Peptide COA Red Flags: How to Spot Fake or Incomplete Certificates of Analysis

Why COA Verification Matters Before You Buy

A certificate of analysis is the primary document establishing the identity, purity, and safety profile of a research peptide. Without a legitimate COA, you have no independent confirmation that the compound in your vial is what the label says it is, at the purity level required for reliable research.

The problem is that producing a professional-looking document is trivially easy. A supplier with no testing infrastructure can format a PDF with invented HPLC figures, a plausible-sounding lab name, and chromatogram images pulled from another batch or another supplier entirely. Researchers who do not know what to look for cannot tell the difference from the document alone.

This guide is grounded in what legitimate third-party testing actually looks like, so you can identify the gaps in documents that do not meet that standard. For a complete walkthrough of how to read every field of a real COA, see our guide on how to read a peptide COA.

Red Flag 1: No Named Testing Laboratory

A legitimate COA is issued by the laboratory that performed the testing, not by the supplier. The document should prominently display the name, address, and contact information of the third-party testing lab. This is a non-negotiable element of authentic documentation.

If a COA lists only the supplier's branding, with no separate testing laboratory identified, the document is almost certainly produced by the supplier itself. Internal testing documents are not verifiable and do not provide the independent confirmation that third-party testing is designed to supply.

When you have a lab name, verify it independently. Search the name. A legitimate contract testing laboratory will have a website, appear in industry directories, and be reachable by phone or email. Laboratories certified under ISO 17025 will appear in the accreditation body's public database. If independent searches return nothing, the lab name may be fabricated.

Red Flag 2: No Batch or Lot Number Matching Your Vial

Every COA should carry a unique batch or lot identifier that matches the identifier printed on the vial label you received. This batch number is the traceable link between the document and the specific production run that produced your compound.

Without a batch number, the document cannot be confirmed to correspond to your vial rather than a different production run, a previous batch, or a generic template the supplier uses for all orders. A COA with no lot number is documentation theater, not documentation.

Even more concerning is a COA where the batch number does not match your vial label. This happens when suppliers reuse documentation from a previous batch, apply a batch number retroactively, or provide a generic COA that was never actually connected to your specific order.

Red Flag 3: HPLC Purity Without a Chromatogram

Any supplier can type "99.2% purity" into a document. The figure is meaningless without the underlying HPLC chromatogram showing the actual peak data that produced it.

A legitimate HPLC purity result includes a chromatogram image showing the peak profile. The main compound peak should be clearly the dominant feature, with any impurity peaks visible (and integrated separately to produce the purity percentage). The chromatogram should include the run conditions: column type, mobile phase, gradient, and detection wavelength. Without these parameters, the chromatogram cannot be reproduced or verified.

Specific things to check on a chromatogram:

• The peak area integration values should add up to the reported purity figure
• The run time and peak position should be consistent with the compound's known chromatographic behavior
• The baseline should be clean, with no unusual artifacts that suggest image manipulation
• The axis labels should show retention time and UV absorbance, not generic placeholders

If you see only a purity percentage with no chromatogram attached or linked, ask the supplier directly for the chromatogram. A legitimate supplier will provide it without hesitation. Refusal or inability to provide the underlying data is a clear signal that the purity figure is not grounded in actual testing.

Red Flag 4: Mass Spectrometry Confirmation Is Missing

HPLC purity tells you what percentage of the sample is the dominant compound. It does not tell you what that compound actually is. A 99% pure sample could be 99% pure wrong compound. Mass spectrometry identity confirmation is what establishes that the dominant peak is actually the compound you ordered.

A complete COA includes both the theoretical molecular mass of the compound and the observed mass from LC-MS analysis. These should match within the instrument's measurement tolerance (typically within 0.5 Da for a standard peptide). A COA without mass spec data has a critical gap in the identity verification chain.

For longer-chain peptides and GLP-1 receptor agonist analogs like Retatrutide (theoretical mass ~4,862 Da) and Tirzepatide, mass confirmation is especially important because even small synthesis errors can produce a peptide of nearly identical HPLC retention time but meaningfully different biological activity in research models.

Red Flag 5: Endotoxin Result Is Pass/Fail Only

Endotoxin testing by LAL kinetic chromogenic assay produces a quantitative result in Endotoxin Units per milligram (EU/mg). A legitimate endotoxin entry on a COA shows the specific numerical value, such as 0.23 EU/mg, alongside the specification limit the batch was evaluated against.

A COA that shows only "Pass" for endotoxin, with no numerical value, is not providing the data that makes endotoxin testing useful. For researchers working with immune cell systems, inflammatory signaling assays, or any cell-based model sensitive to LPS activation, the specific EU/mg value is necessary to determine whether the batch meets your assay's threshold, not just a generic supplier specification.

Pass/fail endotoxin reporting also prevents batch selection. If one batch comes in at 0.08 EU/mg and another at 0.94 EU/mg, both might "pass" the supplier's internal threshold, but only one is appropriate for highly sensitive in vitro work. You cannot make that determination from a pass/fail result. See our endotoxin testing guide for the full breakdown of EU/mg thresholds by assay type.

Red Flag 6: COA Date Predates the Supplier's Business

This is a simple but revealing check. COAs carry a testing date. If the testing date on a COA predates the supplier's domain registration, company founding, or first appearance in any public record, the document cannot be authentic.

This happens when suppliers acquire existing COA documents from other sources and use them as if they were generated for their own inventory. A quick check of the supplier's domain registration date (publicly available through WHOIS lookup) against the COA date will reveal this inconsistency.

Also check whether the COA date and the batch date make physical sense. A compound tested in January should not be showing up in an order placed in December of the previous year. Date anomalies are a reliable signal that the document was not generated in connection with your actual order.

Red Flag 7: The Same COA Appears for Multiple Different Compounds

Some suppliers use template COA documents where only the compound name and purity figure are changed, while the chromatogram, mass spec data, batch number, and testing date remain the same across different products. This is detectable when researchers compare documents across orders.

Specific signs of a recycled COA:

• Identical chromatogram images appearing on COAs for different compounds
• The same batch number appearing on orders of different peptides placed months apart
• Mass spec data showing a molecular weight inconsistent with the named compound
• The testing date being identical across multiple products ordered at different times

If you purchase multiple compounds from the same supplier, compare the COAs side by side. Legitimate batch documentation will have distinct chromatograms, distinct batch numbers, and distinct testing dates for each compound and production run.

What a Legitimate COA Looks Like

For reference, a complete and trustworthy peptide COA should contain all of the following:

How to Verify Before You Buy

The most effective verification step before placing an order is to request the COA for a specific current batch and check it against the criteria above before purchasing. A legitimate supplier will provide it. Some suppliers, including Lone Star Peptide Co., maintain a publicly accessible COA library where you can look up batch documentation by lot number before or after ordering.

If a supplier refuses to provide a COA before purchase, provides only a generic template without a specific batch number, or cannot identify the testing laboratory by name, those are sufficient grounds to look elsewhere. The research peptide market has enough legitimate suppliers that there is no reason to work with one that cannot produce verifiable documentation.

Frequently Asked Questions