A simple way to solve this would be to have some kind of gov certification process.

Which could also include a QR code going to a gov website with details why this org was given the certification.

This isn't perfect but would certainly lower such incidents.