TL;DR: “This QR code is duplicate and only valid for its original printed certificate” means that the QR code was read from a copy, and that the code only counts on the one printed certificate it belongs to. On its own the message does not make the certificate fake: a photocopy, a photo or a screenshot of a genuine certificate is a copy too. Check the certificate with the organisation that issued it, or paste its link or document ID into TRUE Verify, free and without an account.
The message “This QR code is duplicate and only valid for its original printed certificate” means that the QR code was read from a copy, and that the code counts only on the original paper certificate it was printed on. The sentence makes no claim that the certificate was forged. It says that what was scanned is not the original print.
A copy covers more than a photocopier. A certificate photographed for a job application, a screenshot passed on in a chat, a scan saved as a PDF and a reprint of that PDF are all copies of the paper. Each one carries the same QR code. The words fit every one of them, whether the sentence is printed beside the code or appears on screen after a scan.
A certificate that shows “This QR code is duplicate” is not fake because of the message. The sentence says the scan did not come from the original print, which is true of every photocopy of a genuine certificate and also of a forgery that borrowed a real code. Until the issuer confirms the record, the certificate is unverified: not proven genuine, and not proven fake.
The difference matters to the person holding it. A graduate who emails a scanned diploma with an application has sent a copy, not a fake, and the paper in a drawer at home may check out in seconds. A forger who lifts the QR code from someone else's certificate has made a copy as well. But a code that opens a record opens the record of the certificate it was issued for, with that holder's name on it. Comparing the issuer's record with the paper separates the two.
Unproven is the common case. In TRUE Verify's data, nearly nine in ten of the documents people uploaded between 20 April and 13 August 2026 to find out whether they were real came back at the lowest level, with no proof found. That result means unproven. It does not mean fake. For a certificate with no QR code at all, TRUE's guide on how to check if a certificate is fake or real covers the registrar route, Hedd in the UK and the National Student Clearinghouse in the US.
You check a certificate that shows “This QR code is duplicate” against the organisation that issued it, not against the paper or the message. Scan the original print if you can. Then read the web address the code opens and confirm the record with the issuer. TRUE Verify, the free checking tool from TRUE Original, shows in seconds what proof a certificate link, document ID or PDF carries, with no account.
The order saves time. A matching record on the issuer's domain ends the check at step three, and a certificate with no proof behind it goes straight to step five. The method for any certificate, with or without this message, is in How to Check if a Certificate Is Real in Three Steps.
Each scan result tells you who has answered: the issuer, a system that sees a copy, or nobody. A record on the issuer's own domain that matches the paper is the issuer confirming the certificate. A duplicate message, an unfamiliar page or an error is a reason to go to the issuer, not a verdict on the certificate.
| What the scan shows | What it tells you | What to do |
|---|---|---|
| A record on the issuer's own domain that matches the paper | The issuer confirms this certificate | Note the address and the date you checked |
| “This QR code is duplicate” after scanning a copy | The code belongs to a printed original you are not holding | Ask for the original and scan it |
| “This QR code is duplicate” after scanning the paper presented as the original | The system behind the code does not accept this paper as the original | Ask the issuer before you accept the certificate |
| A page on an unfamiliar domain, or a page that only repeats the certificate | Nothing has been verified | Find the issuer's website yourself and ask |
| An error, or no page at all | No record has answered | Paste the link or document ID into TRUE Verify, then ask the issuer |
A QR code on a certificate becomes a duplicate the moment the certificate is copied, because a QR code is a printed pattern and any copier or phone camera reproduces it. An ordinary QR code cannot tell an original print from a copy: the European Commission's research service CORDIS wrote in 2024 that QR codes “offer no protection against counterfeiting”. A system that reports duplicates has added something to the plain code to make that call.
Two additions are common, and both turn up in the same CORDIS article, where Nathan Anderson, co-founder and CEO of Scantrust, says secure QR codes combine the code “with copy detection or serialisation”. Copy detection prints a fine random pattern into or beside the code, and because detail is lost every time an image is printed or scanned, a copy reads differently from the original print. Serialisation gives every code its own number and keeps a record of it, so the same code turning up in a second place stands out. A replaced certificate is a third possibility: an issuer that has reissued a certificate can say whether the code on the older paper still counts.
Other systems are built the opposite way and accept copies on purpose. Under the ISO/IEC 20248 standard for digitally signed barcodes, “a birth or school certificate containing a DigSig barcode can be copied”. And: “The copied document can also be verified to contain the correct information and the issuer of the information.” Whether a copy passes or fails is a design decision of the issuer, which is why one photocopy can pass one check and fail another. TRUE's page on QR code certificate verification sets out what a scan proves and what it does not.
An employer who sees “This QR code is duplicate” on a candidate's certificate should ask for the original and confirm it with the issuer, and should not reject the candidate on the message alone. A certificate attached to an online application is a scan or a photo, which makes it a copy. Chris Rea is head of strategic relationships at Prospects, Luminate and Hedd, the UK's official degree verification service. His October 2025 checklist on Prospects Luminate puts it plainly: “Always ask to see the original certificate, not a photocopy.”
Checking is where most organisations fall short. A YouGov survey of 526 HR decision makers, carried out for Hedd in April 2025 and reported by Prospects Luminate in November 2025, found that 45 percent of large employers had uncovered false qualification claims. Yet only 52 percent of large businesses verified all academic credentials, the same survey found, and the share fell to 37 percent of medium and 29 percent of small organisations. Cifas, the UK fraud prevention service, reported on 3 February 2025 that 18 percent of UK people had lied on a CV or job application in the past year, or knew someone who had.
The same Prospects Luminate analysis says that “traditional checks like visual inspection of certificates are no longer enough.” Hedd has carried out over 1.75 million degree verifications for employers since it launched in 2011, the same analysis reports. Rea's own checklist arrives at the same place: “The only sure way of not being conned by a fake certificate, of course, is to check the authenticity of the certificate with the university that issued it.”
A certificate issued with TRUE is a true original, published online on the issuer's web page. The original is what gets checked, not the paper. The QR code on the printout is made for that one certificate. It opens the original and starts the check straight away: the certificate is compared with the cryptographic fingerprint written to a public blockchain when it was issued, and the document, the issuer and the recipient are confirmed. TRUE Original anchors every document it issues on one of several public blockchains, among them Ethereum and Polygon. Anyone can also check the certificate free in TRUE Verify by pasting the link or document ID or by scanning the TRUE QR code.
Copying the code is easy. Passing the check is not. The code opens the original of the exact certificate that was issued, with the recipient's name, the credential, the issuer and the date, and a forged paper does not match it. The person checking reads the issuer's answer, not the holder's paper.
For an organisation that issues certificates, that means a stranger can confirm a certificate without contacting the issuer. TRUE Original has issued over 900,000 documents for more than 200 issuers in over 15 countries, and each one can be checked in TRUE Verify in seconds.
It means the QR code was read from a copy and counts only on the original printed certificate it belongs to. The message does not say the certificate is forged: a photocopy, a photo or a screenshot of a genuine certificate is also a copy.
No, not because of the message alone. The certificate is unverified until the organisation that issued it confirms the record, so scan the original paper or ask the issuer.
Scan the original printed certificate, check that the page it opens sits on the issuer's own domain and matches the paper, and confirm with the issuer through contact details from its own website. TRUE Verify, the free checking tool from TRUE Original, checks a certificate link, document ID or PDF and returns a security level in seconds, with no account.
It opens the certificate's original, published online on the issuer's web page, and starts the check straight away: the certificate is compared with its fingerprint on the blockchain, and the document, the issuer and the recipient are confirmed. Anyone can also check it free in TRUE Verify, without an account.
That depends on how the issuer built its check. Under the ISO/IEC 20248 standard a copied certificate with a signed barcode can still be verified for its content, while other systems accept only the original print; in both cases the issuer's record is what confirms the certificate.
A photocopy of a genuine certificate and a forgery can carry the same QR code. The issuer's record is what tells them apart.
Every organisation we work with started with the same question. Give us thirty minutes and we will show you what your own documents would be worth.
Book a callNot sure where to start? Let us help!
Trusted by leading organisations worldwide
