Home › Guides › How to Read a Peptide COA (And Spot a Fake One) By TorontoHealth Editorial · Updated June 17, 2026
How to Read a Peptide COA (And Spot a Fake One)
What is a peptide COA? A Certificate of Analysis is a lab document reporting what a tested sample contained. The key thing to understand: a COA proves a test was performed on some sample — not that it came from the vial you'll receive, nor that the company showing it is the one who paid for the test.
The core lesson most buyers miss
A "real" COA only defeats forgery. It does nothing against the two attacks that actually happen:
Reuse — one good vial gets tested, and thousands of vials are sold against that single COA.
Theft — a vendor posts someone else's genuine COA (a competitor's, or their supplier's) as their own.
Even the founder of one of the most respected testing labs has said publicly that if someone wanted to send a misleading sample, the lab has no way to verify where it came from. The document being authentic is the floor, not the ceiling.
The trust hierarchy — weakest to strongest
A COA PDF on the vendor's own site → weakest. Could be reused, stolen, or not your batch.
The COA resolves on the lab's own verification portal → defeats forgery.
Client name on the COA matches the vendor + the lot on your vial matches the COA → a provenance link.
Independent blind / community testing → the gold standard; the vendor can't pick the sample.
You test your own vial yourself at an independent lab → ultimate certainty.
How to spot a fake or captive "lab"
Some vendors spin up a "lab" that exists to test only for them. Tells to watch for (a pattern, not pointed at any one company):
The "lab's" website was created right around the same time as the vendor's — sometimes days apart.
It has no clients other than that one vendor; no reviews, accreditation, or staff footprint.
Weasel wording like "ISO 17025-aligned" — which is not the same as accredited.
A "verify" portal that returns OK for any number you type in, even a made-up one.
A signatory "chemist" who appears only as a signature line and matches no real record.
Your 6-point COA checklist
Does the COA verify on the lab's own portal, not just a vendor PDF?
Is the lab used by many competing vendors (independent), not just this one (captive)?
Is the lab established, not spun up alongside the vendor?
Is there any independent blind/community testing?
Does the client name match the vendor — and can you match your vial's lot to the COA?
Is the vendor open and specific about testing when you ask, or vague?
Reading a COA isn't about trusting a PDF — it's about asking whose sample, verified where, by a lab accountable to whom. Get those three answers and you've done more diligence than most buyers ever will.