Kratom Testing: What Labs Find, What States Require, and What a Single COA Can't Cover

In 2018, the CDC and FDA jointly investigated a multi-state Salmonella outbreak that ultimately sickened at least 199 people across 41 states. The source wasn’t contaminated meat or leafy greens. It was kratom — a botanical supplement that millions of Americans were buying online with essentially no standardized testing behind the safety claims on the label.

That outbreak is now eight years in the rearview mirror, and the kratom industry has grown substantially since. But the structural problems it exposed — inconsistent supply chain testing, no federal standard of identity, heavy reliance on supplier-provided certificates of analysis — haven’t been resolved. If anything, they’ve gotten more complicated. The regulatory environment around kratom is no longer a single ambiguous gray zone. It’s nine different gray zones, and the wrong answer in any of them can cost you your Amazon listing, your inventory, or worse.

Here’s what a well-designed kratom testing program actually looks like in 2026.

Why Kratom Testing Is More Complicated Than Most Botanical Supplements

Most supplement categories have at least some regulatory scaffolding to work with. For herbs like echinacea or valerian, you’ve got USP monographs, AHPA quality standards, and decades of HPLC method development to draw from. For kratom (Mitragyna speciosa), you have considerably less.

FDA’s current position is that kratom cannot legally be marketed as a dietary supplement because it was under investigation as a drug before it was marketed as a supplement — a provision in DSHEA that effectively excludes such ingredients from the conventional supplement pathway. FDA has issued Import Alert 54-15, which allows US customs officials to detain kratom shipments without physical examination, and the agency has sent warning letters to dozens of companies making disease claims about the product. But kratom hasn’t been federally scheduled as a controlled substance. The DEA floated an emergency scheduling proposal in 2016 and withdrew it after significant public pushback. So the product occupies a strange position: not approved, not banned at the federal level, but also not operating under any clear compliance roadmap.

The American Kratom Association (AKA) has stepped into that void with its GMP Vendor Program, which requires participating manufacturers to undergo third-party audits and submit products for testing. It’s a meaningful step. But the program’s testing requirements don’t specify method-level limits that map cleanly to any single regulatory standard. And membership is voluntary.

What this means practically: every kratom brand is essentially writing its own compliance narrative. That narrative gets stress-tested when state regulators, Amazon, or plaintiffs’ attorneys decide to check your work.

The Four Testing Categories Every Kratom Brand Should Be Running

Heavy metals are the first non-negotiable. Mitragyna speciosa is grown primarily in Indonesia, Malaysia, and Thailand — often in agricultural soils that accumulate cadmium and lead at levels that would fail US specifications. The applicable domestic standard is USP <2232>, which sets daily exposure limits for oral botanical dietary supplements: 10 µg/day for lead, 15 µg/day for inorganic arsenic, 4.5 µg/day for cadmium, and 15 µg/day for mercury. Those limits apply to the total daily dose as consumed. That means your lab result needs to be interpreted against your actual serving size — not just reported as a raw ppm concentration and called compliant.

If you’re selling into California — or if any of your Amazon customers are California-based, which they almost certainly are — Prop 65 thresholds are more demanding still. The MADL for lead under Prop 65 is 0.5 µg/day. At a typical kratom serving of 2–4 grams of powder, a product testing at even 1 ppm lead by ICP-MS can exceed that threshold and trigger a mandatory Prop 65 warning — or, more immediately, a 60-day notice from a private enforcer. Several kratom brands have received exactly that notice in California in the past three years.

Microbiology is the second category, and the 2018 Salmonella outbreak should be sufficient justification on its own. Under 21 CFR Part 111 — the dietary supplement cGMP regulation — finished products must be free of adulterants that would render them unlawful under Section 402 of the FD&C Act. Salmonella in a supplement is a textbook Section 402 adulterant. Standard testing should include absence of Salmonella per USP <2021>, along with total aerobic count, total combined yeast and mold count, and bile-tolerant gram-negative bacteria per USP <61>/<62>. Kratom powder is particularly susceptible to contamination because it’s processed in high-humidity equatorial environments and then shipped in bulk — often with inadequate moisture control across a multi-week ocean transit.

Alkaloid profiling is where kratom testing diverges most sharply from conventional supplement testing, and where the analytical chemistry gets genuinely interesting. Mitragynine is the primary active alkaloid, typically accounting for 1–2% of dry weight in authentic Mitragyna speciosa leaf. But we’ve seen values ranging from under 0.5% to over 2.5% depending on geographic origin, harvest timing, and post-harvest processing — variability that makes label claims on potency products particularly difficult to defend without consistent lot-level testing. The secondary alkaloid 7-hydroxymitragynine is present in much smaller quantities but has substantially higher pharmacological activity. And some products have been found to contain synthetic 7-hydroxymitragynine, which adulterates the product and creates separate regulatory exposure under both federal adulteration law and state KCPA provisions that explicitly prohibit synthetics. LC-MS/MS is the right tool here; HPLC alone can miss trace alkaloids and won’t reliably distinguish structural isomers at the concentrations that matter.

Pesticide residue screening rounds out a complete panel. Indonesian agricultural practices vary widely, and kratom isn’t subject to the same pesticide monitoring infrastructure that applies to food crops. A multi-residue pesticide screen by GC-MS/MS and LC-MS/MS covering 400+ analytes should catch organophosphates, pyrethroids, and neonicotinoids — the three classes most commonly flagged in imported botanical raw material.

The State-by-State Patchwork and What It Actually Demands

As of mid-2026, six states classify kratom as a Schedule I controlled substance: Alabama, Arkansas, Indiana, Rhode Island, Vermont, and Wisconsin. If you’re shipping into any of those states, you have a problem that no testing program can fix. In the remaining 44 states, the picture is more nuanced — and more actively evolving.

Nine states have enacted some version of the Kratom Consumer Protection Act. Utah was first in 2019, and Georgia, Arizona, Nevada, Colorado, Oregon, and Texas have followed with their own versions. The KCPA framework creates a compliance structure rather than a ban: age requirements (18 or 21, depending on state), mandatory labeling, a prohibition on synthetic alkaloid adulteration, and in most versions an explicit requirement that manufacturers test products and make results available to regulators or consumers on request. Utah’s KCPA, for example, specifically prohibits any product from containing 7-hydroxymitragynine at more than 2% of total alkaloid content — which means your alkaloid panel needs to quantify both analytes at validated detection limits, not just screen for presence.

California is the other critical jurisdiction. San Diego County, where we operate, sits in a state that combines aggressive Prop 65 private enforcement, strict food adulteration statutes, and a plaintiff’s bar that has developed real expertise in consumer product cases. California hasn’t banned kratom, but the combination of Prop 65 heavy metal thresholds and the state’s broader consumer protection framework means that a California-compliant kratom testing program is effectively the most demanding standard in the country. Building your program to satisfy California first isn’t a bad strategy — if it passes here, it’s defensible almost everywhere else.

A complete, defensible testing package for a nationally distributed kratom product should include:

• Full heavy metals panel (Pb, As, Cd, Hg) by ICP-MS with results reported per gram and per labeled serving
• Prop 65-specific risk calculation for lead and inorganic arsenic
• Salmonella absence by USP <2021>
• Total aerobic count, total yeast and mold, and bile-tolerant gram-negative bacteria by USP <61>/<62>
• Mitragynine and 7-hydroxymitragynine quantification by LC-MS/MS
• Synthetic 7-OH-mitragynine screen
• Multi-residue pesticide screen (400+ analytes by GC-MS/MS and LC-MS/MS)

That’s not a short list. But a certificate of analysis from a country-of-origin supplier tells you almost nothing about what arrives at your US distribution center six weeks later — after handling, temperature variation, and potential commingling in transit. Finished-product testing on every lot, from a US-based ISO 17025 accredited laboratory, is the only dataset that actually protects you from regulators, from litigation, and from inadvertently shipping a contaminated product.

The kratom industry is not going to get less scrutinized. FDA enforcement has increased year over year, state KCPA frameworks are being updated and tightened in real time, and private Prop 65 enforcement in California hasn’t slowed down. Brands that built comprehensive testing programs two or three years ago are now sitting on a clean lot history that gives them a real compliance story to tell. Brands that waited are building one under pressure, without the data to look back on.

Start with your finished product. Know what’s actually in it. The rest follows from there.

---

Written by Nour Abochama, Vice President of Operations, Qalitex Laboratories. Learn more about our team

Talk to our team about your testing needs. Contact us

Related from our network

• 21 CFR Part 111 Audit Preparation for Supplement Manufacturers — Aurora TIC covers the regulatory consulting side of supplement compliance, including readiness assessments for FDA inspections of dietary supplement facilities.
• Botanical Raw Material COA Verification and Supplier Qualification — Ayah Labs provides contract testing and incoming COA verification for botanical raw materials, including identity and contaminant screening at the ingredient level.