Is the Certificate Genuine? Verification and What to Watch for Against Fake Certificates

It is common to ask for an ISO certificate before starting to work with a supplier, partner or dealer, but few people check whether the certificate was really issued, whether it has expired and whether the scope covers their business. Certificates from fake or non-accredited bodies carry both contract and reputational risk.

1. Who issued the certificate?

The certificate must carry the name, address and accreditation mark of the body. Accreditation determines the value of the certificate. Verify on the accreditation body's website that bodies carrying out management system certification are accredited. Certificates from non-accredited bodies are not internationally recognised and may not be accepted in tenders.

2. Query the certificate number online

Every reliable certification body offers a way to query a certificate number. With us it takes a few seconds: when you enter the certificate number, the organisation's name, standard, scope, validity date and status (valid, suspended, withdrawn, expired) appear. If you cannot query it, ask the body for written verification.

3. Validity date and surveillance

A certificate is valid for three years, but if the annual surveillance audit is not carried out it is suspended. A photocopy or an old PDF does not show the current status. So the certificate should be queried again at each contract renewal.

4. Is the scope relevant to you?

Does the certificate cover the part you buy or only office activities? The site and scope are written on the certificate. If the product you procure is outside the scope, the certificate means nothing for you.

5. Warning signs

• A certificate issued in a very short time and without a physical audit
• A quote far below the market price
• A certificate number that cannot be queried
• No accreditation mark on the certificate
• The body's address and phone cannot be verified

What should you do?

If you find a suspicious certificate, report it to the body, the accreditation body and, if necessary, the relevant administrative authority. If you think our certificates are being misused, you can contact us via the complaint form on our site; reports are examined within five working days.

Protecting your own certificate

As certificate holders you also need to follow the certificate and logo use rules: do not use the logo on products or packaging in a way that suggests product certification, and do not use the certificate in advertising material for activities outside the scope. These breaches can lead to suspension of the certificate.

A practical method for supplier assessment

Add fields for certificate number, issuing body and validity date to your supplier approval form and set a re-verification date each year. For key suppliers, sending a written verification request directly to the certification body gives extra assurance.