How to Check if a Certificate Is Genuine: Red Flags and Checks
The warning signs of a forged certificate and a reliable checklist for confirming a credential is the real thing.
Forged certificates are more common than most people realise, and a convincing fake can sail through a casual glance. Knowing how to check if a certificate is genuine, and which red flags to act on, protects your organisation from costly mistakes.
Why your eyes are not enough
The instinct is to judge a certificate by how it looks: the logo, the layout, the signature, the seal. The problem is that every one of those can be copied with cheap tools. A fraudster downloads a real template, swaps the name and prints it. If your check stops at appearance, you are checking the forger's craftsmanship, not the credential's truth.
Red flags worth a second look
- No way to verify. A genuine modern certificate usually offers a QR code, a short code or a verification URL. A document with no path to an authoritative record deserves scrutiny.
- Mismatched details. Names spelled inconsistently, a qualification that does not exist at that institution, or dates that do not line up with the holder's story.
- Odd issuer domain. A verification link that points to a generic or unrelated website rather than the institution's own domain.
- Pressure or fees to verify. Genuine verification is quick and free for the checker. Being asked to pay before seeing a result is suspicious.
- A QR code that only opens an image. If scanning shows a picture of the certificate rather than a live, signed record, it proves nothing.
The fast checks that actually work
Start with the verification path if one exists. Scan the QR code or enter the short code and compare every field on screen, name, qualification, dates, against the document in your hand. They should match exactly. Confirm the verification page belongs to the genuine issuer and shows a clear status such as valid or revoked.
If there is no code, go to the source. Find the institution's official records or verification office through an independent search, not the contact details printed on the suspect document, and request confirmation. For regulated professions, check the relevant licensing register directly.
The gold standard: cryptographic proof
The most reliable check is one you do not have to perform by hand at all. When a credential is cryptographically signed over its data fields, the verification page can prove the details are exactly as the issuer recorded them. Change a single character, the grade, a date, a letter of the name, and the signature fails. This turns a subjective judgement into a definitive yes or no, which is precisely what you want when a hiring or admissions decision is on the line.
Build verification into your process
Do not leave checks to chance. If you handle certificates regularly, make verification a required step: every credential gets scanned or looked up before it is accepted, and a screenshot or reference of the result is kept on file. Consistency catches the forgeries that an occasional spot-check would miss.
How QRCertificates makes genuineness obvious
QRCertificates removes the guesswork. Every certificate is signed with Ed25519 over its canonical data, so any tampering, even one character, fails verification instantly. A QR code and a short code open a public verification page on any device with no login and no app, and each credential is tied to a verified issuer identity so you always know who really stands behind it. Verification is always free for the person checking, making a genuine credential trivial to confirm and a fake impossible to pass off.
