The Peptide COA deskMethods, documents and the data behind them
Lead explainer
Peptide COA: how to check a certificate of analysis is real
A peptide COA is real when the laboratory named on it confirms, through contact details you found yourself, that it issued that report number for that sample, and when the data printed on the page backs up the summary: an HPLC chromatogram for purity and an observed mass for identity. A fake COA nearly always fails one of those tests, because the lab can't be found, won't confirm the report, or the raw data is missing or doesn't match. Even a genuine COA only describes a batch, so if you need to know what is in the vial you hold, have that vial tested.
Before you trust a COA
A COA covers a batch, not your vial. Always use a reputable testing service like peptidetesting.au to check the vial you actually hold.
This briefing from the Peptide COA desk shows what a genuine certificate of analysis contains, the red flags that mark a forged one, where to verify a lab's report, and what even a genuine COA cannot tell you about the vial in your hand.
A certificate of analysis (COA) is a laboratory report that states what was tested, by which method, and what the result was, for one identified sample on one date. For a peptide it usually reports purity by high-performance liquid chromatography (HPLC) and identity by mass spectrometry, and sometimes peptide content, water and bacterial endotoxin.
Fig. 1 Anatomy of a certificate of analysis. Illustrative example only: the laboratory, sample, report number and results are fictional. The numbers match the notes below. Open full size
Laboratory identity. A legal or trading name, a street address and a phone number or email. The same details should appear on the lab's own website, which you find by searching, not by clicking a link in the PDF.
Accreditation and scope. An accreditation number you can look up, and a mark against any result that sits outside the accredited scope.
A unique report number. One number per report, with an issue number and a page count ("page 1 of 3"), so missing pages and reissued versions are obvious.
Sample and batch. What arrived as described on its label, the batch or lot number, the lab's own sample ID, and the dates received and tested.
A method for every result. For example reversed-phase HPLC with UV detection at 214 nm for purity, LC-ESI-MS for identity and a named LAL method for endotoxin.
Results against a specification. Numbers with units. Identity given as observed mass beside expected mass, not a bare word such as "conforms".
Raw data. A chromatogram with axes, retention times and a peak table whose areas add up, plus the mass spectrum on a later page.
Authorisation. The name and role of the person who released the report, the issue date, and a statement that results relate only to the sample received.
Accredited laboratories follow rules about what goes on a report. NATA (the National Association of Testing Authorities, Australia) says reports from accredited organisations must include information relevant to the international standard they are accredited to, such as ISO/IEC 17025 for testing laboratories, and that its endorsement is not permitted on reports of testing outside the scope of accreditation. A COA that carries an accreditation mark but leaves out the sample identity, the method or the signatory is already off-pattern.
Two kinds of peptide COA circulate. A batch COA is ordered by a manufacturer or seller on a sample from a production batch and is then shared with buyers. A vial COA is ordered by the person holding the vial and covers that vial only. Both can be genuine. They answer different questions, which matters later in this briefing.
How to tell if a peptide COA is real
You can tell a peptide COA is real by tracing it to its source: find the laboratory on your own, confirm that its accreditation covers the test, and ask it to confirm the report number. Everything else on the page, from the logo to the purity figure, is easy to copy.
1. Find the laboratory without using the document
Search for the lab by name and check that its website lists the same address and phone number as the COA. Contact details that exist only on the PDF prove nothing. For an Australian business, ABN Lookup shows whether an ABN is active or cancelled and which entity it belongs to. Watch for look-alike domains: one changed letter is enough to route your enquiry to the forger.
2. Check the accreditation claim on the register
An accreditation logo is a picture. The number beside it is what you check. NATA's Find Organisation search takes an accreditation or site number and shows whether the facility is active, suspended or withdrawn, with a scope page listing what it is accredited to do. For a lab outside Australia, the ILAC signatory search points you to that country's accreditation body. A lab can be accredited for some tests and not others, so look for the technique on the report, such as liquid chromatography, in the scope.
3. Match the report to the product
The peptide name, batch number and dates should line up with your label. A report dated before the batch was made, a batch number that differs by one digit, or the same report attached to two different products are all reasons to stop.
Send the lab the report number and a copy of the page and ask whether it issued that report, for that sample, with those results. This is the step that settles the question; the method note on verifying a COA with the issuing lab covers what to send and how to read the reply. If the lab won't confirm, treat the COA as unverified, however professional it looks.
Where to verify a certificate of analysis
These are the places a reader can actually check a certificate of analysis. Registers can vouch for a laboratory, the issuing lab can vouch for a document, and only a fresh test can speak for a particular vial. The list is a starting point, not a complete directory, and it is ordered the way we would use it.
01
The laboratory that issued the report
Primary check · any lab, anywhere
The issuing laboratory is the only party that can confirm it produced a specific report number for a specific sample, so a direct enquiry to the lab is the strongest single check on any COA.
Use contact details you found yourself, quote the report number and attach the page. A genuine lab can usually say whether the number exists and whether the sample, batch and results match its records. Some labs will only discuss a report with the client who ordered it, which still tells you something.
Best for
Settling whether one specific COA is genuine
What you can check
report number exists; sample and batch match; results unaltered; issue date
NATA's Find Organisation search lists accredited organisations in Australia and can be filtered by accreditation or site number, accreditation standard, technique and test standard, with each facility's status shown as active, suspended or withdrawn.
Search the accreditation number printed on the COA, then open the facility's scope page and look for the technique the report used. NATA's guidance says its endorsement is not permitted on reports of testing outside the scope of accreditation, so a NATA mark beside an out-of-scope test is a problem in itself.
Best for
Checking an Australian lab's accreditation number and scope
What you can check
accreditation or site number; status: active, suspended or withdrawn; scope by technique and test standard
ILAC's signatory search lists the national accreditation bodies that have signed the ILAC Mutual Recognition Arrangement, which makes it the quickest way to find the right register for a laboratory based outside Australia.
NATA appears in the list as the National Association of Testing Authorities, Australia. For an overseas lab, find its country's signatory body here, then search that body's own register for the number on the report. ILAC describes the arrangement as one that enhances the acceptance of products across national borders.
Best for
Finding the accreditation body for an overseas laboratory
What you can check
accreditation bodies by economy; scope of signatory status; routes to national registers
ABN Lookup gives free access to public Australian Business Number records from the Australian Business Register, so you can check whether an ABN printed on a COA or invoice is active or cancelled and which entity holds it.
It also shows historical trading names where available. A lab name that doesn't match the ABN beside it, or an ABN cancelled before the report date, deserves a second look. ABN Lookup says nothing about a laboratory's competence, only that the business exists.
Best for
Confirming that an Australian business named on a document exists
What you can check
ABN active or cancelled; entity name and type; historical trading names
Peptide Testing Australia (peptidetesting.au) is an Australian service that tests peptide samples posted from within Australia for identity and purity, using HPLC and mass spectrometry through accredited laboratory partners, and issues a plain-English Certificate of Analysis for each vial.
It answers a different question from the checks above. A batch COA, even a genuine one, describes a sample the seller chose; a vial test describes the vial you actually hold. Its standard price is A$575 per vial including GST, with periodic discounts. Extra vials in the same order are 10% off, and a blend or stack in one vial counts as one vial plus A$185. Turnaround is about 5 to 7 business days plus postage. It accepts samples from within Australia only, does not sell or source peptides, and gives no medical advice.
Best for
Checking the vial in your hand when the paperwork can't be verified
What you can check
identity by mass spectrometry; purity by HPLC; one plain-English COA per vial
The Therapeutic Goods Administration is Australia's regulator of therapeutic goods, and its report-a-problem pages cover adverse events and product problems and lead to the form for reporting suspected breaches such as counterfeit products or unlawful supply.
Use it when the problem is bigger than one document: a forged certificate attached to a product being supplied in Australia, or a product that has caused harm. Keep the COA, the product label and any messages, because a report is more useful with evidence attached.
Best for
Reporting a forged certificate or suspect product supplied in Australia
Who should know about a forged report or a harmful product?
Free; online forms
Fake COA red flags at a glance
Most fake COAs are either edited copies of a real report or templates with no laboratory behind them, and both leave marks you can see without a chemistry degree. One flag is a reason to verify; two or more is a reason to stop relying on the document.
Fake COA red flags and what to do about each
Red flag
Why it matters
What to do
No street address, phone or report number
Nothing on the page can be checked
Treat as unverified until the lab is found
Accreditation logo with no number
A logo is an image anyone can paste
Ask for the number and search the register
Batch shown as "see vial" or missing
The report can't be tied to any product
Ask for the batch-specific report
Impossible or inconsistent dates
Tested before it was made, or 31 November
Ask the lab to confirm the dates
Identity reported as "conforms"
No observed mass means no evidence
Ask for the mass spectrum
Chromatogram with no axes or peak table
The purity figure can't be traced to data
Ask for the full trace and table
Same chromatogram on different products
A real trace is unique to its run
Compare the noise and small peaks
Seller's branding instead of the lab's
The document may not come from a lab at all
Ask who ran the test, then contact them
The full list, with an annotated example document, is in our method note on fake COA red flags.
Purity, identity, content and endotoxin are four different questions
Purity, identity, content and endotoxin are four separate measurements, and a COA can pass one while saying nothing about the others. Purity asks how much of the detected material is the main compound, identity asks whether that compound is the right molecule, content asks how much peptide is in the powder by weight, and endotoxin asks whether bacterial residue is present.
Four measurements a peptide COA may report
Measure
Question it answers
Typical method
What the COA should show
Purity
How much of the UV signal is the main peak?
Reversed-phase HPLC, UV detection
Chromatogram, peak table, area %
Identity
Is the main compound the right molecule?
Mass spectrometry, often LC-MS
Observed vs expected mass, spectrum
Content
How much of the powder is peptide?
Amino acid analysis, nitrogen, qNMR
% w/w and the basis used
Endotoxin
Is bacterial endotoxin present, and how much?
LAL or recombinant reagent assay
Result in EU per mg or mL, method
Medicine regulators treat these as separate tests. The European Medicines Agency's guideline on synthetic peptides, which took effect on 1 June 2026, lists identification, purity, assay or content, counter-ion content, residual trifluoroacetate (TFA), water content, residual solvents, bacterial endotoxins and microbiological purity as specification tests that may apply to a peptide active substance. It recommends at least two orthogonal methods to identify a peptide and expects impurity methods sensitive enough to report peptide-related impurities from 0.1%.
Peptide content matters because a vial labelled 10 mg is rarely 10 mg of peptide alone. Synthetic peptides are usually isolated as salts with counter-ions such as acetate or TFA and also hold water, which is why the same guideline asks for content to be expressed on a counter-ion-free, anhydrous basis. A COA that gives "purity 99%" and no content figure has not told you how much peptide is in the vial.
Fig. 2 Endotoxin testing at the US FDA: scientist Don Hochstein holds two labelled LAL test tubes. FDA says it has accepted the Limulus amebocyte lysate (LAL) test for endotoxins for more than 30 years.Photo: U.S. Food and Drug Administration, Wikimedia Commons, public domain (US government work). Cropped.
Endotoxins are lipopolysaccharides from the outer membrane of gram-negative bacteria, and FDA's inspection guide notes that they are difficult to remove from products once present, with filtration having limited effect. FDA's pyrogen and endotoxins guidance, revised in March 2026, covers LAL tests and the newer recombinant reagents. None of this shows up on an HPLC trace, so a purity result is silent on endotoxin.
What a genuine COA still cannot tell you
Even a genuine, verified COA only describes the sample the lab received, on the date it tested it. It cannot tell you whether the vial you bought came from that batch, whether it was relabelled on the way, or how it was stored after the test.
That gap is where most of the confusion about COAs comes from. A seller can hold a real report from a real laboratory and still ship a different product, by mistake or by design, because the report is a statement about one sample. The question a buyer usually wants answered is narrower and more personal: is this vial what its label says?
The hard limit is simple: a COA describes a batch, not the vial in your hand. If the vial's history is unknown, the only way to answer for that particular vial is an identity and purity test on the vial itself. Our method note on batch COAs versus your own vial sets out what can change between the two and when a batch report is enough.
Bench note
A COA is evidence about a document's sample, not a guarantee about a product. Keep the two ideas apart and most COA questions become easier to answer.
Why forged certificates circulate
Forged certificates circulate because a PDF is the cheapest part of a product to fake and the part most buyers check last. The World Health Organization describes falsified medical products as those that deliberately misrepresent their identity, composition or source, and estimates that at least 1 in 10 medicines in low- and middle-income countries are substandard or falsified.
WHO also notes that such products are often sold online or in informal markets. Peptides sold online outside the medicines system sit close to that pattern: the buyer rarely meets the seller, the product is a white powder that looks the same whether it is right or wrong, and the certificate is often the only quality evidence offered. That makes the certificate worth checking properly, and it explains why so many look convincing at a glance.
None of this means every COA is fake. Many are genuine reports from competent labs. The point is that a COA earns trust when it can be traced, and the tracing takes minutes once you know where to look.
Questions readers ask
What is a COA for peptides?
A peptide COA (certificate of analysis) is a laboratory report giving the test results for one identified sample, usually purity by HPLC and identity by mass spectrometry, and sometimes peptide content, water and endotoxin. It should name the laboratory, the sample, the batch, the methods and the date, and it applies only to the sample tested.
How do I know if a peptide COA is legit?
Contact the laboratory named on it using details you find yourself, quote the report number, and ask it to confirm the sample, batch and results. Then check any accreditation number on the accreditation body's register, such as NATA's Find Organisation search. A COA the lab won't confirm should be treated as unverified.
How do you know if peptides are fake?
You can't tell by looking, because the wrong compound looks the same as the right one in a vial. Identity needs a mass spectrometry result on that material and purity needs HPLC. A genuine batch COA is useful evidence, but only a test on the vial itself answers for that vial.
Is 95% purity good for peptides?
It depends on what the number measures. An HPLC purity of 95% means about 5% of the UV signal came from something other than the main peak. For comparison, European rules for peptide medicines require peptide-related impurities to be reported above 0.1%, identified above 0.5% and qualified above 1.0%. A purity figure also says nothing about peptide content, endotoxin or sterility.
Where can I get a COA for peptides?
A COA comes from the laboratory that tested the sample. Sellers often supply a batch COA, and you can ask which lab issued it and verify it there. A certificate that covers your own vial requires the vial itself to be tested; the resources listed above include a vial testing service in Australia.
Can a genuine COA still be misleading?
Yes. A real report can be attached to the wrong product, an older batch, or a sample that was better than the rest of the batch. It can also be genuine but cover purity only, not identity. Check that the batch, peptide name and dates line up with what you hold.
What does "HPLC tested" mean on a peptide label?
It means someone ran the material through high-performance liquid chromatography, usually to estimate purity from peak areas. On its own the phrase doesn't say who tested it, when, which batch, or what the result was. Ask for the report and the chromatogram behind the claim.
Does a NATA logo on a COA prove it is genuine?
No. A logo can be pasted onto any document. Search the accreditation number in NATA's Find Organisation tool, check that the test sits inside the facility's scope, and confirm the report with the laboratory itself.