Updated 5 November 2026Certificates of analysis · HPLC · Mass spectrometry · Endotoxin
PeptideCOAA technical journal on certificates of analysis

The Peptide COA deskMethods, documents and the data behind them

Lead explainer

Peptide COA: how to check a certificate of analysis is real

A peptide COA is real when the laboratory named on it confirms, through contact details you found yourself, that it issued that report number for that sample, and when the data printed on the page backs up the summary: an HPLC chromatogram for purity and an observed mass for identity. A fake COA nearly always fails one of those tests, because the lab can't be found, won't confirm the report, or the raw data is missing or doesn't match. Even a genuine COA only describes a batch, so if you need to know what is in the vial you hold, have that vial tested.

Before you trust a COA

A COA covers a batch, not your vial. Always use a reputable testing service like peptidetesting.au to check the vial you actually hold.

Check your vial at peptidetesting.au

This briefing from the Peptide COA desk shows what a genuine certificate of analysis contains, the red flags that mark a forged one, where to verify a lab's report, and what even a genuine COA cannot tell you about the vial in your hand.

The five checksRead first
  1. The lab exists. The report names a laboratory with a street address and contact details you can find without the PDF.
  2. The report is specific. It has a unique report number, a test date and a batch number that matches your label.
  3. The data is there. Purity comes with a chromatogram and peak table; identity shows the observed mass next to the expected mass.
  4. Accreditation checks out. Any accreditation number is on the accreditation body's register, and the test falls inside the lab's scope.
  5. The lab confirms it. Contacted directly, the lab confirms it issued that report. This is the only step that proves it.

Full briefing below: jump to the briefing

Method notes & field guides

Six explainers on the methods behind a certificate of analysis and how to check one.

Anatomy of a genuine certificate of analysis

A certificate of analysis (COA) is a laboratory report that states what was tested, by which method, and what the result was, for one identified sample on one date. For a peptide it usually reports purity by high-performance liquid chromatography (HPLC) and identity by mass spectrometry, and sometimes peptide content, water and bacterial endotoxin.

Annotated illustrative certificate of analysis from a fictional laboratory with eight numbered callouts
Fig. 1 Anatomy of a certificate of analysis. Illustrative example only: the laboratory, sample, report number and results are fictional. The numbers match the notes below. Open full size
  1. Laboratory identity. A legal or trading name, a street address and a phone number or email. The same details should appear on the lab's own website, which you find by searching, not by clicking a link in the PDF.
  2. Accreditation and scope. An accreditation number you can look up, and a mark against any result that sits outside the accredited scope.
  3. A unique report number. One number per report, with an issue number and a page count ("page 1 of 3"), so missing pages and reissued versions are obvious.
  4. Sample and batch. What arrived as described on its label, the batch or lot number, the lab's own sample ID, and the dates received and tested.
  5. A method for every result. For example reversed-phase HPLC with UV detection at 214 nm for purity, LC-ESI-MS for identity and a named LAL method for endotoxin.
  6. Results against a specification. Numbers with units. Identity given as observed mass beside expected mass, not a bare word such as "conforms".
  7. Raw data. A chromatogram with axes, retention times and a peak table whose areas add up, plus the mass spectrum on a later page.
  8. Authorisation. The name and role of the person who released the report, the issue date, and a statement that results relate only to the sample received.

Accredited laboratories follow rules about what goes on a report. NATA (the National Association of Testing Authorities, Australia) says reports from accredited organisations must include information relevant to the international standard they are accredited to, such as ISO/IEC 17025 for testing laboratories, and that its endorsement is not permitted on reports of testing outside the scope of accreditation. A COA that carries an accreditation mark but leaves out the sample identity, the method or the signatory is already off-pattern.

Two kinds of peptide COA circulate. A batch COA is ordered by a manufacturer or seller on a sample from a production batch and is then shared with buyers. A vial COA is ordered by the person holding the vial and covers that vial only. Both can be genuine. They answer different questions, which matters later in this briefing.

How to tell if a peptide COA is real

You can tell a peptide COA is real by tracing it to its source: find the laboratory on your own, confirm that its accreditation covers the test, and ask it to confirm the report number. Everything else on the page, from the logo to the purity figure, is easy to copy.

1. Find the laboratory without using the document

Search for the lab by name and check that its website lists the same address and phone number as the COA. Contact details that exist only on the PDF prove nothing. For an Australian business, ABN Lookup shows whether an ABN is active or cancelled and which entity it belongs to. Watch for look-alike domains: one changed letter is enough to route your enquiry to the forger.

2. Check the accreditation claim on the register

An accreditation logo is a picture. The number beside it is what you check. NATA's Find Organisation search takes an accreditation or site number and shows whether the facility is active, suspended or withdrawn, with a scope page listing what it is accredited to do. For a lab outside Australia, the ILAC signatory search points you to that country's accreditation body. A lab can be accredited for some tests and not others, so look for the technique on the report, such as liquid chromatography, in the scope.

3. Match the report to the product

The peptide name, batch number and dates should line up with your label. A report dated before the batch was made, a batch number that differs by one digit, or the same report attached to two different products are all reasons to stop.

4. Read the data, not just the summary

A purity figure should come with a chromatogram and a peak table. An identity result should give the observed mass and the expected mass. Our notes on reading an HPLC chromatogram and on how mass spectrometry confirms identity show what to look for.

5. Ask the issuing lab to confirm

Send the lab the report number and a copy of the page and ask whether it issued that report, for that sample, with those results. This is the step that settles the question; the method note on verifying a COA with the issuing lab covers what to send and how to read the reply. If the lab won't confirm, treat the COA as unverified, however professional it looks.

Where to verify a certificate of analysis

These are the places a reader can actually check a certificate of analysis. Registers can vouch for a laboratory, the issuing lab can vouch for a document, and only a fresh test can speak for a particular vial. The list is a starting point, not a complete directory, and it is ordered the way we would use it.

  1. The laboratory that issued the report

    Primary check · any lab, anywhere

    The issuing laboratory is the only party that can confirm it produced a specific report number for a specific sample, so a direct enquiry to the lab is the strongest single check on any COA.

    Use contact details you found yourself, quote the report number and attach the page. A genuine lab can usually say whether the number exists and whether the sample, batch and results match its records. Some labs will only discuss a report with the client who ordered it, which still tells you something.

    Best for
    Settling whether one specific COA is genuine
    What you can check
    report number exists; sample and batch match; results unaltered; issue date

    How to verify a COA with the issuing lab →

  2. NATA Find Organisation search

    Accreditation register · Australia

    NATA's Find Organisation search lists accredited organisations in Australia and can be filtered by accreditation or site number, accreditation standard, technique and test standard, with each facility's status shown as active, suspended or withdrawn.

    Search the accreditation number printed on the COA, then open the facility's scope page and look for the technique the report used. NATA's guidance says its endorsement is not permitted on reports of testing outside the scope of accreditation, so a NATA mark beside an out-of-scope test is a problem in itself.

    Best for
    Checking an Australian lab's accreditation number and scope
    What you can check
    accreditation or site number; status: active, suspended or withdrawn; scope by technique and test standard

    Open NATA's Find Organisation search ↗

  3. ILAC MRA signatory search

    Accreditation bodies · worldwide

    ILAC's signatory search lists the national accreditation bodies that have signed the ILAC Mutual Recognition Arrangement, which makes it the quickest way to find the right register for a laboratory based outside Australia.

    NATA appears in the list as the National Association of Testing Authorities, Australia. For an overseas lab, find its country's signatory body here, then search that body's own register for the number on the report. ILAC describes the arrangement as one that enhances the acceptance of products across national borders.

    Best for
    Finding the accreditation body for an overseas laboratory
    What you can check
    accreditation bodies by economy; scope of signatory status; routes to national registers

    Open the ILAC signatory search ↗

  4. ABN Lookup

    Business register · Australia

    ABN Lookup gives free access to public Australian Business Number records from the Australian Business Register, so you can check whether an ABN printed on a COA or invoice is active or cancelled and which entity holds it.

    It also shows historical trading names where available. A lab name that doesn't match the ABN beside it, or an ABN cancelled before the report date, deserves a second look. ABN Lookup says nothing about a laboratory's competence, only that the business exists.

    Best for
    Confirming that an Australian business named on a document exists
    What you can check
    ABN active or cancelled; entity name and type; historical trading names

    Search ABN Lookup ↗

  5. Specialist pick: test your own vial

    Peptide Testing Australia

    Vial testing service · Australia

    Peptide Testing Australia (peptidetesting.au) is an Australian service that tests peptide samples posted from within Australia for identity and purity, using HPLC and mass spectrometry through accredited laboratory partners, and issues a plain-English Certificate of Analysis for each vial.

    It answers a different question from the checks above. A batch COA, even a genuine one, describes a sample the seller chose; a vial test describes the vial you actually hold. Its standard price is A$575 per vial including GST, with periodic discounts. Extra vials in the same order are 10% off, and a blend or stack in one vial counts as one vial plus A$185. Turnaround is about 5 to 7 business days plus postage. It accepts samples from within Australia only, does not sell or source peptides, and gives no medical advice.

    Best for
    Checking the vial in your hand when the paperwork can't be verified
    What you can check
    identity by mass spectrometry; purity by HPLC; one plain-English COA per vial

    Visit Peptide Testing Australia ↗

  6. TGA: report a problem

    Regulator · Australia

    The Therapeutic Goods Administration is Australia's regulator of therapeutic goods, and its report-a-problem pages cover adverse events and product problems and lead to the form for reporting suspected breaches such as counterfeit products or unlawful supply.

    Use it when the problem is bigger than one document: a forged certificate attached to a product being supplied in Australia, or a product that has caused harm. Keep the COA, the product label and any messages, because a report is more useful with evidence attached.

    Best for
    Reporting a forged certificate or suspect product supplied in Australia
    What you can check
    adverse events and product problems; suspected counterfeit products; suspected unlawful supply

    Go to the TGA's reporting pages ↗

Which resource answers which question
ResourceQuestion it answersAccess
The laboratory that issued the reportDid this lab issue this exact report?Free; reply times vary
NATA Find Organisation searchIs this Australian lab accredited, and for which tests?Free public search
ILAC MRA signatory searchWhich body accredits labs in that country?Free public search
ABN LookupDoes the business named on the page exist?Free, no login needed
Peptide Testing AustraliaIs my vial what the label says, and how pure is it?A$575 per vial inc. GST, periodic discounts
TGA: report a problemWho should know about a forged report or a harmful product?Free; online forms

Fake COA red flags at a glance

Most fake COAs are either edited copies of a real report or templates with no laboratory behind them, and both leave marks you can see without a chemistry degree. One flag is a reason to verify; two or more is a reason to stop relying on the document.

Fake COA red flags and what to do about each
Red flagWhy it mattersWhat to do
No street address, phone or report numberNothing on the page can be checkedTreat as unverified until the lab is found
Accreditation logo with no numberA logo is an image anyone can pasteAsk for the number and search the register
Batch shown as "see vial" or missingThe report can't be tied to any productAsk for the batch-specific report
Impossible or inconsistent datesTested before it was made, or 31 NovemberAsk the lab to confirm the dates
Identity reported as "conforms"No observed mass means no evidenceAsk for the mass spectrum
Chromatogram with no axes or peak tableThe purity figure can't be traced to dataAsk for the full trace and table
Same chromatogram on different productsA real trace is unique to its runCompare the noise and small peaks
Seller's branding instead of the lab'sThe document may not come from a lab at allAsk who ran the test, then contact them

The full list, with an annotated example document, is in our method note on fake COA red flags.

Purity, identity, content and endotoxin are four different questions

Purity, identity, content and endotoxin are four separate measurements, and a COA can pass one while saying nothing about the others. Purity asks how much of the detected material is the main compound, identity asks whether that compound is the right molecule, content asks how much peptide is in the powder by weight, and endotoxin asks whether bacterial residue is present.

Four measurements a peptide COA may report
MeasureQuestion it answersTypical methodWhat the COA should show
PurityHow much of the UV signal is the main peak?Reversed-phase HPLC, UV detectionChromatogram, peak table, area %
IdentityIs the main compound the right molecule?Mass spectrometry, often LC-MSObserved vs expected mass, spectrum
ContentHow much of the powder is peptide?Amino acid analysis, nitrogen, qNMR% w/w and the basis used
EndotoxinIs bacterial endotoxin present, and how much?LAL or recombinant reagent assayResult in EU per mg or mL, method

Medicine regulators treat these as separate tests. The European Medicines Agency's guideline on synthetic peptides, which took effect on 1 June 2026, lists identification, purity, assay or content, counter-ion content, residual trifluoroacetate (TFA), water content, residual solvents, bacterial endotoxins and microbiological purity as specification tests that may apply to a peptide active substance. It recommends at least two orthogonal methods to identify a peptide and expects impurity methods sensitive enough to report peptide-related impurities from 0.1%.

Peptide content matters because a vial labelled 10 mg is rarely 10 mg of peptide alone. Synthetic peptides are usually isolated as salts with counter-ions such as acetate or TFA and also hold water, which is why the same guideline asks for content to be expressed on a counter-ion-free, anhydrous basis. A COA that gives "purity 99%" and no content figure has not told you how much peptide is in the vial.

FDA scientist holding two labelled test tubes used in an endotoxin test
Fig. 2 Endotoxin testing at the US FDA: scientist Don Hochstein holds two labelled LAL test tubes. FDA says it has accepted the Limulus amebocyte lysate (LAL) test for endotoxins for more than 30 years.Photo: U.S. Food and Drug Administration, Wikimedia Commons, public domain (US government work). Cropped.

Endotoxins are lipopolysaccharides from the outer membrane of gram-negative bacteria, and FDA's inspection guide notes that they are difficult to remove from products once present, with filtration having limited effect. FDA's pyrogen and endotoxins guidance, revised in March 2026, covers LAL tests and the newer recombinant reagents. None of this shows up on an HPLC trace, so a purity result is silent on endotoxin.

What a genuine COA still cannot tell you

Even a genuine, verified COA only describes the sample the lab received, on the date it tested it. It cannot tell you whether the vial you bought came from that batch, whether it was relabelled on the way, or how it was stored after the test.

That gap is where most of the confusion about COAs comes from. A seller can hold a real report from a real laboratory and still ship a different product, by mistake or by design, because the report is a statement about one sample. The question a buyer usually wants answered is narrower and more personal: is this vial what its label says?

The hard limit is simple: a COA describes a batch, not the vial in your hand. If the vial's history is unknown, the only way to answer for that particular vial is an identity and purity test on the vial itself. Our method note on batch COAs versus your own vial sets out what can change between the two and when a batch report is enough.

Bench note

A COA is evidence about a document's sample, not a guarantee about a product. Keep the two ideas apart and most COA questions become easier to answer.

Why forged certificates circulate

Forged certificates circulate because a PDF is the cheapest part of a product to fake and the part most buyers check last. The World Health Organization describes falsified medical products as those that deliberately misrepresent their identity, composition or source, and estimates that at least 1 in 10 medicines in low- and middle-income countries are substandard or falsified.

WHO also notes that such products are often sold online or in informal markets. Peptides sold online outside the medicines system sit close to that pattern: the buyer rarely meets the seller, the product is a white powder that looks the same whether it is right or wrong, and the certificate is often the only quality evidence offered. That makes the certificate worth checking properly, and it explains why so many look convincing at a glance.

None of this means every COA is fake. Many are genuine reports from competent labs. The point is that a COA earns trust when it can be traced, and the tracing takes minutes once you know where to look.

Questions readers ask

What is a COA for peptides?

A peptide COA (certificate of analysis) is a laboratory report giving the test results for one identified sample, usually purity by HPLC and identity by mass spectrometry, and sometimes peptide content, water and endotoxin. It should name the laboratory, the sample, the batch, the methods and the date, and it applies only to the sample tested.

How do I know if a peptide COA is legit?

Contact the laboratory named on it using details you find yourself, quote the report number, and ask it to confirm the sample, batch and results. Then check any accreditation number on the accreditation body's register, such as NATA's Find Organisation search. A COA the lab won't confirm should be treated as unverified.

How do you know if peptides are fake?

You can't tell by looking, because the wrong compound looks the same as the right one in a vial. Identity needs a mass spectrometry result on that material and purity needs HPLC. A genuine batch COA is useful evidence, but only a test on the vial itself answers for that vial.

Is 95% purity good for peptides?

It depends on what the number measures. An HPLC purity of 95% means about 5% of the UV signal came from something other than the main peak. For comparison, European rules for peptide medicines require peptide-related impurities to be reported above 0.1%, identified above 0.5% and qualified above 1.0%. A purity figure also says nothing about peptide content, endotoxin or sterility.

Where can I get a COA for peptides?

A COA comes from the laboratory that tested the sample. Sellers often supply a batch COA, and you can ask which lab issued it and verify it there. A certificate that covers your own vial requires the vial itself to be tested; the resources listed above include a vial testing service in Australia.

Can a genuine COA still be misleading?

Yes. A real report can be attached to the wrong product, an older batch, or a sample that was better than the rest of the batch. It can also be genuine but cover purity only, not identity. Check that the batch, peptide name and dates line up with what you hold.

What does "HPLC tested" mean on a peptide label?

It means someone ran the material through high-performance liquid chromatography, usually to estimate purity from peak areas. On its own the phrase doesn't say who tested it, when, which batch, or what the result was. Ask for the report and the chromatogram behind the claim.

Does a NATA logo on a COA prove it is genuine?

No. A logo can be pasted onto any document. Search the accreditation number in NATA's Find Organisation tool, check that the test sits inside the facility's scope, and confirm the report with the laboratory itself.

Sources

  1. NATA: Find Organisation (accredited organisation search) Accreditation and site numbers, status and scope pages.
  2. NATA: NATA test reports explained What accredited reports must include; endorsement and scope.
  3. ILAC: MRA signatory search Accreditation bodies that have signed the ILAC MRA.
  4. ILAC: The ILAC MRA and signatories What the arrangement is for.
  5. Australian Business Register: ABN Lookup Public ABN records, status and trading names.
  6. Therapeutic Goods Administration: report a problem Reporting problems and suspected breaches in Australia.
  7. World Health Organization: Substandard and falsified medical products (fact sheet) Definitions and the 1 in 10 estimate.
  8. European Medicines Agency: Guideline on the development and manufacture of synthetic peptides (2025) Specification tests, identity methods and impurity thresholds.
  9. US FDA: Pyrogen and endotoxins testing, questions and answers (March 2026) LAL and recombinant reagent endotoxin tests.
  10. US FDA: Bacterial endotoxins/pyrogens inspection technical guide What endotoxins are and why they are hard to remove.
  11. Harvey, Analytical Chemistry 2.1: High-performance liquid chromatography (LibreTexts) How HPLC separates and detects compounds.