How to verify a supplier’s lab testing
“Third-party tested” means nothing on its own. This is a plain-English guide to reading a Certificate of Analysis (COA), spotting a weak or fake report, and confirming results independently — before you trust a claim.
Testing claims are cheap to print and hard to check. The people who don’t get misled are the ones who know what a real report contains and how to confirm it themselves. That skill is transferable to any supplier, in any category — and it’s the entire basis of how we grade transparency.
What a Certificate of Analysis actually reports
A COA is the lab’s record of what it measured for a specific batch. These are the panels a thorough report includes — the more of them present, the more seriously the supplier takes testing:
How much of the sample is the stated compound vs. impurities, measured by high-performance liquid chromatography.
Confirms the sample is actually the compound the label claims — not a cheaper or incorrect substitute.
Screens for bacterial toxins. A safety-relevant test that many low-effort suppliers skip.
Checks for microbial contamination in the finished sample.
Screens for lead, arsenic, cadmium and mercury contamination from raw material or process.
Confirms the amount in the vial matches the label — under-filled vials are a common quiet shortfall.
Five red flags of a fake or thin COA
A real report identifies the testing laboratory, its address, and a signatory. “Third-party tested” with no lab name is a claim, not evidence.
A COA should tie to a specific production batch. A generic report reused across every order tells you nothing about the vial in your hand.
Testing has a date. A report with no date — or one recycled for years — can’t be matched to current stock.
An image of a report is trivially edited. The strongest reports can be re-checked at the lab’s own site (see below).
A single purity number with no identity, endotoxin, or sterility testing is a partial picture. Broad panels signal a serious supplier.
Independent verification beats a hosted PDF
The single strongest signal is whether a report can be re-checked at the testing lab’s own system — not just downloaded from the seller. Serious labs print a report ID or access code that resolves on the lab’s website. If the same code returns the same result there, the report is real and unedited.
A PDF hosted only by the seller can be genuine — but it can also be edited, reused, or fabricated, and you have no way to tell. Provider-verifiable reports remove that doubt. It’s the difference we weight most heavily.
How we sort suppliers by evidence, not marketing
Reports that resolve independently at the issuing lab — the strongest, reader-checkable tier.
Openly downloadable reports from a named lab, even when they aren’t independently re-checkable.
Evidence that only appears after creating an account — useful, but harder to inspect up front.
Thin or unverified public testing — a supplier we haven’t been able to substantiate yet.
Put it into practice
Paste a report ID or lab code into our free checker and see whether it resolves independently — no account required.
PeptideBenchmark is an independent information resource. We publish testing-transparency information and assessments; we do not sell products or provide medical advice.