Back to all posts

How to Verify a Peptide COA: Real vs Fake Reports

Research Guides AUG 30, 2026 11 MIN READ

Every vendor in this category will send you a certificate of analysis. Almost none of them will tell you how to check whether the document is real.

That gap is the whole problem. A COA is a PDF. PDFs can be edited by anyone with fifteen minutes and free software. The number on the page is worth exactly as much as your ability to confirm it came from the lab whose logo is at the top, and most buyers never take that step because nobody explains how.

This post explains how. It applies to any vendor’s documents, including ours. If you finish reading and go check our COA library harder than you were planning to, that is the correct outcome.

What a certificate of analysis actually is

A COA is a lab report on one sample. Someone took material from a specific batch, sent it to an analytical lab, the lab ran one or more tests, and the report states what those tests found on that day for that sample.

That is the entire scope. It is a snapshot, not a warranty.

What follows from that is worth stating plainly, because vendors rarely do:

None of that makes COAs worthless. A batch-tagged, independently verifiable COA is the single most useful piece of information a buyer can get about a research compound. It just needs to be read as what it is.

Anatomy of a real purity report

Most peptide COAs in circulation are HPLC purity reports, sometimes paired with a mass spectrometry identity report. These answer two different questions, and buyers routinely treat them as interchangeable.

The chromatogram

An HPLC report should include a chromatogram: a graph with time on the horizontal axis and detector response on the vertical axis. As the sample moves through the column, different compounds come out at different times and register as peaks.

A clean report shows one dominant peak with a handful of small ones near the baseline. The dominant peak is the target compound. The small ones are impurities, related fragments, or solvent artifacts.

Retention time is where along that horizontal axis the peak appears. It is a fingerprint of sorts, but only a comparative one. If the lab ran a reference standard under identical conditions and the sample peak lands at the same retention time, that is supporting evidence for identity. On its own, retention time proves very little, because different molecules can elute at similar times under the same method.

If a report gives you a purity percentage and no chromatogram, you are looking at a claim, not a measurement. Ask for the full report.

What the purity percentage is measured against

This is the most misunderstood number in the industry.

HPLC purity is almost always reported as area percent: the area under the main peak divided by the total area of all peaks the detector saw, at one specific wavelength. It answers “of everything this detector could see, what fraction was the target compound?”

It does not answer “what fraction of the material in this vial is the peptide?” Those are different questions, and the gap between them is real:

So a 99% area-percent purity result is a real and meaningful measurement, but it means “the chromatographic profile is clean,” not “99% of the powder is peptide.”

Why mass spectrometry is a different question

HPLC tells you how clean the sample is. It cannot tell you what the dominant peak actually is.

Mass spectrometry answers identity. It measures the molecular weight of the compound and compares it against the expected weight for the molecule on the label. If a vial labeled one thing contains a cheaper, structurally different compound, a clean HPLC report will look fine and MS is what catches it.

Test Question it answers What it cannot tell you
HPLC How clean is this sample relative to other detected compounds? What the compound actually is
Mass spectrometry Does the molecular weight match the labeled molecule? How much impurity is present
Net peptide content / assay How much target compound is in the vial by mass? Identity or impurity profile

A report with both HPLC and MS is meaningfully stronger than one with HPLC alone. At the major independent labs, the standard analysis now bundles identity, purity, and per-vial quantity in one report - so a document missing two of the three deserves the question of why.

The verification hierarchy

This is the part that matters. Documents are not equal, and the difference is not how professional the PDF looks. It is whether you can confirm the document at the source.

Tier 1: provider-verified reports

The lab that issued the report lets anyone confirm it independently.

Janoshik Analytical is the reference case. Reports carry a task number and a unique key, and the lab publishes a verification page where anyone can enter those two values and see the report as the lab issued it. If the numbers on the vendor’s PDF have been altered, the lab-side record will not match. Freedom Diagnostics offers a comparable lookup on the reports it issues. Check each lab’s current process directly, since the mechanics change over time.

This is the gold standard, and it is the only tier where you are not trusting the vendor at all. You are trusting a lab you contacted yourself, through a page the vendor does not control.

When a vendor gives you a report from a lab with a verification endpoint, use it. It takes under a minute. If the key is missing from the document, ask for it. A vendor that hesitates has told you something.

Tier 2: named-lab PDFs hosted on the vendor’s site

The report names a real lab, includes a chromatogram, and carries a batch number, but there is no way to check it against lab-side records.

This is better than nothing and it is where most of the industry sits. The document may well be genuine. The problem is structural: a PDF hosted on a vendor’s own server, with no independent record to compare against, is a claim the vendor is making about itself. You can cross-check the lab exists, that the method and instrument details are plausible, and that the batch number matches your product. You cannot confirm the numbers were not changed.

Treat Tier 2 as a reasonable signal of good faith and a poor substitute for verification.

Tier 3: unnamed-lab or in-house documents

No issuing lab named, or the “lab” is the vendor’s own operation under a different name. Sometimes a clean-looking table of specifications with no chromatogram at all.

Treat these as marketing. Not because they are necessarily false, but because there is no mechanism by which they could be checked. A document with no external accountability carries no information about the vendor beyond the fact that they were willing to produce it.

Tier What you have What you can confirm How to treat it
1 Report with a lab-side verification key Everything, at the lab Evidence
2 Named-lab PDF on the vendor’s site Lab exists, batch number matches Signal
3 Unnamed lab, in-house, or no chromatogram Nothing Marketing

Red flags in a COA

Individually, some of these have innocent explanations. Two or more together should stop the purchase.

How to commission your own test

The strongest verification available to a buyer is the one the vendor never touches.

The route is simple. Buy the product normally. Take one vial from the pack, and send it directly to an independent analytical lab yourself. Because the sample went from your hands to the lab’s hands, the chain of custody is yours end to end. There is no point in the process where a vendor could substitute material, and no report you are asked to take on faith.

Practical notes:

For anyone sourcing at wholesale volumes, this is not an optional exercise. The cost of one test is a rounding error against a five-figure inventory order, and it is the only evidence about a supplier that does not originate with the supplier. Our complete guide to peptide wholesale covers the rest of the vetting checklist, and the US vs overseas comparison covers how supply geography changes what you can realistically verify.

Where WWP stands

We are going to hold ourselves to the hierarchy above rather than around it.

Our COA library holds batch-tagged results submitted by customers who tested material they bought from us. Each entry carries the compound, the batch number where available, and the report itself. That is customer-submitted documentation, and by our own framework above it sits at Tier 2 unless the report carries a lab-side verification key. When it does, you can check it at the lab yourself, and we would rather you did.

Those tests were commissioned by customers, not by us, and we describe them that way. Dressing customer-submitted reports up as something we ran ourselves would be the exact kind of claim this post is telling you to distrust.

What we do publish is a standing policy:

Cada lote tiene una pureza ≥99 %. Envíanos un certificado de análisis (COA) de cualquier análisis independiente y te daremos un vale de compra, independientemente de lo que indique.

Regardless of what it shows. If a customer tests a pack and the result comes back below spec, they get store credit and the report goes in the library. That policy only makes sense for a company that expects its material to test well, and it is the most direct way we know to say so without asking anyone to take our word for it.

If you want to run that check yourself, the catalog is at /shop/, and the comparison work on individual compounds starts with BPC-157 vs TB-500.

Frequently asked questions

What does a COA prove?

That a specific sample from a specific batch produced specific results on a specific date, at the lab that issued the report. It proves nothing about other batches, other vials, or how the material was handled after testing. Its value depends almost entirely on whether you can confirm the document at the issuing lab.

Can a COA be faked?

Yes, easily. A COA is a PDF, and PDFs are editable. Purity numbers, batch codes, dates, and even entire chromatograms can be altered or fabricated. This is why the verification hierarchy matters more than the document’s appearance. A report you can check at the lab’s own verification page is a different class of evidence from a report you cannot.

What should a COA include?

At minimum: the issuing lab’s name and contact details, the sample identifier and batch number, the test date, the analytical method and instrument, the chromatogram itself, and the purity result with the basis it was calculated on. A verification task number and key, where the lab offers them, is what moves the document from a claim to something checkable. Mass spectrometry identity data alongside the HPLC purity data is a meaningful upgrade.

Does a high purity number mean a product is safe?

No. Purity and safety are different questions and a COA only answers the first one. An HPLC report measures composition against the compounds a detector could see. It says nothing about biological effect, contamination outside the method’s detection range, handling, or suitability for any use. Every product in this category is sold for laboratory and research use only and is not for human consumption. A COA is a document about chemistry, and that is the entire limit of what it can tell you.

The bottom line

Ask for the full report, not the number. Check whether the issuing lab offers verification, and use it when it does. Treat unnamed-lab documents as marketing. And when the order size justifies it, buy a vial and send it to a lab yourself, because a report whose chain of custody starts in your own hands is the only one nobody could have edited.

Apply that to every vendor you evaluate. Including this one.

Back to all posts

Stay in the know.

Restock alerts, new compound drops, pricing changes, and the occasional research guide. One email when something matters - never spam.

0