Why did the calls start the week your SAM.gov registration went active? Your entity data is public, and marketers read it. For a contractor chasing federal or municipal work, the decision is how to verify each pitch inside SAM.gov or fsd.gov, whether to keep public search on, and never to pay a .com to register or renew.
General info, not legal advice or financial advice.
Why did the calls start right after I registered in SAM.gov?
Because public search shows a lot. The Federal Service Desk article on public search (KB0017554) lists what a public SAM.gov entity search displays: company name, Unique Entity ID, CAGE code, physical and mailing addresses, business types, NAICS codes, PSC, disaster response information, representations and certifications, and point of contact names and physical addresses: https://www.fsd.gov/gsafsd_sp?id=kb_article_view&sysparm_article=KB0017554
The same article says sensitive items such as your tax ID, financial information and email addresses are not shown in public search. But a company name, a contact's name, an address and a NAICS code for paving or roofing are enough for a marketer to match a phone number from other lists.
GSA says it plainly in its vendor alert: these schemes "attempt to use public information" about registered vendors: https://content.govdelivery.com/accounts/USGSA/bulletins/358af1f
New registrants in recent government contracting threads describe the same flood: renewal pitches from .com senders that quote their CAGE code, and a few owners who paid four-figure "registration" fees before learning SAM charges nothing.
Which SAM messages are real, and which are marketing?
GSA's alert gives a short test. SAM.gov will never:
- Ask for personal information anywhere except inside SAM.gov itself
- Ask for money, or threaten legal action or liability
- Ask you to call or text anybody
- Send a link that does not end in .gov
- Advertise on social media
GSA also says the government will never ask you to pay to register, update or renew, and that real SAM.gov emails come from a .gov address. A phone pitch that opens with "your SAM renewal is overdue" fails test three before you say a word.
A paid helper is not automatically fake. GSA notes some companies sell registration help, and that a site asking for money is not a government site. The fee-scam version, a fake credentialing invoice, is covered in https://mcafax.com/notebook/scam-report-fake-gsa-credentialing-fee
Should I turn off public search to stop the calls?
Usually not, if you want public work. The FSD article says you can deselect the public search checkbox. Then your record is visible only to you, users with a role in your entity, and federal government users.
The tradeoffs are in the same article:
- State and local governments that may want to do business with you cannot see you.
- Subcontractors who opt out are not visible to prime contractors.
- Certain SBA programs, such as HUBZone or 8(a) certification, require you to be in public search.
- Your data is still available under FOIA and in data extracts and API data.
So opting out cuts visibility to the buyers and primes you registered for, while the data feeds marketers use keep running. For a sub hoping a prime finds it, that trade is usually backwards. Keep the record visible and filter the noise.
What is the 5-minute verify routine for every SAM pitch?
Do not use the link, number or attachment in the message.
Type sam.gov into your browser, sign in, and check your registration status and expiration date yourself.
If something looks wrong, open a ticket at https://www.fsd.gov , the official help desk GSA points vendors to.
If a caller says they are from SAM.gov or GSA, end the call. Use the Part 1 script if you want a cleaner exit: https://mcafax.com/notebook/stop-the-calls-part-1-the-script
Log the sender, the date and what they quoted (CAGE code, expiration date) in your call log: https://mcafax.com/notebook/toolkit/call-log-template . If money or card details changed hands, report it at https://reportfraud.ftc.gov
Worked example
All names and numbers are made up.
Keystone Concrete registered in October to chase a county sidewalk program. In three weeks it logged 14 pitches by phone and email. One email quoted Keystone's CAGE code and asked $1,450 to "complete renewal." The office manager signed in to SAM.gov herself and saw the registration active for most of a year. Five minutes, no payment, and the email went into the log.
Where do I go next?
The full stop-calls playbook: https://mcafax.com/notebook/stop-mca-broker-calls . Public jobs still need cash for mobilization and payroll, so keep the contractor funding guide handy: https://mcafax.com/notebook/construction-business-loans
