The Problem
COAs are documents — and documents can be fabricated. A supplier who never tested a product can create a professional-looking PDF with invented purity numbers. A supplier who tested one batch can reuse that COA for every subsequent batch. A supplier whose product tested poorly can alter the numbers on a legitimate report.
None of this requires sophisticated fraud. A PDF editor, a screenshot tool, and a template are enough to produce a COA that looks convincing at first glance. The defense is knowing what to check.
Red Flags
A legitimate COA identifies the testing laboratory by name and provides contact details — address, phone, email, or website. "Tested by an independent laboratory" without naming the lab is unverifiable. If you can't contact the lab, the report could say anything.
Labs assign unique identifiers to each report. Without one, there is no way to verify the report with the lab. If a supplier provides a COA without a reference number, ask for it specifically — if they can't provide one, the report may not exist in any lab's records.
The COA should tie to a specific production batch via a lot or batch number. That number should match what's printed on the product label or packaging. A mismatch — or the absence of a batch number on either the COA or the product — means you cannot confirm the report corresponds to what you received.
Every production batch is a separate synthesis run with its own quality characteristics. If a supplier uses the same COA document (same date, same reference number, same results) across different batch numbers or different products, that COA was not generated for the product you're evaluating.
Real analytical measurements include natural variation. If every product from a supplier shows exactly 99.00% purity, or every test result ends in a round number, be skeptical. Legitimate results typically have decimal variation — 98.47%, 99.12%, 97.83%.
A purity percentage without identity confirmation tells you the sample is pure — but not what it's pure of. A credible COA for peptides includes both HPLC purity and mass spec identity. See our guide on HPLC vs mass spectrometry for why both matter.
Multiple generations of scanning and saving degrade document quality and can mask alterations. Look for: inconsistent fonts within the same document, misaligned text, different resolution areas (suggesting parts were pasted from different sources), or JPEG artifacts around specific numbers but not elsewhere.
Some COAs include only summary numbers without the underlying data — no HPLC chromatogram, no mass spectrum. While not all labs include raw data by default, a supplier who refuses to provide it on request may not have it.
Check whether the named lab is a real, operating analytical laboratory that offers peptide testing. Some fabricated COAs use real lab names that don't actually test peptides, or entirely invented lab names. A quick search of the lab's website and service offerings can confirm.
How to Verify a COA Is Genuine
Red flags tell you when to be suspicious. Verification tells you for certain.
1. Contact the lab directly
Take the lab name and report reference number from the COA. Go to the lab's official website — not a link provided by the supplier — and contact them to confirm the report exists and matches the details shown. Some labs, like Janoshik Analytical, offer self-serve verification pages where you can enter a report key and check instantly.
2. Check the lab's public records
Some labs maintain public databases of reports they've issued. If the lab has one, search for the report number. If the report isn't in their system, it either doesn't exist or the reference number was altered.
3. Use a certificate tracking platform
Some suppliers register their lab results on public certificate platforms that issue unique, QR-verifiable certificate IDs. This creates an auditable record: a specific product batch was registered with specific lab results at a specific point in time. Platforms like Certivos provide this service.
4. Request the raw data
Ask the supplier for the HPLC chromatogram and mass spectrum — the actual analytical data behind the summary numbers. A supplier with a genuine lab report can provide this. A supplier with a fabricated COA cannot.
What a Legitimate COA Looks Like
A genuine COA from a reputable third-party lab will typically include:
Lab name, address, and contact information clearly displayed
Unique report or reference number
Client/sample identification and batch or lot number
Date received and date tested
Test methodology stated for each result (e.g., column type, gradient for HPLC)
Purity result with methodology (HPLC)
Identity confirmation with observed and expected molecular weights (MS)
Analyst name or signature
For a complete walkthrough of each section, see our guide to reading a peptide COA.
The Bottom Line
The most reliable protection against fake COAs is verification — contacting the lab, checking a public database, or using a certificate tracking platform. Red flags help you decide when to verify, but when in doubt, verify anyway. A supplier confident in their product quality will welcome the scrutiny.