A COA tells you what is in the vial. Five fields decide whether it is worth the money: identity, purity, heavy metals, sterility, endotoxin. Vendor-signed COAs are noise — ISO-17025 third-party labs are the floor.
Why this matters
The peptide vendor market has zero FDA oversight. There's no required testing, no certifying body, no penalty for shipping mislabeled product. The only thing standing between you and bunk product is the COA — the Certificate of Analysis the vendor publishes alongside each batch.
If you can't read a COA, you can't tell the difference between a $30 vial of legit tirzepatide and a $30 vial of half-tirzepatide / half-mannitol filler. Both look identical. Both arrive in the same nondescript packaging. Only the COA tells you which one you actually got.
Vendor-signed COAs don't count
The five fields that matter
1. Identity — mass spec confirmation
The peptide identity field tells you whether the molecule in the vial is actually what the label claims. The gold-standard test is mass spectrometry (MS) — specifically LC-MS or MALDI-TOF. The COA should show:
- The expected molecular weight (e.g. retatrutide = 4870.5 Da)
- The observed molecular weight from the MS scan
- A chromatogram or spectrum (the visual proof, usually a peak graph)
If observed MW matches expected within ±0.5 Da, identity is confirmed. If the COA shows only "Identity: Confirmed" with no MW values or spectrum, you have no real verification.
What about HPLC for identity?
2. Purity — HPLC percentage
Purity is the percentage of the sample that's the target molecule (the rest is degradation products, impurities, or filler). The standard test is HPLC (high-performance liquid chromatography) — specifically reverse-phase HPLC with UV detection.
Acceptable purity thresholds:
Peptides (most)
≥95%
Nootropics
≥98%
GLP-1 class
≥97%
Cosmetic peptides
≥99%
Anything below 95% for an injectable peptide is a hard pass. The 5%+ "impurity" can be truncated peptide fragments, oxidized forms, TFA salt remnants, or unrelated peptides from contaminated equipment. The COA should show the actual HPLC chromatogram. One sharp peak >95% area, no significant secondary peaks = good.
3. Heavy metals — the contamination check
Heavy metal contamination is the most common silent kill on cheap vendors. The four to watch:
| Metal | Threshold (μg/g) | What it means |
|---|---|---|
| Lead (Pb) | <0.5 | Neurotoxic, no safe injection dose |
| Arsenic (As) | <1.5 | Carcinogenic, accumulates in liver |
| Cadmium (Cd) | <0.5 | Nephrotoxic, kidney damage at chronic exposure |
| Mercury (Hg) | <0.5 | Neurotoxic, especially methylmercury form |
The COA should list each metal's measured concentration via ICP-MS. "Pass" without a number is suspect. You want to see actual measured values like "Pb: 0.12 μg/g (limit 0.5)".
Why heavy metals matter for injectables
4. Sterility — bacterial + fungal absence
For injectable products, sterility testing is mandatory. The COA should show:
- Bacterial culture (USP <71>): negative growth at 14 days
- Fungal culture: negative
- Visual inspection: clear solution, no particulates
Sterility failures cause injection-site abscesses, sepsis, and bloodstream infections. Aspergillus contamination has been reported in cheap research-peptide batches and is particularly dangerous.
If a COA doesn't include sterility testing, the product is NOT verified safe for injection. Some vendors sell "research-use only" with COAs that explicitly exclude sterility because they assume oral or non-injection use. Verify before injecting.
5. Endotoxin — the silent inflammation trigger
Endotoxin is bacterial cell-wall debris (lipopolysaccharide, LPS) that survives sterilization. Even a sterile vial can have endotoxin contamination if the manufacturing process exposed the peptide to bacterial endotoxins before filtration.
The standard test is LAL (Limulus amebocyte lysate). Threshold: <5 EU/mg for injectables (per USP <85>).
High endotoxin causes injection-site swelling, fever/chills, cytokine storm in sensitive users, and long-term chronic low-grade inflammation that defeats the recovery purpose of peptides like BPC-157 + TB-500.
The four-lab safe list
Vendors using these four labs for COAs have consistently shipped properly-tested batches:
- Janoshik Analytical (Slovakia) — most common in EU/US vendors - Anresco (San Francisco) — high-volume US testing - Vanguard Scientific (Olympia, WA) — fast turnaround, frequently used by Adera + research-chemicals vendors - RIANI Labs (Toronto) — emerging premium-tier option
If the COA is from one of these four, you can trust the testing methodology. If it's from a lab you've never heard of, verify the lab is ISO-17025 accredited before trusting the results.
How to verify a COA is real (not fabricated)
Vendors have been caught fabricating COAs. The fake ones typically:
- Generic lab header — generic name, no website, no accreditation badge
- Round numbers everywhere — real labs report "99.2%" not "99%". Round means manually-typed-in.
- No chromatograms/spectra — fabricated COAs are usually one-page tables. Real COAs include the actual analytical output graphics.
- Wrong test methods — using "purity test" instead of specific method names like "HPLC-UV at 220nm" or "LC-MS positive ion mode."
- Same date on every COA across different batches — a tell that the vendor created one COA and recycled it.
To verify: search the lab name. ISO-17025 labs have official accreditation documents on their websites. If the lab doesn't have a website, the COA is suspect.
The 3-minute verification checklist
Before paying for any peptide vial:
- Find the COA on the vendor's product page. If they don't link one, walk away.
- Open the COA. Scan for lab name. Is it Janoshik / Anresco / Vanguard / RIANI / another known ISO-17025 lab?
- Find the batch/lot number. Does it match the lot you're being shipped?
- Confirm 5 fields: identity (MS), purity (HPLC ≥95%), heavy metals (all 4 under threshold), sterility (negative), endotoxin (<5 EU/mg).
- If anything is missing or just says "Pass" with no number, request the full report from the vendor. If they can't provide it, walk away.
See which vendors actually publish ISO-17025 COAs
The 5-factor methodology including COA verification weighting
Lot-matching — the gotcha
Even when a vendor publishes legit COAs, you might receive a product from a DIFFERENT batch than the COA covers. The COA is batch-specific.
Always check the lot number on your physical vial label, match it to the COA's lot number, and if they don't match, ask the vendor for the specific COA for your lot. Reputable vendors publish per-lot COAs and email them automatically with your order. Anything else is a flag.
When to walk away
Hard pass criteria:
- No COA published on product page
- COA shows purity <95% for peptides (or <98% for nootropics)
- Heavy metals over threshold OR not tested
- No sterility testing for an injectable
- Endotoxin >5 EU/mg
- COA from an unaccredited / unknown lab
- COA lot number doesn't match your vial
- Vendor uses self-signed (internal lab) COA only
Wrap-up
A COA is the only verification layer between you and unverified product. Five fields decide everything: identity, purity, heavy metals, sterility, endotoxin. Vendor-signed COAs don't count — ISO-17025 third-party is the floor. Lot-match every order.
For a vendor-by-vendor breakdown of COA practices across 8+ tracked peptide suppliers, see /vendors/scorecard. For deeper background on COA fraud + the four-lab safe list, see /guides/coa-verification.
Frequently asked
Weekly drops, weekly research
New guides, price-drop alerts, and reader-submitted protocols. One email a week. Unsubscribe anytime.
No spam. Unsubscribe anytime.
Discussion
Sign in to join the discussion
No comments yet — be the first to share your thoughts!