How to read a peptide COA: HPLC, mass spec, and fakes

Key takeaways

• Two tests, two different jobs. HPLC measures purity as the percent of the total detected peak area, often with detection at 220 nm, so it tells you how much of the vial is the main compound versus impurities .
• Mass spectrometry does the half HPLC cannot: it confirms the molecule's mass and, with MS/MS, its amino acid sequence, so it tells you whether the powder is actually the peptide named on the label . A 99 percent pure something is worthless if the something is the wrong molecule.
• A certificate from the seller's own testing is not independent verification. Even FDA-regulated drug makers cannot accept a supplier's report alone: the rule makes them run at least one specific identity test themselves and validate the supplier's reliability over time .
• Paperwork can be wrong, and it has been lethal. More than 14 medication-associated diethylene glycol mass poisonings have hit 14 countries over the past 80 years, which is exactly why the standard is to test the material, not trust the certificate .
• The easiest fakes to catch need no chemistry: a COA with no batch number, a lot that does not match your vial, a purity figure with no chromatogram or spectrum attached, or a report number the issuing lab will not confirm.

Skip to:

• What a real COA shows, and what a fake one does
• HPLC tells you how pure. Mass spec tells you what it is.
• Why the seller's own certificate is not independent verification
• Read the report field by field
• The three fakes: doctored, recycled, and unverifiable
• What to actually do with a COA

What a real COA shows, and what a fake one does

COA stands for certificate of analysis. It is the lab report that says what is in the vial and how pure it is. The useful skill is not trusting one, it is reading one. Here is the side by side, so you can hold any report you are handed against it.

HPLC tells you how pure. Mass spec tells you what it is.

Almost every peptide COA leans on two instruments, and people mix up what each one proves. They answer different questions, and you need both answers.

Read that last phrase again: everything the method saw. HPLC purity is honest about the impurities it can detect and silent about the rest. Anything that does not absorb at the chosen wavelength, co-elutes under the main peak, or never comes off the column does not get counted. A high purity number means clean of the stuff this method can see, which is not the same as clean.

But HPLC has a blind spot: it mostly does not tell you what the main peak is. A vial of the wrong peptide, or a cheaper one, can run as a single tall peak and post a beautiful purity number. Retention time (when the peak comes off) is a weak hint at identity, easily faked by a similar molecule. Purity alone cannot tell BPC-157 from a lookalike.

So the two tests are not interchangeable, they are partners. HPLC says how much, mass spec says what. A purity percent with no identity test, or an identity test with no purity number, is half a result. Good labs run orthogonal methods together, exactly because no single test covers both questions .

Why the seller's own certificate is not independent verification

Plenty of vendors post a COA. The honest question is who ran it, and whether anyone with a stake in the sale could have touched the number. A certificate the seller generated, or paid for and chose to show you, is self-reported. That is not the same as independent.

This is not a peptide-forum opinion, it is how the regulated drug world already works. Federal good-manufacturing rules say a drug maker must run at least one test to verify the identity of each component it uses .

Why so strict? Because paperwork has been wrong before, and people died. Diethylene glycol, a cheap toxic solvent, keeps getting passed off as pharmaceutical-grade ingredients. There have been more than 14 medication-associated diethylene glycol mass poisonings across 14 countries in the past 80 years . The defense is not a nicer certificate, it is testing the actual material.

The FDA learned the same lesson in writing. For high-risk ingredients like glycerin, it tells drug makers to run their own identity test on each shipment of each lot rather than relying on the supplier's certificate of analysis . That is the whole principle in one line: verify the lot in front of you, do not trust a document about a lot you cannot see.

Read the report field by field

Open the COA and check it like a boarding pass. Each field is a place a fake either trips or gets lazy.

1. Product name. It should name the exact peptide, not a vague category. A mismatch with your vial label is the first red flag.
2. Batch or lot number. This is the load-bearing field. The lot on the COA has to match the lot on your vial, because a test only describes the batch it tested, nothing else.
3. Test date. A COA dated long before or after your batch was made is describing a different run.
4. Method. Look for the named techniques, for example RP-HPLC for purity and LC-MS or MS/MS for identity . No method named is a tell.
5. The result and a spec. A purity percent should sit against a stated specification (for example, not less than 98 percent), so you can see pass or fail, not just a number floating alone.
6. The graphs. A real report includes the chromatogram and the mass spectrum. A number with no underlying graph is an assertion, not a measurement.
7. Lab and report number. A named lab and a report or order number you can independently confirm with that lab. If you cannot verify it with the issuer, you have not verified it.

The three fakes: doctored, recycled, and unverifiable

Faked certificates mostly fall into three buckets. None of them needs a chemistry degree to catch.

Notice that two of the three fakes die on the lot number alone. That is why it is the field worth obsessing over: a doctored or recycled certificate almost always fails to match the exact batch in your hand.

What to actually do with a COA

Keep the limits honest, too. A COA describes one batch on one day. It is a snapshot, not a warranty on the vial in your fridge, and it says nothing about sterility or endotoxin unless those tests are on the page. Treat it as one strong input, not a guarantee.

This piece is the literacy layer. For the people and supply chains behind the vial, read vetting peptide providers. For how compounded product differs from the labeled drug, read compounded GLP-1 versus the labeled drug. For the failure modes that show up at the vial (identity, purity, endotoxin, dose drift), read peptide hype versus safety. And for reading any study or claim a vendor waves at you, reading evidence without the degree is the toolkit.

The short version: a real COA names your batch, shows two tests not one, includes the graphs, and comes from a lab with no stake that you can call to confirm. Anything less is a story about your peptide, not proof of it.

For research and educational purposes only. Not medical advice.

pepSmart has not commissioned independent clinical review of this article.

More on how we write and source these pieces: Editorial process and contributor disclosure and Sourcing posture.

Spot an error? Email corrections via /about.

Sources: 4 entries, primary canon (a federal good-manufacturing-practice regulation and an FDA testing guidance) plus peer-reviewed analytical-chemistry literature, with the diethylene-glycol context acknowledged inline. Last reviewed 2026-06-17.

Related tools

• Tirzepatide dose calculator - Run tirzepatide-focused vial draw math.
• GLP-1 conversion calculator - Convert a GLP-1 mg dose to U-100 units and ml.
• GLP-1 ramp planner - Preview a linear educational dose-step table.
• Peptide half-life calculator - Estimate single-dose decay from cited half-life constants.
• PK simulator overview - Public overview of the Pro pharmacokinetic simulator.
• Semaglutide dose calculator - Run semaglutide-focused vial draw math.