In the past day or so, I've received two emails from different .gov addresses that purport to be from Intuit and encourage me to click on a link to "restore access to your QuickBooks account." They aren't pretending to be government addresses. If I click reply, the mail-to field says John.Doe@xxx.gov, just as the email states in the From section.

I have forwarded these emails to the FTC's recommended address for phishing scams, but I'd like to let the agencies involved know that they have compromised accounts. Is there an easy way to do that? I looked on the website of one agency, but there wasn't any contact that seemed right (Texas agriculture.gov). 

Would emailing that person (at the compromised address) directly be useful? I don't want to spend all day on this, since I'm working. I just want to give someone a heads up. I was hoping there was a "report misused government email" contact box somewhere, but I can't find anything like that.

It is likely that the from header has been forged. I get emails from fake .govs quite often, mostly they end up in my spam filter. The hyperlink within is either unique, allowing tracking, or just delivers malware. Most of the time I just ignore these.

If you believe that the header is not forged then you can typically contact the agency by Googling their name and Webmaster or Contact Us or other such things. Do not use the phishing email, it is almost certainly fake.
