How to Verify a Peptide COA
Last updated: April 2026
By Scott Williams·Firefighter/Paramedic · 25+ Years
A certificate of analysis is not a marketing document.
It is supposed to be a third-party record of what was actually in a vial — who tested it, what they found, and when. In the peptide gray market, a COA is often the only independent quality signal a buyer has access to.
The problem is that COAs can be real, fake, incomplete, outdated, or recycled. A document that looks professional is not the same as a document that means anything.
This page explains how to tell the difference.
What a COA actually is
A COA — certificate of analysis — is a document produced by a testing laboratory that records the results of analytical testing on a specific product batch.
For a peptide, a serious COA should confirm two things:
Identity
Is the molecule in the vial actually what the label says it is?
Purity
What percentage of the contents is the target compound versus impurities, degradation products, or contaminants?
A COA that only shows purity without confirming identity is incomplete. Purity of 99% is meaningless if the 99% is the wrong molecule.
For injectable peptide products, a serious COA should also address sterility and endotoxin. Most gray-market peptide COAs do not include sterility and endotoxin testing. That is a meaningful gap.
The six COA tests
Before trusting any peptide COA, run it through these six checks.
1. Lab name
The COA should name a real, independent third-party laboratory. Acceptable labs include Janoshik Analytical, Colmaric Analyticals, MZ Biolabs, Freedom Diagnostics, and their equivalent. "In-house lab" or a lab name with no online presence is not third-party testing.
2. Batch number match
The COA must have a batch or lot number. That number must match the batch number on the vial label when the product arrives. No batch number means the COA is generic — it may or may not represent the product you received.
3. Certificate ID uniqueness
The certificate ID on the COA should be unique to that vendor, product, and batch. If you can find another vendor with the same certificate ID on a different product, the COA has been reused. That is a forgery signal.
4. Date currency
The COA should be recent. A COA older than 12 months is a yellow flag. A COA older than 18–24 months for an injectable product is a red one. Peptides degrade. A test from two years ago does not tell you what is in the vial in front of you.
5. Tests included
A complete peptide COA includes HPLC purity (with chromatogram if available), mass spectrometry identity confirmation, endotoxin testing for injectables, sterility testing for injectables, and heavy metals / residual solvents where relevant.
6. Independent verification
The best testing labs have public verification portals. Janoshik Analytical allows independent COA verification through their website. If the lab has no website, no verification portal, and no independent online presence, the COA cannot be confirmed as real.
The verification workflow
Before ordering:
- Find the COA on the vendor’s site
- Confirm the lab is a real, named third-party lab
- Confirm the COA includes both identity and purity testing
- Check the date — is it recent?
- Verify the certificate ID through the lab’s portal if possible
- Search the certificate ID online to confirm it is not reused across other vendors
When the order arrives:
- Match the batch number on the vial label to the batch number on the COA
- If they do not match, contact the vendor before using the product
That process takes less than five minutes. It is the minimum.
The approved labs
Not all testing labs are equal. The ones with the most consistent track record in the research peptide community:
Janoshik Analytical
Czech Republic based. Public COA verification portal. The gold standard reference in the community.
Colmaric Analyticals
US based. Well-regarded in the peptide testing community.
MZ Biolabs
US based. Used by vendors including Sports Technology Labs and Ascension Peptides.
Freedom Diagnostics
Franklin, Tennessee. Public COA lookup portal. US-based with fast turnaround.
Labs that cannot be independently verified, have no web presence, or have no public portal should be treated with skepticism regardless of how professional the COA looks.
What COA forgery looks like
COA forgery exists in the peptide gray market. The most documented patterns:
Verification key removal
Janoshik COAs include a verification key that links to their portal. Some fake COAs have had this key physically removed or blurred. If a Janoshik COA does not have a verification key, it cannot be confirmed as real.
Certificate ID reuse
Using the same certificate ID across multiple products or vendors. A real COA is batch-specific. Reusing an ID from a different batch, vendor, or product is fraud.
Lab substitution
Using a real lab’s name and format on a document that was never actually issued by that lab. The only defense is independent verification through the lab’s own portal.
Date manipulation
Changing the date on an old COA to make it appear current.
The defense against all of these is independent verification. If you can confirm the COA through the lab's own portal, matched to the specific batch number, you have done the most important verification step.
What a complete COA should look like
A real, complete peptide COA contains:
- Laboratory name and contact information
- Date of testing
- Specific batch or lot number matching the product
- Product name and molecular identity
- Test methods used (HPLC, MS, etc.)
- HPLC purity result with chromatogram
- Mass spectrometry result with identity confirmation
- Purity result with impurity profile
- Endotoxin testing result (for injectables)
- Sterility testing result (for injectables)
- Pass/fail specifications
- Lab signature, certification, or QR code for independent verification
Any COA missing the batch number, the identity confirmation, or the lab verification mechanism should be treated as incomplete.
The practical bottom line
The peptide market has vendors who take testing seriously and vendors who treat COAs as marketing decoration.
The difference is visible if you know what to look for.
A COA is not decoration. It is the receipt — and in this market, it is often the only independent record of what you are actually getting.
Check the lab. Match the batch number. Verify through the portal. Check the date. Look for identity confirmation, not just purity.
Five minutes of verification is worth doing.
Affiliate Disclosure: This page contains affiliate links. We only recommend vendors we have personally vetted for COA compliance. We may earn a commission at no extra cost to you.
Disclaimer
This page is informational only. Biohacking Unlocked is not a medical resource. Research-use peptides are not FDA-approved drugs. COA verification helps assess product quality — it does not change the regulatory or legal status of any compound. Always consult a qualified healthcare provider before making health-related decisions. See our full disclaimer.