How forged or recycled peptide COAs look: reused report numbers, mismatched lots, no lab contact, image-only scans, stale dates, and how to check with the lab.
A certificate of analysis is the single document most peptide suppliers point to when a buyer asks whether a product was tested. It is also the easiest document in the category to fake. A COA is a PDF or an image, it is produced by a third party the buyer rarely contacts, and almost nobody checks it against the laboratory that supposedly issued it. This guide lists the warning signs we look for when we review a supplier’s certificate library, explains what each sign does and does not prove, and ends with the one step that settles the question: asking the lab.
Why certificates get forged or recycled
The incentive is simple. A supplier that advertises “third-party tested” needs something to show, and a real test on every lot costs money and time. The shortcuts range from careless to criminal: reusing one real certificate across many lots, editing a competitor’s certificate, lifting a lab’s letterhead onto a blank template, or publishing a certificate for a product the lab never received.
This is not hypothetical. The record in our data set for Paradigm Peptides, a US supplier that shut down in March 2024, cites CBS News reporting that the owner admitted the company forged laboratory certificates of analysis while advertising “99% purity and third-party lab testing.” According to the Department of Justice entry in the same record, the owner pleaded guilty on December 10, 2025 and was sentenced on July 30, 2026 to five years and ten months. Prosecutors stated that products sold as SARMs contained testosterone. That is one closed supplier, and we cite only what the record says, but it establishes that forged certificates in this category are a documented fact, not a theory.
The warning signs
No single sign below proves forgery. Several together make a certificate unreliable until the lab confirms it.
| Warning sign | What it looks like | What it suggests |
|---|---|---|
| Reused report number | The same report ID appears on certificates for different products or different lots | One real report copied and relabeled, or a template with a hard-coded number |
| Lot or product mismatch | Certificate names a product, size or lot that does not match the listing it is attached to | Recycled document, or a generic certificate used across a catalog |
| No lab contact | No lab address, phone, email or domain, or a contact that points to the supplier’s own site | Letterhead borrowed or invented; nothing to verify against |
| Image-only scan | JPEG, PNG or screenshot with no selectable text, often cropped or low resolution | Original PDF withheld; edits are easier to hide in a flattened image |
| Stale date | Test date predates the product’s first appearance on the site by months or years, or predates the lab’s own existence | Certificate came from somewhere else, or from an unrelated batch |
| Date in the future | Test date later than the day you are viewing it | Template error or fabrication |
| Fonts and alignment | Mixed fonts in the result fields, misaligned decimals, values that look pasted | Edited after issue |
| Identical results across lots | Every lot shows the same purity figure to two decimals | Copied values; real lots vary |
| Missing method pages | Only a summary page is shown; chromatogram, spectrum and method section are absent | Either incomplete publication or a summary page fabricated without the underlying data |
| Supplier-hosted “verification” | A “verify this COA” link that goes to the supplier’s own domain rather than the lab’s | The supplier is vouching for itself |
Reused report numbers
Every laboratory assigns a unique identifier to each report. If a supplier’s library has two certificates with the same number for different products, at least one of them is not what it claims to be. We check this mechanically when a library is large enough to compare. A supplier that lists many products but only a handful of distinct report numbers has a problem it should be able to explain.
Lot and product mismatches
The certificate should name the exact product, the size or quantity tested and the lot number, and the listing should show the same lot. Common mismatches: a certificate for a 5 mg item attached to a 10 mg listing, a certificate for one coded product name attached to a different one, or a lot number on the certificate that appears nowhere on the product or the page. The document may be real, but it is not evidence for the item you are looking at.
Missing or wrong lab contact
A real certificate carries the lab’s identity: legal name, address, and a domain or phone number. We check that the domain resolves to a laboratory’s website and not to a parked page, a redirect to the supplier, or a hosting platform. Our records include at least one case where the name in the “lab” slot was a certificate-hosting service rather than a testing lab, and another where it was an aggregator that republishes test results. Neither is a laboratory, and a certificate that names one of them as the issuer has not told you who ran the test.
Image-only documents
A screenshot can be real. It is also the format that makes editing hardest to detect and verification impossible, because there is no embedded report number to query and no PDF metadata to inspect. Suppliers that publish only images, and especially images with the report number cropped off, have chosen a format that cannot be checked. We note that as a stated absence rather than a verdict.
Dates older than the listing
Peptide catalogs change constantly. If a product first appeared on a storefront this year and its only certificate is dated three years ago, the certificate did not test the lot you would receive. The same applies to a date earlier than the lab’s own founding, which does happen when a template is reused across lab letterheads.
What a certificate cannot tell you even when it is genuine
A genuine, verified certificate establishes that a laboratory received a sample, ran the methods listed and reported those results on that date. It does not establish that the sample came from the lot now on sale, that every vial in the lot matches the sample, or that the supplier’s handling since the test preserved the material. These are limits of the document, not red flags, and we say so in our methodology.
How to check with the laboratory
The warning signs above are triage. The check that resolves them is a direct query to the issuing lab.
- Copy the report number, the lab name and the test date exactly as printed.
- Go to the lab’s own website, found through a search engine, not through a link on the supplier’s site.
- Use the lab’s report-lookup form if one exists. Some labs named on supplier certificates offer one; others accept email queries.
- Ask one question: does this report number exist in your records, and does it correspond to the product name, lot and date shown.
- Keep the reply. A confirmation that matches on all three points supports the certificate. A reply that the number does not exist, or exists for a different product or client, means the certificate does not support the listing.
We walk through this in more detail in our guide to verifying a COA with the lab, and we list the laboratories most often named on supplier certificates in a separate explainer.
How we handle unverifiable certificates
Our grades do not punish a supplier for publishing a certificate we could not personally verify. They do record the difference between a certificate library that names a reachable lab and carries report numbers, and one that does not. A supplier whose documents fail several of the checks above is flagged in the testing section of its report, and confirmed forgeries, where a lab has told us in writing that a document is not theirs, go on the watchlist with the correspondence summarized. The supplier is invited to respond, and that response is published alongside.
The short version: a certificate is a claim until the lab confirms it. The warning signs tell you which claims to doubt first.