Verify any certificate · Detect fakes

How to check if a certificate is fake or real

Is this document real? Check it here

Paste the verification link or the ID printed on the document, or upload the file. You get the answer here in seconds, with no account.

If you're holding a certificate and you're not sure it's genuine, there are three fast ways to check: scan the QR code, open the verification URL, or look up the issuer's blockchain record. Each method takes seconds. Below we walk through how to use each one.

TL;DR

Scan the QR code on the certificate with your phone camera, or type the verification URL printed on it into a browser. A genuine credential opens the issuer's verification page and shows the recipient's name, the credential, the issuing organisation and the issue date. If no verification path exists, if the page fails to load, or if it contradicts the printed document, treat the certificate as unverified. Blockchain-secured certificates go further: the document is compared against a cryptographic record written when it was issued, so a single altered character breaks the match. Visual inspection on its own is no longer enough, because editing software and AI image tools reproduce logos, seals and signatures well enough to pass a human eye.

  • Scan the QR code with your phone camera. It opens the issuer's verification page.
  • Type the verification URL printed on the certificate into any browser.
  • Look up the blockchain record, which works even when the issuer is closed or offline.

How can I tell if a certificate is fake?

Check the certificate against its issuer, not against your own eye. Scan its QR code or open its verification URL, then read what the issuer's verification page reports: the recipient, the credential and the issue date. If the document was issued through TRUE, you can paste its verification URL into TRUE Verify and get the result in seconds. If there is no verification path, or the page contradicts the printed document, the certificate is unverified and should be treated that way until the issuer confirms it.

1. Scan the QR code

Most modern certificates have a QR code. Open your phone camera, point it at the code, and tap the link that appears. The verification page shows the certificate details and confirms the credential is genuine. For the mechanics behind this, see our guide on how QR code verification works. If the page errors or doesn't load, the certificate is likely forged.

2. Open the verification URL directly

Even without a QR code, a real certificate carries a unique verification URL, usually printed in small text near the bottom or on the back. Type it into a browser. The verification page should load instantly, displaying the certificate's details, the issuer, the recipient's name, and the issue date. Anything missing is a red flag.

3. Check the blockchain record

Blockchain-secured certificates (like those issued through TRUE) write a cryptographic fingerprint to a blockchain at issuance. You can look up that record independently, without contacting the issuer. If the certificate's data matches the on-chain record, it is authentic. Any tampering, even a single character changed, breaks the match. The same cryptographic check can prove that any file, not only a certificate, has existed unchanged. Learn how TRUE Vault anchors document proof on blockchain. You can run this check yourself at TRUE Verify.

4. Inspect the document for visual red flags

Common signs of a fake: poor print quality, mismatched fonts, missing certificate numbers, vague language about what was certified, and incorrect logos. Compare against a known genuine certificate from the same issuer. If anything looks "off", investigate further. See the full checklist of 10 warning signs of a fake certificate, our guide to certificate fraud prevention, and the case studies of famous document fraud cases.

Looking for the technical detail behind blockchain verification? See how blockchain certificate verification works or how QR-code verification works.

How common is fake certificate and degree fraud?

Common enough that visual inspection fails routinely, and most organisations never check with the issuer at all. Independent UK research puts the share of adults who admit lying on a job application close to a fifth, and finds that almost half of large employers have caught a false qualification claim. The gap is in checking: barely half of large employers verify every academic credential they are shown.

  • 18% of UK adults say they have lied on a CV or job application, or know someone who has, within the last 12 months. Published by Cifas, the UK fraud prevention service, on 3 February 2025, from an Opinion Matters survey of 2,000 UK adults.
  • 45% of large employers have uncovered a false qualification claim, and only 52% verify all academic credentials. Verification falls to 37% at medium sized organisations and 29% at small ones. Source: Prospects Luminate, November 2025, from a YouGov survey of 526 HR decision makers.
  • More than 1.75 million degree verifications have been processed since 2011 by Hedd, UK higher education's official degree verification service, reported in the same Prospects Luminate analysis.

Those numbers describe the detection side of the problem. The rest of this page covers the issuing side, where a certificate can be built so that checking it takes seconds and needs nobody's cooperation.

Why are PDF certificates so easy to fake?

A PDF is a file, and any file can be copied and edited. Someone with a PDF editor can change a name, a date or a grade in under a minute, and the result prints exactly like the original. Nothing inside the file points back to the issuer, so the holder cannot prove it is genuine and the verifier has no way to check. That leaves issuers with three problems:

  • Brand risk. Your credential loses value the moment fakes circulate.
  • Verification overload. Employers, admissions teams and partners contact you to confirm legitimacy, one request at a time.
  • No scalable proof. A certificate that looks real is not a verification method.

Issuers need something simple: a certificate that anyone can verify independently, at any hour, without calling your team.

Certificate fraud is one part of a broader document fraud problem. Read our guide to understanding and combatting document fraud.

Verify certificates online should therefore mean something specific: clear, consistent and controlled by the issuer. The next section sets that standard.

What does genuine certificate verification require?

Verification is only real when a third party can reach it without you. That takes a public verification path, a result displayed on a page rather than asserted in an email, and an issuer who controls both. A real verification experience has three ingredients:

  1. A verification path (QR scan or link) that any verifier can use
  2. A verification result displayed on a dedicated verification page (not “trust me”)
  3. Issuer control over the brand, the domain and the credibility of the result

If any of the three is missing, verification becomes a matter of opinion, and fakes slip through.

How does TRUE make certificates verify themselves?

TRUE issues the credential as a verifiable document rather than as a file. At issuance a cryptographic fingerprint of the document is written to a blockchain, and the credential is published at a permanent address on the issuer's own domain, carrying a QR code and a verification URL. Anyone holding the certificate can therefore prove it without contacting anybody.

TRUE Original is a platform for creating, issuing and verifying secure digital documents: certificates, diplomas, awards, licenses, memberships, transcripts and vouchers. Documents are secured using blockchain technology, making them tamper-proof and permanently verifiable.

With TRUE, your documents become:

  • Tamper-proof once blockchain-secured
  • Instantly verifiable through a QR code and a verification portal
  • Shared as links rather than files, which are far easier to validate
  • Published on your own domain, so your brand stays front and centre

“Verify” is a user experience. If the verifier can’t get a clear result in seconds, fakes win.

How does a verifier check a TRUE certificate?

In one of two ways, and both take seconds. Scanning the QR code on the document opens the verification page directly; opening the printed verification link does the same on any device with a browser. Both routes end on a page stating the credential, the recipient, the issuer and the issue date. Either path ends at the same place: the live verification page, which you can also reach directly through TRUE Verify.

Option A: QR scan, fastest in practice

  1. Recipient shows the document (digital or printed)
  2. Verifier scans the QR code
  3. A verification page confirms authenticity instantly

Option B: verification link, works on any device

  1. Verifier opens the verification link/portal
  2. The credential details are displayed
  3. Verification status is clear, with no follow-up emails

How many organisations issue verifiable certificates with TRUE?

More than 200 issuers in over 15 countries, and more than 500,000 documents issued through the platform to date. The figures below are TRUE platform data, not third party research.

500,000+

documents issued

200+

issuing organisations

15+

countries with customers

  • Documents can be secured on several blockchains: Ethereum, AVAX, Fantom and Polygon
  • A REST API with five endpoints automates issuing, and built in Analytics tracks opens and shares

Which issuing workflow fits your team?

One of four, and you can move between them as volume grows. Small teams issue by hand from the dashboard, operational teams issue by email, and high volume issuers call the REST API. Existing LMS and CRM systems connect through integrations.

  • Dashboard issuing for manual or small-batch workflows
  • Email-based issuing for simple operational setups
  • REST API (5 endpoints) for automation at scale
  • Integrations (connect to your LMS/CRM where it makes sense)

The result is fewer manual steps, fewer verification requests, and a document format recipients want to share.

Who issues verifiable certificates with TRUE?

TRUE is used by certifying bodies, universities and training providers, including:

  • SSF (Sveriges Stöldskyddsförening)
  • Great Place To Work
  • Safe Cert Group
  • YH Akademin
  • FEI (Företagsekonomiska Institutet)
  • Karolinska Institutet
  • TUC Education
“Our alumni now have nice looking Diplomas in an accessible format, but we also see great marketing value!”
Sissel Gade, AW Academy

What do issuers ask about certificate verification?

Quick answers for teams evaluating certificate verification software and issuer workflows. Choosing a trustworthy credential platform is the first step to preventing fakes, so it is worth comparing them: see our 2026 guide to the best digital credential platforms.

Can TRUE help us verify if a certificate is fake?

TRUE helps issuers issue verifiable documents so authenticity can be checked instantly via QR code or a verification portal, which reduces the chance that a forged PDF is accepted as genuine.

Is this only for certificates?

No. TRUE supports many document types, including diplomas, licenses, memberships, transcripts and vouchers.

Do documents have to live on TRUE’s website?

No. TRUE supports custom domains, so documents live on your own domain.

How technical is implementation?

You can start with dashboard issuing, then move to automation. TRUE also supports email-based issuing and a REST API (5 endpoints).

What makes this better than a PDF?

PDFs can be edited and re-shared without a reliable verification method. TRUE documents are blockchain-secured, tamper-proof, and verifiable forever.

Is manual inspection or blockchain verification more reliable?

Blockchain verification, by a wide margin. A manual check asks whether a document looks right, which modern forgery tools defeat; a cryptographic check asks whether the document matches a record written when it was issued, which they cannot. The table sets the two side by side.

CapabilityManual / visual checkBlockchain verification (TRUE)
Detection methodInspect logo, signature, layout, paperCryptographic hash compared on-chain
Time to verifyHours to days, by phone, email or registrySeconds, by QR scan or URL
AI-generated forgeryOften passes visual inspectionFails immediately on a hash mismatch
Photoshopped editsHard to spot without expertAny change produces a different hash
Available 24/7Office hours onlyAlways-on, decentralised
Works internationallyCross-border calls and translationSame QR works in any country
Cost per verificationStaff time, registry feesEffectively zero
Audit trailInconsistent and slow to assembleImmutable, timestamped, on-chain

What do TRUE customers say?

“For us, it’s only natural to collaborate with the player in secure document management that has the highest quality, and stands for world-class security.”
Matti Olofsson, CEO, OneMore Secure
“SSF offer extensive training in Security to our customers, both physically and digitally. It has been particularly important for us to be able to ensure that our Proofs of Education, in the form of Certificates and Diplomas are correct and secure.”
Maria Dahlstedt, Program Manager, SSF (Stöldskyddsföreningen)
“A clear advantage of our new digital certificates is how easily they can be added as a reference to LinkedIn or a digital CV. The ease of use and verifiability creates trust!”
Lina Fjäll, Chief Customer Officer, Astrakan
“This is absolutely brilliant! A thousand thank you’s!!”
Tania Sjöberg, Learning & Development, Skanska

Ready to stop fake certificates at the source?

Issue documents that are tamper-proof, verifiable and easy to trust, without adding verification work to your team.

Comparing platforms? Looking for a Credly alternative? Compare TRUE → · TRUE vs Accredible · TRUE vs Certifier

How do you spot a fake certificate by eye?

By looking for the details a forger has to reproduce and usually gets slightly wrong: logo resolution, font consistency, spacing, certificate numbers and security features. Treat any visual check as a first filter rather than a verdict, because editing software and AI image tools now clear that bar routinely. The questions below cover what to look for and what to do once something looks off.

What are the most common signs of a fake certificate?

The most telling signs are poor print quality, inconsistent typography, and missing verification details. Fake certificates often use slightly wrong logos, mismatched fonts, or uneven spacing that wouldn't pass quality control at a legitimate issuing organisation. Look for missing certificate numbers, absent security features, and vague language that avoids specifics about what was certified. Legitimate certificates include precise details: the credential name, issuing authority, date, and a way to verify authenticity. If any of these are missing or look off, investigate further before accepting the credential.

How can employers verify certificate authenticity?

Start by contacting the issuing organisation directly using contact details from their official website, not from the certificate itself. Many certification bodies offer online verification portals where you can enter a certificate number and confirm validity. For blockchain-secured credentials, verification is instant: scan the QR code or visit the verification URL to check the credential against an immutable blockchain record. This is the fastest and most reliable method, requiring no phone calls or waiting. If the issuer doesn't offer digital verification, request confirmation in writing from their registrar or certification department.

What visual indicators suggest a certificate is fraudulent?

Check for blurry or pixelated logos, which indicate the forger used low-resolution images. Look at font consistency. Legitimate certificates use carefully chosen, consistent typography throughout. Examine alignment: text should be evenly spaced and properly centred. Check colour accuracy against the issuer's brand guidelines. Inspect signatures for signs of digital pasting (sharp edges, inconsistent backgrounds). Security features like embossed seals, holograms, or watermarks should feel and look consistent with known authentic examples. Any visual inconsistency warrants further investigation through the issuer's official verification channels.

How do fake certificates differ from authentic ones?

Authentic certificates contain specific, verifiable details: unique certificate numbers, precise credential titles, issuer identification, and verification mechanisms (QR codes, verification URLs, or registry numbers). Fake certificates often use generic language such as "certificate of completion" without specifying what was completed. Authentic credentials reference specific programmes, standards, or qualification frameworks. Fake ones stay vague to avoid easy checking. Most critically, authentic blockchain-secured certificates have cryptographic records that can be verified instantly, while fakes have no corresponding record. The difference is absolute: either the blockchain record exists or it doesn't.

What should HR teams look for during background checks?

Verify every credential that is material to the hiring decision, especially certifications required by regulation, safety qualifications and professional licences. Cross-reference certification dates with the candidate's employment history to check plausibility. Ask candidates to provide verification links or certificate numbers, then check through the issuer's official channels. Watch for candidates who resist verification, provide excuses for delays, or offer alternative documents when you request specific credentials. Establish a standard verification procedure so every hire gets the same scrutiny. Document verification outcomes for compliance records.

How can technology help detect fake credentials?

The most effective technology does not detect fakes. It makes faking impossible. Blockchain-secured credentials create an immutable record when issued. Verification is a mathematical comparison: does the credential's cryptographic hash match the blockchain record? If yes, it's genuine. If no, it's been altered or was never issued. This approach is superior to AI-powered detection, which must constantly update to catch new forgery techniques. Blockchain verification is permanent and absolute. No amount of sophistication can forge a credential that has no corresponding blockchain record.

What are the legal risks of accepting fake certificates?

Organisations that hire based on fraudulent credentials face regulatory penalties, professional liability, and reputational damage. In regulated industries such as healthcare, construction and financial services, employing unqualified individuals can result in fines, licence revocations and legal action from affected parties. If a workplace incident traces back to an unqualified employee, the hiring organisation may bear liability for negligent credentialing. Insurance coverage may be voided if required qualifications weren't properly verified. Beyond legal exposure, credential fraud undermines workforce quality, team trust, and organisational credibility with clients and partners.

How do fraudsters create convincing fake documents?

Modern forgery tools have made credential fraud disturbingly accessible. PDF editing software can modify any digital certificate, changing names, dates or credential levels in minutes. AI-powered tools generate realistic signatures, seals, and layouts. Online services sell custom-designed fake certificates that replicate specific issuers' branding. Template marketplaces offer ready-made designs for common credential types. Some fraudsters create entirely fictional issuing organisations with professional-looking websites. The quality of forgeries has increased dramatically, making visual inspection alone unreliable. Only cryptographic verification against an immutable record provides certainty.

What verification steps should employers follow?

Follow a structured verification process: First, request the original credential or a verifiable digital version with a certificate number. Second, identify the issuing organisation and locate their official verification channel (not contact details from the credential). Third, submit the verification request: scan the QR code for blockchain credentials, use the online portal for digital registries, or contact the issuer directly. Fourth, confirm that the credential details (name, date, qualification level) match what the candidate presented. Fifth, document the verification result. For high-volume hiring, consider platforms that automate credential verification at scale.

How does TRUE prevent certificate fraud?

TRUE eliminates certificate fraud at the source. Every credential issued through TRUE is written to blockchain creating a permanent, tamper-proof record across thousands of independent computers. When someone needs to verify a TRUE credential, they scan the QR code for instant confirmation. No phone calls, no waiting, no ambiguity. The credential either has a valid blockchain record or it doesn't. TRUE credentials live on the issuer's own domain, are eIDAS compliant, and have been used to issue 500,000+ documents for 200+ organisations across 15+ countries. That is not fraud detection. It is fraud prevention by design.

What does "This QR code is duplicate and only valid for its original printed certificate" mean?

This message means the certificate you scanned is a copy, whether a photocopy, screenshot, scan or reprint, and not the original TRUE-secured document. It's a security feature working exactly as intended: TRUE certificates are bound to their original, so a duplicated copy is automatically flagged. If you're verifying someone's credential and see this message, ask them for the original certificate (the one they received directly from the issuer) and scan that. A genuine TRUE certificate will verify as authentic and show its full details. If someone can only provide a copy that triggers this message, treat the credential as unverified until you can check the original. This is the difference between a document that looks official and one that is provably authentic.

How can I check if a certificate is original or fake online, for free?

Scan the certificate's QR code or enter its verification URL at trueoriginal.com/verify. It's free, no account needed. A genuine TRUE certificate verifies instantly against the blockchain and shows the issuer, recipient and issue date. That proof comes from cryptographic mathematics, not from trusting a website. If a certificate has no verifiable QR code or URL, that itself is a warning sign. For certificates not secured by TRUE, ask the issuing organisation to confirm directly, and check for the warning signs of forgery (inconsistent fonts, missing security features, unverifiable issuer details).