To verify a certificate: get the certificate number, identify the issuing body, and check that number with the issuing body itself — never against the supplier's PDF alone. Where the certifier offers QR or online verification, use it; where it offers neither, email the certifier directly. For a V-Cert certificate, enter the number at v-cert.org/verify/ or scan the QR code printed on it — either route opens that certificate on V-Cert's certificate portal, no account and no email required.
Why verification is worth two minutes
Certificates fail in three ordinary ways long before fraud enters the picture. They expire — a certificate is an annual license, and a PDF from 2024 proves nothing about today. They outgrow their scope — a certificate issued for one product line gets waved at a buyer for the whole catalog. And they get misattributed — a co-packer's certificate presented as the brand's own. Deliberate fakes exist too: edited PDFs cost nothing to produce, and certification-body logos are copied onto packaging without any license behind them. Every one of these failures is caught by the same habit: check the number with the body that issued it, not the paper in front of you.
The four-step check for any certificate
- 1. Get the certificate number and issuing body. Every genuine certificate carries both. A "certificate" with no number or no named issuer is a design element, not a credential.
- 2. Go to the issuer's own website directly. Type the certifier's domain yourself rather than following links from the document you're checking — a forged PDF can link to a forged page.
- 3. Look the number up with the issuer's own verification tool. Check four things: the number returns a certificate at all, it names the company you're dealing with, it covers the products in question, and it is currently valid — not expired, suspended or withdrawn.
- 4. If a number can't be checked online, email the certifier. Reputable bodies answer verification requests; treat a certifier that can't confirm its own certificates as a finding in itself.
How the major clean-label programs handle verification (2026)
| Program | Public verification route | What you can check |
|---|---|---|
| V-Cert | Certificate portal, looked up by number: type the number at v-cert.org/verify/ or scan the QR code on the certificate | That certificate's holder, mark, product scope, standard version, status and validity dates |
| The Vegan Society (Vegan Trademark) | Consumer-facing product search on vegansociety.com | Whether a product/brand is registered with the trademark |
| V-Label (EVU) | Licensed-product listings via v-label.com | Whether a product appears among licensed products |
| Vegan Action (Vegan.org) | Published list of certified companies | Whether a company appears on the certified list |
| GFCO (gluten-free) | Product finder and manufacturer listings on gfco.org | Whether products/manufacturers hold current GFCO certification |
| Non-GMO Project | Verified-product search on nongmoproject.org | Whether a product is currently verified |
QR codes: useful, with one caveat
A QR code on a certificate is the fastest route to the issuing body's own record — scan it and its page opens with the current status. The caveat is the same as with links: a QR code goes wherever its creator pointed it, so the thing to check after scanning is the domain in your browser's address bar. A genuine V-Cert QR always lands on a v-cert.org address. If a code lands anywhere else — a lookalike domain, a PDF, a screenshot — treat the certificate as unverified and look the number up manually at the certifier's real site.
Reading a V-Cert certificate number
Before you look a number up it is worth being able to read it. A V-Cert certificate number has the shape CC-TT-MMYY-SSSS — for example US-V-0926-0001, a reserved example that has never been issued to anyone. A number that does not fit that shape is not a V-Cert certificate number, and you can stop there. The four parts, left to right: a two-letter country code; a mark code (V for Vegan, VG Vegetarian, GF Gluten-Free, NG Non-GMO, CF Cruelty-Free); the month and year of first issuance (MMYY); and a four-digit serial.
Then check it. Type the number into the field on the verify page, or scan the QR code printed on the certificate, and that certificate opens on V-Cert's certificate portal: the holder it was issued to, the mark, the product scope it covers, the standard version it was assessed against, its status, and the dates it runs between. There is no account to create and nobody to email — a buyer on the other side of the world can do it from a phone.
Read what comes back the way you would read any credential. The holder and product scope state exactly which company and which products are covered — if the products you're buying aren't within that scope, the certificate doesn't cover them, however genuine it is. The status and the validity dates are what go stale, which is why it is the number that gets checked and not the paper.
For buyers: make verification a habit, not a project
The efficient version of due diligence is small and repeatable: record the certificate number and issuing body in your supplier file, verify against the issuer's own system at onboarding, and re-verify at each annual review or reorder cycle — certificates expire annually, so last year's check has a shelf life. Where a supplier's certifier offers per-certificate URLs, save the URL itself; opening it takes seconds and shows current status. This is also, candidly, why verifiability is worth weighing when choosing your own certifier: a certificate your buyers can check in seconds does more work than one they have to email about.
Frequently asked questions
How do I verify a V-Cert certificate?
Enter the certificate number at v-cert.org/verify/, or scan the QR code printed on the certificate. Either route opens that certificate on V-Cert's certificate portal, showing the holder, the mark, the product scope, the standard version, the current status and the validity dates — no account, no email, no request to the supplier. Certificate numbers have the shape CC-TT-MMYY-SSSS; a number that does not fit it is not a V-Cert certificate number.
What does a V-Cert certificate ID look like?
Four parts: a two-letter country code, a mark code, the month and year of first issuance (MMYY), then a four-digit serial — for example US-GF-0326-0142 would be a Gluten-Free certificate first issued in March 2026 in the United States. Mark codes: V (Vegan), VG (Vegetarian), GF (Gluten-Free), NG (Non-GMO), CF (Cruelty-Free). An ID that doesn't fit this shape is not a V-Cert certificate ID.
The certificate PDF looks genuine. Is that enough?
No. A PDF proves someone produced a PDF — editing tools make convincing fakes trivial, and even genuine PDFs go stale the day a certificate expires or is suspended. The record at the issuing body's own site is the source of truth; the PDF is just a convenient copy of it.
What if the certifier offers no way to check a number?
Email the certifier directly with the certificate number and the company name, and keep the reply in your supplier file. Most reputable bodies confirm certificates on request. If a certifier cannot or will not confirm its own certificate, weigh that in your supplier decision.
Can a certificate be valid but the product still mislabeled?
Yes — certification covers the products within the certified scope as formulated at review. A brand that changes a formulation without notifying its certifier, or prints the mark on an out-of-scope product, has a genuine certificate and a mislabeled product. This is why a certificate states its scope, and why misuse reporting channels exist: verification catches most problems, and reporting catches the rest.