Three deaths. Seventy-three hospitalizations. One hundred and eighty reported illnesses in 34 states. That was the toll of the 2024 Diamond Shruumz mushroom chocolate outbreak, and it happened to products that were sold openly in gas stations and smoke shops across the country. When investigators finally tested the chocolate bars, they found a chemical cocktail that had nothing to do with what was printed on the label — undisclosed muscimol, a synthetic psilocybin analog, the anticonvulsant drug pregabalin, and the herbal sedative kava, all mixed together in an unregulated candy bar.
That outbreak is the clearest argument you’ll ever need for learning how to read a Certificate of Analysis, or COA, before you buy a mushroom chocolate product. Whether the bar on the shelf is a functional mushroom blend made with lion’s mane and reishi, a muscimol-based Amanita muscaria chocolate, or a product implying psilocybin content, the COA is the only document that tells you what’s actually inside — and whether it’s safe to eat.
This guide walks through exactly how to read a mushroom chocolate COA, section by section, so you can tell a legitimate lab report from a fabricated one before you ever open the wrapper.
What a COA Actually Is (and Why Mushroom Chocolate Needs One More Than Most Products)
A Certificate of Analysis is a report issued by a laboratory after it tests a specific batch of a product. For food and supplement categories, a properly done COA usually covers two broad areas: potency (what active compounds are present, and how much) and safety (contaminants such as heavy metals, pesticides, microbes, and mycotoxins). The lab tests a physical sample pulled from a manufacturing batch, then publishes the results tied to that batch’s lot number.
Mushroom chocolate sits in an unusually risky category for three reasons.
First, the ingredient category is genuinely unregulated at the federal level in the United States. The FDA has stated plainly that Amanita muscaria, along with its constituents muscimol, ibotenic acid, and muscarine, is an unapproved food additive that does not meet the standard required to be generally recognized as safe, meaning food containing it is legally adulterated. Psilocybin itself remains a Schedule I controlled substance under federal law in most of the country, so any chocolate bar implying psilocybin content is operating outside the law entirely, regardless of what its packaging says.
Second, the supply chain is genuinely unpredictable. In the Diamond Shruumz case, FDA testing of the chocolate bars found multiple undisclosed substances including muscimol and ibotenic acid, and the outbreak that followed resulted in 180 reported illnesses across 34 states, 73 hospitalizations, and three potentially associated deaths. A toxicologist who studied similar products put it bluntly: what’s actually inside these edibles “could be anything,” since brands claiming to use only Amanita muscaria may not disclose everything in the mix.
Third, because there’s no federal standard, individual states and even individual retailers set their own testing bars — which means the presence of a COA is not automatically proof of safety. A fabricated or incomplete report can look just as polished as a real one.
The Legal Landscape You Need Before You Even Look at a COA
Before evaluating any lab report, it helps to know which category of “mushroom chocolate” you’re actually holding, because the legal exposure is completely different for each.
Functional mushroom chocolate made with adaptogenic species like lion’s mane, reishi, cordyceps, or chaga is a legal food category nationwide. These products are typically sold as dietary supplements or functional foods, and a COA for this category focuses on species identity, active compound concentration (usually beta-glucans or specific triterpenes), and standard food-safety contaminant screening.
Amanita muscaria chocolate occupies a genuine legal gray zone. Amanita muscaria and its psychoactive compound muscimol are not scheduled as controlled substances federally, meaning they aren’t classified alongside psilocybin or LSD, and retail sale is currently allowed in every state except Louisiana. However, that is not the same as being approved for food use. The FDA has been explicit that it recommends people avoid eating foods containing Amanita muscaria or its constituents because they do not meet the food safety standard, and their use may be harmful. A company selling Amanita muscaria chocolate received a formal FDA warning letter in September 2025 stating that the product is legally adulterated because it contains an unapproved food additive.
Psilocybin mushroom chocolate is a different matter entirely. Genuine psilocybin remains federally illegal, and it is classified as a Schedule I substance considered to have no accepted medical use and a high potential for abuse under federal law, with only narrow, licensed exceptions in states like Oregon and Colorado that operate supervised, non-retail psilocybin service centers. A retail chocolate bar claiming psilocybin content, sold outside one of those licensed programs, is not a legal product regardless of its lab paperwork. A lab specializing in mushroom potency testing describes typical psilocybin content in the most common species, noting that Psilocybe cubensis mushrooms average roughly 0.3% to 0.8% psilocybin by weight — figures relevant to cultivation and research contexts, not to retail food safety.
Knowing which bucket a product falls into changes what you should be looking for on the COA, and whether you should be looking at the product at all.
Anatomy of a Legitimate COA: The Header
Start at the top of the document before you even glance at the results table. A real COA opens with identifying information, and this section is where a surprising number of fake reports fall apart.
Confirm the batch or lot number printed on the COA matches the number printed on your product’s packaging exactly. Brands run new batches constantly, and each one gets its own report. If the numbers don’t match, the COA does not verify the specific product in your hands, no matter how legitimate the rest of the document looks.
Check the report date and testing date. A COA analyzed months or years before you bought the product tells you very little about what’s actually in your batch today, especially for anything involving natural degradation of compounds over time.
Verify the testing laboratory’s name and accreditation. This is arguably the single most important line in the entire document. Look specifically for ISO/IEC 17025 accreditation, which is the global standard for testing and calibration laboratories, demonstrating that the lab has validated its analytical methods and proven technical competence. Search the lab’s name independently — through a search engine and, ideally, through a national accreditation body’s public database — rather than trusting a logo on the PDF. A guide to food ingredient COAs recommends treating any report with suspicion if you cannot verify that the listed laboratory actually exists and holds current accreditation for the relevant tests.
Confirm the lab is genuinely third-party, meaning it has no ownership or financial relationship with the brand selling the product. In-house testing is not inherently dishonest, but it removes the independent check that makes a COA meaningful in the first place.
Reading the Potency Panel
This is the section that tells you how much of the active compound is actually in the product, and it looks different depending on what kind of mushroom chocolate you’re evaluating.
For functional mushroom products, the potency panel typically reports beta-glucan percentage or specific standardized extract markers, along with confirmation of species identity. Species verification matters because cheaper mushroom species or mycelium-on-grain fillers are sometimes substituted for the real fruiting-body extract without changing the label. Without a species identity check performed through DNA testing or microscopic analysis, there’s no guarantee you’re getting the labeled mushroom at all, rather than a cheaper substitute. Lower-than-expected active compound results on the panel can also indicate a diluted extract or an insufficiently concentrated formulation compared to what similar products in the category typically deliver.
For Amanita muscaria products, the panel should report muscimol content per serving, ideally alongside ibotenic acid. A checklist built from FDA and CDC guidance recommends that legitimate products always disclose muscimol milligrams per serving with no vague “proprietary blend” language, backed by a full contaminant panel and clear batch and harvest dates.
For psychedelic mushroom or extract testing more broadly, potency panels report results in two parallel units: milligrams per gram and percent by weight. The milligram-per-gram figure shows how many milligrams of a given compound exist in one gram of sample, while the percent-by-weight figure expresses that same result as a percentage of total sample weight. Reports in this space also frequently include a “psilocybin equivalent” number, which mathematically converts measured psilocin back into an estimated psilocybin figure and combines it with the directly measured psilocybin, since psilocybin naturally converts to psilocin as mushrooms age or oxidize. This is analytical chemistry, not a purchase or dosing recommendation — and given psilocybin’s federal legal status, any retail chocolate product reporting these figures should be treated as a legal red flag in itself, not just a quality question.
Across every category, watch for one specific abbreviation: ND, meaning “none detected,” or a result reported as exactly zero. A properly documented COA states its limit of quantification (LOQ) — the lowest concentration the lab’s equipment can reliably detect — alongside every ND result. If the LOQ is set unusually high, an ND result can be misleading, since a meaningful amount of a compound could still be present below that threshold while technically qualifying as “not detected.”
Reading the Contaminant Panel
The contaminant panel is where the safety story lives, and it should never be treated as optional. A pattern repeated across regulated product categories, from cannabis to hemp to mushroom supplements, is that a COA showing only potency results with no contaminant screening is a major red flag, not a minor omission.
A complete panel for a mushroom chocolate product should include:
- Heavy metals — typically arsenic, cadmium, lead, and mercury, all of which mushrooms are known to bioaccumulate from soil and substrate.
- Pesticide residue — relevant for both cultivated mushrooms and the cacao and sugar inputs used in the chocolate itself.
- Microbial contamination — including E. coli, Salmonella, mold, and yeast counts, since these are standard safety checks required for supplements, plant-based extracts, and fortified foods generally.
- Mycotoxins — toxins produced by mold growth, which is a meaningful risk category specifically because the product itself is fungus-derived.
- Residual solvents — relevant if the product uses an extract rather than whole-fruit mushroom, since extraction processes can leave chemical residue behind if not properly purged.
Beyond the standard panel, mushroom chocolate carries one contamination risk that’s specific to its recent history: undisclosed adulterants. The Diamond Shruumz case is the clearest cautionary example on record. Investigators found that the affected products contained not just muscimol, but also a synthetic version of psilocybin, the prescription anticonvulsant pregabalin, and the herbal supplement kava — none of which were consistently disclosed on the label, and the FDA’s own investigation concluded that muscimol alone couldn’t account for the full range of symptoms reported by people who became ill. A comprehensive COA for this product category should test for a broad screening panel of unexpected pharmaceutical and psychoactive compounds, not just the ingredient the brand claims to have used.
Red Flags That Signal a Fake or Manipulated COA
Fabricated and doctored COAs are common enough in loosely regulated categories that dedicated fraud-detection habits are worth building. A few patterns show up again and again:
Results that sit exactly on a specification limit. Real analytical testing produces natural variation from batch to batch. A food ingredient COA guide notes that if a moisture limit is specified as “max 12%” and every single batch reports exactly 12.0%, the results are very likely fabricated or manually adjusted rather than genuinely measured.
Mismatched product photos or descriptions. A cannabis dispensary’s fraud-detection guide flags a simple but effective check: if the COA is supposed to represent a chocolate bar but the accompanying photo shows a gummy, something is clearly wrong.
Blacked-out or redacted sections. Some manufacturers block out sections of a COA specifically because the results came back unfavorable, and these redactions are usually obvious once you know to look for them.
No QR code, or a QR code that doesn’t link to the lab’s own site. A real COA published by an accredited lab is typically hosted on that lab’s document system, and scanning the code should take you there directly. Be cautious of QR codes or links that route instead to a generic Google Drive folder or directly to the manufacturer’s own website, since a document hosted that way can still be edited or swapped without your knowledge.
Inconsistent formatting. A COA with fonts, spacing, or layout that shifts partway through the document is a common sign that someone has edited the file after it left the lab.
Generic or reused batch numbers. A food-industry sourcing guide warns that generic batch numbers shared identically across multiple different product deliveries suggest the same COA is being recycled rather than generated fresh for each batch.
Vague or missing test methods. Reputable labs cite the specific standardized method used for each test. A COA that lists only a generic method name without a corresponding ISO or AOAC method number gives you no way to verify what protocol was actually followed.
A Step-by-Step Checklist Before You Buy
- Find the COA before you purchase, not after. Reputable brands make this easy. Many now provide batch-specific COAs accessible directly through a QR code printed on the packaging, ensuring you’re looking at results for your exact batch rather than an old or generic report.
- Match the batch number on the COA to the batch number on the package.
- Confirm the testing lab is real, independent, and ISO/IEC 17025 accredited by searching for it outside the brand’s own website.
- Check the report date. Recent testing is more trustworthy than a report that’s over a year old.
- Read the full potency panel, not just the headline number on the front label.
- Confirm a full contaminant panel exists — heavy metals, pesticides, microbials, and mycotoxins at minimum — not just a potency test.
- Look for a broad adulterant screen, especially for Amanita muscaria or “legal psychedelic” branded products, given the documented history of undisclosed pharmaceutical contamination in this category.
- Scan for the red flags above: perfect round numbers, mismatched photos, redactions, broken QR codes, and inconsistent formatting.
- When in doubt, contact the lab directly. A legitimate lab will confirm whether a report attributed to them is genuine.
- Know your local law. Amanita muscaria retail sits in a legal gray zone nationwide except Louisiana, and any product implying psilocybin content sold outside a licensed state program is operating illegally regardless of what its paperwork says.
Frequently Asked Questions
What does COA stand for on a mushroom chocolate package?
COA stands for Certificate of Analysis, a report from a laboratory documenting what a specific batch of a product contains, including both active compounds and any contaminants.
It depends entirely on the ingredient. Functional mushroom chocolate made from species like lion’s mane or reishi is a legal food category nationwide. Amanita muscaria chocolate is not scheduled as a controlled substance federally and is retail-legal in 49 states, but the FDA has stated it does not meet food safety standards. Psilocybin mushroom chocolate sold at retail is illegal under federal law outside narrow licensed state programs.
Why did people get sick from mushroom chocolate in 2024?
An outbreak linked to Diamond Shruumz-brand chocolates and candies sickened 180 people across 34 states, hospitalized 73, and was potentially linked to three deaths. Lab testing found undisclosed substances including muscimol, a synthetic psilocybin analog, the drug pregabalin, and kava.
What’s the difference between muscimol and psilocybin?
Muscimol is the primary psychoactive compound in Amanita muscaria and acts on GABA receptors, producing a dissociative effect. Psilocybin is the compound found in “magic mushrooms” like Psilocybe cubensis and acts primarily on serotonin receptors. They are chemically unrelated, and only psilocybin is federally scheduled as a controlled substance.
Does a QR code on the package guarantee the COA is real?
No. A QR code only guarantees authenticity if it links directly to the testing lab’s own document system. QR codes linking to a generic file-sharing folder or the manufacturer’s own website can point to documents that were edited after leaving the lab.
What is ISO/IEC 17025 accreditation, and why does it matter?
It’s the international standard confirming a testing laboratory has validated its analytical methods and demonstrated technical competence. A COA from a lab without this accreditation carries far less weight, since there’s no independent verification that its testing procedures are reliable.
The Bottom Line
A Certificate of Analysis is not a marketing document, and it shouldn’t be treated as a formality. In a product category with a documented history of undisclosed pharmaceutical contamination, unregulated Amanita muscaria sales, and outright illegal psilocybin products sold at retail, the COA is often the only thing standing between a consumer and a genuinely dangerous product. Learning to read the header, the potency panel, the contaminant panel, and the common fraud signals takes about ten minutes — and it’s ten minutes that matters far more in this category than in almost any other food or supplement purchase you’ll make.
Sources
- FDA Warning Letter — Blue Forest Farms, LLC, September 11, 2025: fda.gov
- FDA Alerts Industry and Consumers About the Use of Amanita Muscaria in Food: fda.gov
- Letter to Industry on the Use of Amanita Muscaria or Its Constituents in Food, FDA: fda.gov
- “FDA takes action against Amanita muscaria in edibles,” NPR, December 21, 2024: npr.org
- “FDA Reminds Industry That Psychoactive Amanita muscaria Mushroom Is Not Approved for Food Use,” Food Safety Magazine: food-safety.com
- “FDA warns Blue Forest Farms over adulterated Amanita muscaria products,” Food Safety News: foodsafetynews.com
- “Are Mushroom Edibles Safe and Legal?”, TIME: time.com
- “How to Read a Certificate of Analysis (CoA): A Buyer’s Guide,” Decachem: decachem.com
- “How to Read a COA and Why It’s So Important,” ACS Laboratory: acslab.com
- “How to Read a Mushroom Supplement COA (and Spot Fakes),” Mycogenius: mycogenius.com
- “How to Read a Certificate of Analysis (COA),” Ethereal Gold Dispensary: etherealgolddispensary.com
- “How to Read a Cannabis Certificate of Analysis (COA),” Ivy Hall: ivyhalldispensary.com
- “How to Read a COA | Certificate of Analysis Explained,” Nutrada: nutrada.com
- “Understanding COAs: How to Read a Certificate of Analysis,” Hometown Hero: hometownhero.com
- “CoA – Certificate of Analysis,” Tryp Labs: tryplabs.com
- “Is Amanita Muscaria Legal in 2025? 49 States,” Standard CBD: standardcbd.com
- “FDA, CDC identify Amanita muscaria as a toxin in food,” FoodNavigator-USA: foodnavigator-usa.com
