How to Verify a Supplier’s Certificate Is Real: A 7-Step Field Guide

Fake and recycled certificates circulate freely in B2B sourcing — genuine documents from another client’s shipment, edited dates, fabricated laboratory letterheads. The defense is not paranoia; it is a seven-step verification routine that customs brokers, quality auditors and experienced buyers actually run, four steps of which require nothing but attention. This guide walks through each step, lists the seven red flags that end conversations quickly, and explains what to do when a certificate fails. The verification channels referenced here — ANVISA’s public consultation systems, INMETRO’s portal, MAPA’s official pages, the OEKO-TEX Association’s label check — are the official ones; always cite the institution by name, and treat anything a supplier cannot substantiate as pending factory confirmation.

The Seven Steps

Examine format and typographic consistency. Serious institutes use stable layouts: logo in a fixed position, header with address, footer with contact data. Gross translation errors, pixelated logos, irregular margins and mixed fonts are early signals — none prove fraud alone, but each deviation raises the diligence level for the next steps.
Locate the document number. Every test report has a control number in the header; every product certification has a registry number. Record it exactly, including year and suffixes. If the PDF will not let you select the number as text — it is a cropped image — be doubly careful.
Identify the issuing body. Who signs: an accredited laboratory, a certification body, a health authority? The name must exist and have an institutional website. Beware of issuers whose names “feel” official but blend words from two real institutions.
Validate the number through official channels. Each issuer has its own lookup path: ANVISA (Agência Nacional de Vigilância Sanitária) keeps public systems at consultas.anvisa.gov.br; INMETRO (Instituto Nacional de Metrologia, Qualidade e Tecnologia) publishes lookups at gov.br/inmetro; MAPA (Ministério da Agricultura e Pecuária) publishes norms and guidance at gov.br/mapa; the OEKO-TEX Association offers a label check on its official site. Private laboratory reports may not sit in a public database — in that case request a verification letter from the laboratory itself.
Compare scope against your SKU. An authentic document can still be useless to you: check it covers your actual product — material, color, coating, model. A genuine certificate for a different SKU is not your compliance.
Compare dates. Issued before the test? Validity consistent with the document regime? Where applicable, is a phytosanitary certificate inside the 14-day window before departure under the MAPA system? Internal contradictions in dates are one of the most reliable fraud signals.
Contact the issuer directly using the channels published on the institutional website — never only the contacts printed on the PDF — and keep the verification correspondence archived.

Seven Red Flags That End the Conversation

An illegible or image-cropped document number;
An issuing body with no institutional website;
Scope described as “all products of the factory”;
Validity stated as open-ended or “permanent”;
Internally contradictory dates (issued before the test, expiry before issuance);
The manufacturer’s name on the certificate differs from the one on the invoice;
Commercial pressure — “sign today, documents later”.

A real certificate survives seven questions; a fake rarely survives three. And here is total transparency about our own practice: the documents in our download center follow exactly this six-field-plus-status pattern, and anything the factory has not yet verified is marked pending factory confirmation — never promised.

Steps, Tools and Evidence to Keep

Steps	Tool / entry point	Evidence to retain
1–2: format and number	Manual review + PDF metadata	Copies of the document
3–4: body and number validation	ANVISA / INMETRO / MAPA / OEKO-TEX official channels	Screenshots with dates
5–6: scope and date comparison	Your SKU file and purchase records	Comparison notes
7: contact the issuer	Channels published on the institutional website	Archived email exchange

A Worked Scenario: The Too-Good Laboratory

Consider a pattern we have seen more than once: a supplier sends a migration report from a laboratory whose name resembles a well-known European institute, with clean formatting and a plausible number. Step one passes — the layout looks professional. Step two: the number is selectable text; a good sign. Step three: the laboratory’s website exists but is thin — no accreditation listing, no address beyond a contact form; caution rises. Step four: the well-known institute confirms, by email, that the certificate number does not exist in their records — the name was mimicked, the document is fabricated. Total elapsed verification time: one day. Compare the alternative path: accept the document, ship, and let your customer’s auditor discover the same thing months later, with your order and your brand attached to the finding.

Notice what did the work: not the fake’s flaws — it looked good — but the routing of the number through the real institution’s official channel. Verification is mostly routing discipline. The contacts that matter are the ones the institution publishes, not the ones printed on the document under review; a PDF can print any phone number and any email address, and sophisticated fakes print real-sounding ones that route back to the forger.

Making Verification Routine, Not Heroic

The organizations that avoid certificate fraud are not more suspicious; they are more routine. Verification is embedded in onboarding: no purchase order is issued for a regulated SKU until its documents clear the seven steps, and the verification record — screenshots, dates, correspondence — is filed with the order. Renewal dates live in a shared calendar with reminders, because expired documents reproduce the fraud problem in slow motion: a supplier who lets a certificate lapse and ships anyway has decided that your compliance is negotiable. Re-verification is triggered by change, not just by time — a new factory line, a new brand name on the invoice, a new laboratory on the reports — any of which deserves a fresh pass through the steps.

Budget the effort honestly: a full seven-step verification of a document set takes an afternoon, and most of that is the filing. Against one blocked shipment — demurrage, re-export costs, a customer relationship cooled by a compliance failure — the afternoon is the cheapest insurance in the sourcing budget. The buyers we respect treat it exactly that way: not as distrust of suppliers, but as standard professional hygiene that any serious supplier will recognize and welcome, because they run the same routine on their own upstream documentation.

When You Find a Fake

Stop the commercial process — a supplier willing to send a forged certificate has told you something about every other document in the relationship. Keep everything in writing, including the verification attempts that exposed the problem. The same claims boundary that governs the rest of our content applies here: no compostability or biodegradability statement is made or accepted in supplier files without an EN 13432 (or equivalent) report covering the finished product — forged environmental certificates are among the most common fakes in this trade. If the document imitates a real institution, consider notifying that issuer; institutions track fraudulent use of their names and often act on it. Review with your legal counsel before any accusation, and audit the rest of the pack with fresh eyes — forgery rarely travels alone. Certificates borrowed from another client’s shipment deserve the same response: a certification without authorized use for your chain supports no compliance at all. Some issuers charge a fee for formal verification letters; the cost is trivial next to one blocked shipment.

Build this routine into your supplier onboarding: request documents at RFQ stage, verify before the first order, and re-verify at renewal dates. When you are evaluating us, apply the same standard — request a quote, ask for the six-field document package for your SKUs, and verify whatever we send through the official channels. The product range is at the shop, and the method behind our download center is described in our six-field certification pack guide.

Frequently asked

Does the laboratory charge to confirm a report?

Some issuers charge for a formal verification letter; the cost is small next to the risk of one blocked shipment. Always initiate contact through the channels on the institution's official website, not the contacts printed on the PDF.

The certificate is real but belongs to another client of the supplier — is it valid for me?

No. A certification without authorized use for your chain supports no compliance. Request documents issued for your own SKU and production batch.

I found a fake certificate — what now?

Interrupt the commercial process, keep all records in writing, consider informing the institution whose name was misused, and review the rest of the supplier's documents with fresh eyes. Involve your legal counsel before making formal accusations.

How do I verify Brazilian government-adjacent documents?

Through the official portals: ANVISA at consultas.anvisa.gov.br, INMETRO at gov.br/inmetro, MAPA at gov.br/mapa — citing each institution by its full name. Documents not found in public registers may be laboratory reports; ask the laboratory for a verification letter.

Sources

Every figure above is traceable to these sources; where they disagree, both positions are stated. Values specific to our own products (carton size, 20GP loading, NCM, certificates) remain pending factory confirmation and are not presented as measured data. Regulatory summaries are a buyer’s working reference, not legal advice — confirm with your broker before you file.