What does a peptide certificate of analysis show, and how do I tell a real one from a fake?

Medically reviewed by Marko Maal · Jun 4, 2026

Reviewed by Marko Maal, MSc Pharmacy LinkedIn-verified

University of TartuPharmaceutical sciences — drug sourcing, formulation, regulatory reviewReviewed Jun 4, 2026

Reviewed for clinical and pharmacological accuracy by Marko Maal, MSc Pharmacy.

Full bio + review process →

The short answer

A certificate of analysis (COA) is the single most useful document for reducing peptide sourcing risk — but only if you know what a real one shows and can spot the fakes, which are common.

Evidence tier framing: This is Tier 2 — established analytical-chemistry methodology (mass spectrometry, HPLC, endotoxin testing). The methods are standard lab science; the only question is whether a given COA actually applied them honestly to your batch.

What a trustworthy COA proves, at a glance:

  • Identity — mass spectrometry confirms the molecule is what the label claims
  • Purity — HPLC reports the percentage that's the target peptide (aim for ≥98%)
  • Provenance — a named independent lab, the specific batch/lot, and a recent date
  • Bonus — sterility and bacterial endotoxin testing

If a COA is missing identity, purity, batch, date, or lab name, it's incomplete. This guide is part of our peptide safety & sourcing guide.

What identity testing (mass spec) tells you

Evidence tier: 2 — mass spectrometry is the standard identity method.

Mass spectrometry measures the molecular weight of the compound in the vial. Every peptide has an expected molecular weight; the COA should show a measured mass that matches it (within a small tolerance). This is what confirms you have the right peptide and not a different, cheaper, or inactive compound.

What to check: the COA states the expected mass and the found mass, and they agree. A COA that asserts identity without showing the mass-spec result is asking you to take its word for the most important fact.

What purity testing (HPLC) tells you

Evidence tier: 2 — HPLC is the standard purity method.

HPLC (high-performance liquid chromatography) separates the sample into its components and reports what fraction is the target peptide versus impurities. The headline number is a purity percentage.

The practical floor is 98%. Research-grade peptides commonly test 95–99%; 98%+ is a reasonable bar. Two cautions:

  • A COA with no purity figure at all is a non-starter.
  • A bare "99.9%" with no chromatogram (the actual graph) attached is less trustworthy than a 98.2% that shows its work. The chromatogram lets you see whether there's a clean single peak or a mess of impurity peaks.

How do I tell a real COA from a fake?

Evidence tier: 2 — document-authentication principles.

Fake or worthless COAs are common because they're easy to produce. The tells:

  • No independent lab named. A real COA identifies the testing lab. A PDF with only the vendor's logo and no lab identity is just marketing.
  • Batch/lot doesn't match your vial. The COA's batch number should match the label on what you received. A generic COA "for this product" rather than for your batch tells you nothing about your vial.
  • No date, or an old date. Testing should be recent and tied to current stock.
  • Reused chromatograms. The same graph appearing across different products or batches is fabrication.
  • Unverifiable lab. Bonus trust if the lab is real, reputable, and contactable.

The strongest signal is an independent, well-known testing lab with a batch-matched, dated report. See our how to verify a peptide vendor for the vendor-level checks, and our vendor trust-score directory where COA transparency factors into the scores.

What about sterility and endotoxin?

Evidence tier: 2 — sterility and endotoxin testing are standard for injectables.

Identity and purity tell you what the peptide is. They don't tell you whether it's safe to inject. For anything going under the skin, sterility (no microbial growth) and bacterial endotoxin testing matter, because contamination can cause injection-site infections or systemic reactions even when the peptide itself is correct and pure.

Most gray-market COAs stop at identity and purity. A COA that also reports sterility and low endotoxin is a meaningfully stronger document — though, as always, it certifies a tested sample, not your individual vial.

What a COA can't do

Evidence tier: 2 — limits of batch testing.

A COA confirms that a tested sample from a batch met specification at the time of testing. It cannot guarantee that your specific vial is identical, that storage and shipping didn't degrade it, or that nothing went wrong after the test. Quality varies within and between batches.

That's not a reason to skip it — a batch-matched, recent, independent COA dramatically reduces risk versus none. It's a reason to treat it as strong evidence rather than a guarantee, and to combine it with the other safety steps in our sourcing guide.

Limitations

This is an educational guide, not medical advice or an endorsement of unregulated products.

  • A COA reduces risk; it doesn't eliminate it — it certifies a sample, not your vial.
  • The safest option is a regulated product under medical supervision, which removes the sourcing question entirely.
  • COA literacy doesn't make self-injection safe — sterile technique and dosing accuracy still matter.
  • Marko Maal, MSc Pharmacy reviewed this article. Reviewer attribution does not constitute a doctor-patient relationship.

The bottom line

A real COA shows identity by mass spec, purity by HPLC (≥98%, with the chromatogram), a named independent lab, and a batch number that matches your vial, dated recently — ideally with sterility and endotoxin testing too. A vendor-printed PDF with no lab, no batch match, or a reused chromatogram is worthless. Reading the COA correctly is the highest-leverage skill in gray-market sourcing, but it certifies a batch, not a guarantee.

References

  • Vanhee C, Janvier S, Desmedt B, et al. 2015. Analysis of illegal peptide drugs via HILIC-DAD-MS. Talanta. 142:1-10. PMID 26003687 — identity/purity analysis of illicit peptides.
  • Sharma SK, et al. 2014. Reversed-phase HPLC methods for the analysis of peptide purity. J Chromatogr A. PubMed search — HPLC purity methodology overview.
  • United States Pharmacopeia. USP <85> Bacterial Endotoxins Test. USP.org — endotoxin testing standard for injectables.
  • U.S. Food and Drug Administration. Research use only products labeling. FDA.gov — meaning of RUO labeling.

Frequently asked questions

What should a peptide COA actually contain?
At minimum: the peptide's identity confirmed by mass spectrometry (the measured molecular weight should match the expected one), purity by HPLC (look for ≥98%), the specific batch/lot number, the test date, and the name of the lab that ran it. Stronger COAs add sterility and bacterial endotoxin testing. If any of identity, purity, batch, date, or lab name is missing, treat it as incomplete. See our [safety & sourcing guide](/articles/peptide-safety-sourcing-guide-2026).
What HPLC purity number is good enough?
Aim for 98% or higher. HPLC (high-performance liquid chromatography) separates the peptide from impurities and reports what percentage of the sample is the target compound. Research-grade peptides are often 95–99%; 98%+ is a reasonable floor. Be wary of COAs that report no purity figure, or a suspiciously round '99.9%' with no chromatogram attached.
How do I know a COA isn't fake?
The biggest tells: an independent third-party lab is named (not just the vendor), the batch/lot number matches the vial you received, the date is recent, and ideally the lab can be contacted or the report verified. A PDF with the vendor's own logo, no lab identity, no batch match, or a stock chromatogram reused across products is a red flag. See our [how to verify a peptide vendor](/articles/how-to-verify-peptide-vendor).
Does a COA guarantee the vial I have is safe?
No — it confirms that a tested sample from a batch met spec, not that your specific vial is identical. Quality can vary within and between batches, and a COA can't catch every problem. It substantially reduces risk and is far better than nothing, but it's evidence, not a guarantee. Batch-matched, recent, independent COAs are the goal.

Community Notes

0 approved · moderated

Structured notes from readers — context, citations, corrections, and first-hand experience. Every note is moderated before it appears. Notes do not replace medical review; they supplement it.

No approved notes yet.

Know something that should be on this page? A citation, clarification, or dispute? Sign in and submit the first note.

Submission interface coming in Phase 2. For now, notes are authored in Studio. See the Community Guidelines for moderation criteria.