The rule requires employers to establish and maintain a respiratory protection program and includes requirements for program administration; worksite-specific procedures; respirator selection; employee training; fit testing; medical evaluation; respirator use; cleaning, maintenance, and repair; and other provisions.
Employers are required to have an maintain proper employee training under the rule.
They know it happens but they do not have anything to help against fraudulent use of the mail system.