How to check if a certificate is real or fake
Fake certificates are easy to produce and increasingly common. Here’s how to tell whether a certificate in front of you is genuine — and how a properly issued one lets you prove it in seconds.
Red flags of a fake certificate
- No QR code or verification link at all — just a PDF or image.
- A QR that opens a plain text blob instead of a verification page.
- A verification page on a random domain unrelated to the supposed issuer.
- Mismatched details — a name spelled differently, inconsistent dates, or a wrong logo.
How to confirm a certificate is genuine
- Scan the QR or enter the code on the issuer’s verification page.
- Confirm the result says the credential is authentic and unaltered.
- Check the issuer’s identity is verified — not just a typed-in name.
A trustworthy verifier re-checks a cryptographic signature over the certificate’s data, so altering even one character makes it fail.
FAQ
How can I spot a fake certificate?
Warning signs: no QR code or verification link, a QR that opens plain text instead of a verification page, a verify page on an unrelated domain, or details that don’t match. A genuine certificate can be confirmed on the issuer’s verification page.
Can a QR code on a certificate be faked?
A QR is just a link, so anyone can make one. What matters is where it points — a real verification page backed by a cryptographic signature. A forged certificate’s QR won’t pass that check.
Is checking a certificate free?
Yes — with QRCertificates, anyone can verify a credential for free, with no login or app.