Why COAs get forged
Forged certificates of analysis exist because a fake is far cheaper than a real test, and buyers reward the green number. This guide explains the economics, the broad categories of forgery, the tells that protect a buyer, and why issuer-side verification breaks the business model.
Last updated: 8 July 2026
The economics of a fake certificate
Forged COAs exist because a fake certificate is far cheaper than a real test, and buyers reward the green number. A genuine HPLC-plus-MS analysis costs a vendor real money and one to two weeks; editing a document or inventing a lab costs minutes. When trust is the thing being sold, the cheapest way to look trustworthy is to fake the signal.
The grey peptide market has grown fast - major outlets now cover labs testing thousands of unregulated samples - and that growth pulls in sellers who compete on appearance rather than analysis. A convincing certificate becomes a marketing asset, whether or not any testing happened.
How the fakes are made (in categories, not a recipe)
Fakes fall into a few broad categories, and naming them helps buyers rather than forgers. A vendor may stand up its own "lab" as a facade, edit the numbers on a real report, borrow a real lab's name and address, or invent a laboratory that does not exist at all. We deliberately do not publish the mechanics, only the shapes.
In our own audits of forged certificates we saw each pattern: a "lab" domain registered the same day as the seller's, a certificate carrying the address of a real medical laboratory that never tested for it, and invented lab names printed above a copied chromatogram.
The tells that protect a buyer
You do not need to know how a fake is built to catch one; you need the tells. The same handful of signals recur across almost every forgery, and any one of them should make you stop and verify before you trust a number.
- A laboratory that leaves no independent trace anywhere except its own website.
- A domain or company registered just before the report appeared.
- No working way to verify the report with the issuing lab.
- An address or accreditation that actually belongs to a different, real lab.
- Purity figures that are implausibly high and identical across every batch.
Why verifiability breaks the business model
Issuer-side verification is what makes forgery uneconomic. A QR code or a task number plus a unique key, confirmed on the issuing lab's own site, cannot be faked by a vendor - only the lab can answer. When buyers demand a verifiable report, a fake certificate loses the one thing it was made to provide.
That is why this project treats verifiability as the standard to insist on, lists which labs offer it, and is building a check that reads a certificate for these signals. The more normal verification becomes, the less a forged number is worth.
What you can do
Ask for a report you can verify, and treat any certificate you cannot as a claim. Look up the issuing lab in an independent directory, check whether it even exists, and compare its address and accreditation against the certificate. A green number is only as good as your ability to confirm it.