deserve to know exactly what they're buying. Every red flag in this guide? We've built systems to eliminate them:

COA transparency: Every product has a batch-specific COA from an accredited lab, displayed right on the product page with verification capability. Farm traceability: We work directly with farms—Hometown Hero in Texas, Hye Harvest in Colorado, Willie's Remedy+ in Oregon, and others—and maintain full documentation of sourcing and compliance. Realistic potency: We carry premium THCA flower in the 20-32% range with honest pricing reflecting quality. Full-panel testing: All products include pesticide, microbial, heavy metal, and potency testing. Payment security: We accept all major credit cards, PayPal, and debit cards—all backed by buyer protection. Shipping transparency: We ship nationwide to 45 states via USPS with full tracking, same-day delivery in Central Texas, and 2-5 day delivery everywhere else. Easy contact: Our team is reachable by phone, email, and chat during business hours. Honest marketing: We never make medical claims or promise unrealistic effects—we just sell premium hemp products from brands we trust.

Frequently Asked Questions

What should I do if I receive hemp that doesn't match the COA?

Contact the vendor immediately with photos of the product and the batch number. Request a replacement or refund. If they refuse, dispute the charge with your credit card company if possible, and report them to your state's agriculture department.

Is hemp flower from China safe?

International hemp can be safe if properly tested, but Chinese hemp especially carries higher contamination risks due to less stringent environmental and agricultural standards. U.S.-sourced hemp with full-panel testing is generally the safer choice.

How do I know if a brand is actually third-party tested?

Ask for the lab name, accreditation number, and COA directly. Visit the lab's website to verify they're real. Legitimate labs often allow you to enter the COA ID to verify results authentically.

Can synthetic cannabinoids harm you?

Yes. Synthetic cannabinoids like K2 and Spice have caused rapid heart rate, seizures, extreme anxiety, and in extreme cases, death. They're not natural hemp and are illegal in most states. If a product makes you feel dangerously unsafe, stop using it and seek medical attention if needed.

What's the difference between THCA flower and delta-9 THC flower?

THCA is the raw, non-intoxicating form found in living hemp plants. When heated (smoked, vaporized, or decarboxylated), THCA converts to delta-9 THC, which is intoxicating and federally restricted. Raw THCA flower is federally legal; delta-9 THC products are not.

Should I be worried about delta-8 or delta-10 in my THCA products?

Delta-8 and delta-10 are minor natural cannabinoids found in trace amounts in most hemp. Small amounts are not a concern, but artificially concentrated delta-8/10 (spray-added to bulk potency) is similar to synthetic concerns. Always check your COA to see if these are natural trace amounts or artificially added.

Conclusion: Staying Safe in an Evolving Market

The hemp market will eventually mature into fuller regulation, but right now, buyer vigilance is your best protection. By learning to spot these seven red flags—missing COAs, vague lab data, unrealistic claims, untraceable origins, suspicious additives, sketchy shipping, and medical marketing—you can confidently avoid low-quality and potentially dangerous products.

Ready to shop from a brand you can trust? Explore Ember Trees' carefully vetted collection of premium THCA flower, pre-rolls, gummies, vapes, and concentrates. Every product comes with a full COA, honest potency claims, and a commitment to transparency. Visit embertrees.com today.