A legitimate Certificate of Analysis (CoA) is more than a PDF with numbers on it. Many fake or recycled CoAs circulate—especially in peptides, research chemicals, and supplements.
Here’s how to tell the difference:
1. Lab verification (non-negotiable):
A real CoA comes from an independent, accredited analytical lab, not the seller.
What to check:
- Full lab name, address, and contact info
- Accreditation (ISO/IEC 17025 is the gold standard)
- The lab should be searchable online
- You should be able to contact the lab and confirm the report
🚩 Red flag: “In-house testing” or a lab name that doesn’t exist outside the vendor’s website.
2. Unique identifiers must match
Every legitimate CoA is tied to a specific batch, not a product in general.
Must include:
- Batch/Lot number
- Sample ID
- Date tested
- Report number
These should match:
- The vial label
- The invoice
- Any QR code or verification link
🚩 Red flag: Same CoA reused across different batches or dates.
3. Correct testing methods:
The tests must match what’s being claimed.
For peptides, look for:
- HPLC → purity (%)
- MS (Mass Spectrometry) → molecular weight confirmation
- Sometimes NMR for structure (advanced, not always required)
🚩 Red flag:
- Purity claims without HPLC
- “99% purity” with no method listed
- GC used for peptides (wrong tool)
4. Results should make scientific sense.
Legit data isn’t perfect-looking.
What’s normal:
- Purity like 98.2%, 99.1%, etc.
- Small impurities listed
- Clear chromatograms or spectra references
🚩 Red flag:
- Always “99.99%”
- No impurities reported
- Results rounded to whole numbers only
5. Signatures and authorization:
A real CoA is reviewed and approved.
Look for:
- Analyst or QA reviewer name
- Signature (digital or handwritten)
- Approval date
🚩 Red flag: No human accountability.
6. QR codes & verification portals (when done right).
Some labs provide direct verification links.
Good: QR code links to the lab’s website, showing the same report
Bad: QR code links to the vendor’s site only
7. Formatting consistency:
Real labs use standardized formats.
🚩 Red flags:
- Typos, inconsistent fonts
- Logos stretched or pixelated
- Editable Word/Canva-style layouts
- Missing units (mg, %, Da)
8. Chain of custody matters:
A credible vendor can explain:
- Where the sample was pulled from
- Who submitted it
- Whether it was random batch testing or vendor-selected
🚩 Red flag: Vendor refuses to explain sampling.
9. The biggest red flag of all: “Trust us.”
If a seller becomes defensive when you ask for:
- Lab name
- Verification
- Batch-specific CoA....…walk away.
Bottom line:
A legitimate CoA is:
- Batch-specific
- Independently tested
- Scientifically consistent
- Verifiable outside the vendor