How to verify a peptide supplier: 7 documents to request before your first order
Almost every complaint in this industry traces back to one skipped step: nobody asked for documents before wiring money. This is the verification workflow a procurement or QA team can run in about 30 minutes — and the specific ways each document gets faked.
On this page
- The principle: verify identity before you evaluate quality
- Document 1 — Legal identity
- Document 2 — Batch-matched COA
- Document 3 — Named third-party laboratory
- Document 4 — SDS / MSDS
- Document 5 — Technical data sheet
- Document 6 — Commercial terms in writing
- Document 7 — Reference customers
- Red-flag patterns
- A 30-minute verification workflow
1. The principle: verify identity before you evaluate quality
Buyers tend to start with the technical question — “is this peptide pure?” — because that is the question they know how to answer. But purity is meaningless if you cannot establish who you are dealing with and who would be accountable if the shipment is wrong.
So the order is reversed: establish legal identity first, then technical capability, then commercial terms. If step one fails, the rest of the conversation is entertainment.
Look for a registered company name, a physical address, and a domain-based email address. A site that sells laboratory reagents but publishes none of the three is not a supplier you can qualify — it is a storefront. This is not a stylistic preference: it determines whether a dispute, a recall, or a customs question has any route to resolution.
2. Document 1 — Legal identity
What to request: registered company name, business registration number, country and city of registration, and the physical address where goods are actually dispatched from. For regulated categories, the relevant licence for your jurisdiction.
What it proves: that a legal entity exists and can be pursued. It also tells you whether the shipping origin matches the claimed origin — a supplier claiming EU warehousing but shipping from a different region is a different supplier than advertised.
How it gets faked: a brand name with no legal entity behind it; a registered address that is a mail-forwarding service; a company name that differs from the brand by a letter or two. Cross-check the registration number in the relevant public registry rather than trusting the letterhead.
3. Document 2 — Batch-matched COA
What to request: the COA for the specific lot that will ship, with HPLC purity, identity by MS, water content and net peptide content, plus the chromatogram and the analytical method.
What it proves: that the seller tests what they sell, at batch granularity.
How it gets faked: a single undated COA reused for every order; a batch number that does not appear on the vial labels; a “typical” specification sheet presented as a test report; purity quoted to two decimals with no trace attached. Ask for the trace and the batch number in the same email — supplying both is trivial for a real manufacturer and awkward for a reseller.
For a detailed walkthrough of each COA field, see How to read a peptide COA.
4. Document 3 — Named third-party laboratory
What to request: the name of the independent laboratory, the report number, and a verification path that does not depend on the seller — a lab-hosted lookup page, a signed PDF on the lab's own domain, or direct contact details.
What it proves: that the analytical result exists outside the seller's own system.
How it gets faked: “third-party tested” with no lab named; a lab whose only web presence is a page on the seller's domain; a verification page hosted by the seller showing the seller's data. The last pattern is worth pausing on — self-hosted “verification” is a marketing device, not an audit trail. A real independent lab does not need the seller to publish its results.
“Can I email the laboratory directly, using contact details from their own website, and have them confirm report number X belongs to batch Y?” A genuine third-party relationship survives this. A decorative one does not.
5. Document 4 — SDS / MSDS in GHS format
What to request: the safety data sheet for the exact product form (salt form, concentration, packaging), in the GHS format used in your jurisdiction.
What it proves: that the supplier handles the material as a chemical substance with defined hazards, not as a generic commodity. It is also a legal requirement for shipping in most markets, and your own EHS team will need it before the material enters your facility.
How it gets faked: a generic SDS with the product name swapped and section 9 (physical properties) left blank or copied from an unrelated substance. Check that the CAS number, molecular weight and appearance match the product you are buying.
6. Document 5 — Technical data sheet
What to request: a TDS covering solubility, recommended handling, storage temperature, stability in solution, and — for materials intended for formulation work — compatibility notes.
What it proves: that the supplier understands the material beyond its price. A supplier who cannot tell you how the peptide behaves in aqueous buffer has not worked with it.
How it gets faked: a TDS that is marketing copy with the word “specification” in the header, no numbers, and no test conditions. Real data has units and conditions attached.
7. Document 6 — Commercial terms in writing
What to request: Incoterms (DAP, DDP, CIF), named carrier, stated lead time with a definition of “dispatch” versus “delivery”, payment terms, and — most importantly — the non-conformity clause: what happens if independent testing shows the batch does not meet the COA.
What it proves: whether there is a remedy path. In this category, the most common failure is not a counterfeit peptide; it is an undelivered or wrong shipment with no recourse because everything was agreed in a chat window.
How it gets faked: verbal assurances of “full refund” with no policy, no entity to invoice, and payment only by irreversible transfer. Note the asymmetry: the more convenient the payment method for the seller, the weaker your position if something goes wrong.
8. Document 7 — Reference customers
What to request: two or three reference contacts from comparable accounts — same product line, similar order size — with their permission to be contacted.
What it proves: that the supplier has repeat institutional customers, not only one-time buyers. Repeat ordering is the strongest commercial signal available to an outside buyer.
How it gets faked: “testimonials” with no company name, no role, and no verifiable link; a logo wall of institutions that have never purchased; reviews on a platform the seller controls. A supplier that cannot produce a single reachable reference for contract-scale work is telling you something.
9. Red-flag patterns
| Signal | What it usually indicates |
|---|---|
| No registered company name or address anywhere on the site | No accountable entity; disputes have no route |
| Free webmail address as the only contact (gmail, outlook, qq) | Low operational maturity, or deliberate untraceability |
| Payment exclusively by irreversible transfer or crypto | No chargeback path by design |
| COA undated, or one COA for every product | Documents are decorative, not batch-linked |
| “Independent lab” verification hosted on the seller's own domain | Self-attestation presented as third-party evidence |
| Product pages describing human effects for research-labelled material | The intended use is not the stated use — a regulatory and quality risk for the buyer too |
| Domain registered within the last year, claiming a decade of experience | Identity is fabricated; expect the brand to be abandoned if problems arise |
| Pressure to pay before any document is shared | Standard tactic to prevent exactly this checklist |
10. A 30-minute verification workflow
The whole checklist fits into one short sequence. Each step has a clear pass/fail, so it does not require specialist judgement:
- 1Minutes 0–5: identity. Find the legal name, registration number and physical address. Check the registration in the public registry. Look up the domain's registration date. Fail if any of these are absent.
- 2Minutes 5–10: contact reality. Confirm the email domain matches the company domain, and that the phone/WhatsApp number is reachable and answered by someone who knows the product. Fail if the only channel is a free webmail address.
- 3Minutes 10–18: documents. Request the batch COA with trace, SDS and TDS in one email. Note how long the reply takes and whether all three arrive. Fail if only a purity number comes back.
- 4Minutes 18–24: independence. Take the named laboratory and check it exists outside the seller's site. Verify the report number if a lookup exists. Fail if the lab cannot be reached independently.
- 5Minutes 24–30: commercial exposure. Read the non-conformity clause and payment terms. Decide the maximum first-order value you are willing to test with. Start small regardless of the answers.
A supplier that passes all five is worth a trial order. A supplier that fails step one is not worth a second email, however good the price looks — in this category, the price is usually good precisely because the accountability is missing.
Run this checklist against us
Send the seven requests in one email and our QA team will return the complete document pack within one business day — including the current batch COA, SDS and TDS for the material you are evaluating.
Request the document pack