9 red flags a COA is fake or unreliable

Fabricated certificates are cheap to produce and getting cheaper — document generators, including AI tools, can output a plausible COA in seconds. The good news: fakes fail the same few checks over and over. These are the nine patterns we screen for.

1. No lot number, or a lot that does not match

The single most common defect. Results without a lot number belong to nothing; a lot that differs from your vial belongs to something else.

2. No named laboratory

"Independently tested" with no lab name is an unverifiable claim, not a test result. Every real report traces to a lab that will acknowledge it.

3. A lab you cannot find independently

If the named laboratory has no independent web presence, address, or phone number — or the only contact route is printed on the certificate itself — verification is impossible by design.

4. Impossible or too-perfect numbers

Purity of exactly 100%, potency above 100% with no stated range, endotoxin "pass" with no units or limit. Real chemistry reports measured values against specifications; templates print reassurance.

5. No methods referenced

Sterility without USP <71>, endotoxin without USP <85>, potency with no assay method. Method references are how a report exposes itself to being checked — their absence is a choice.

6. Date incoherence

Test dates after the release date, beyond-use dates before the test date, years-old results attached to a fresh batch, or the same date on every document a seller has ever shown.

7. Template reuse across products

The same layout, report number, signature block, or even the same chromatogram appearing on certificates for different products or lots. Forgers economize; labs do not recycle results.

8. Screenshot-only evidence

A cropped image of a COA is not a COA. Crops hide the fields that fail — ask for the complete document and expect the answer to be yes.

9. AI-generated or scraped certificates

A newer pattern: certificate images generated by AI tools, or real COAs scraped from the open web and re-attached to unrelated products. Both survive a casual glance and neither survives source verification — the issuing lab will not confirm a report it never wrote, and the original issuer will not confirm your lot.

What to do when you hit one

One red flag means verify before trusting; a failed verification means the document is not evidence. Raise it with your provider and pharmacy, and read what a COA can and cannot prove so the conversation stays precise. This is documentation literacy, not medical advice — clinical decisions belong with a qualified clinician.