Fake Test Reports and Certificates: How to Verify What Your Chinese Supplier Sends You (2026)

Every week an importer forwards me a PDF: fourteen pages, lab letterhead, a red company seal on the last page, a report number in the header. It looks authoritative. Then we read it, and the sample description is a different model, or the applicant is a trading company the supplier never mentioned, or the standard on the front page was withdrawn before the product existed.

The document was never the compliance. It is a claim about compliance, and claims need a verification path. Most importers never build one, because the PDF looks like it closes the question. This guide is about that path: which documents exist, who legally issues each one, how to read a test report the way the lab that wrote it reads it, and how to verify through the issuing side instead of through the person selling you the product.

Where Documents Actually Fail

You can weigh a carton and cut it open. A document is evidence of work you never saw, done by a lab you never contacted, on a sample you never held. In my experience the failure is rarely a Hollywood-grade forgery. It is one of three ordinary things:

• The wrong document for the right product. An ISO 9001 certificate presented as if it certified the product. It certifies the factory's process, not the toy, charger or bottle in your carton.
• A real report with the wrong scope. Genuine test, real lab, but performed on a sibling SKU, a single colourway, or a component rather than the finished article.
• A stale report. Issued against a standard edition or a design that has since changed — new paint, new battery, new mould, new subcontractor.

None of these requires deliberate fraud. They require a supplier who treats "we have a certificate" as a category rather than a specific claim. Your job is to make the claim specific.

Know Which Document You Are Actually Looking At

Four document families arrive in the same email thread and get treated as interchangeable. They are not, and each fails differently.

So when a supplier writes "we are CE certified", the useful reply is not "send me the certificate" but "send me the test reports behind the declaration, and tell me which product group you are declaring under". A CE-style certificate issued by a commercial body outside a designated scope is a piece of paper with a logo on it.

How to Read a Test Report Like the Lab That Wrote It

You do not need to understand every test method. You need to check that the report is internally consistent and externally verifiable. Run these nine checks in order; most bad reports fail within the first four.

1. Report number and date. A number that appears once, in one font, on an otherwise uniform header deserves a second look. Check the issue date against the production timeline you were given.
2. Applicant versus manufacturer. Two different fields on a real report. If the applicant is a trading company and the manufacturer is a factory in another province, the report may not cover the line making your order.
3. Sample description and photographs. The single most useful page: model, colour, material, rating, age grade. If the photo shows a product that is visibly not yours, stop there.
4. Standard designation and year. A report citing a superseded edition may still be evidence of diligence, but it is not evidence of current conformity.
5. Clause coverage. A "PASS" stamp means little if the clause table shows three of eleven applicable tests performed. Read which clauses were skipped, and why.
6. Lab address and accreditation. The address that performed the testing should appear on the accreditation schedule. Reports from an unlisted branch are a known pattern.
7. Page continuity and signatures. Page numbers, total page count, an authorised signatory with a title, and the "shall not be reproduced except in full" note. Cropped or re-paginated PDFs are the usual tampering signature.
8. Results versus limits. Look for the measured value and the limit it was compared against, not just the verdict. A result reported as "compliant" with no number is not a result.
9. End-use statement. Some reports limit interpretation to the sample as submitted. That sentence is the lab telling you it does not warrant the production run.

Verify Through the Issuing Side, Not the Supplier

Everything a supplier sends can be edited. Everything a lab, accreditation body or regulator publishes can be checked. Three lookups settle most questions.

1. Call or email the laboratory directly

Use the contact details from the lab's own website, never the number in the supplier's email signature. Ask one question: "Can you confirm report number [X] was issued by your laboratory, for [product description], on [date], and is it still valid?" Legitimate labs answer this routinely. Vague answers, or an offer to "have the factory resend it", are the answer.

2. Check accreditation scope, not just the logo

In China, export compliance reports typically carry CNAS and/or CMA marks, and many labs hold ILAC mutual recognition arrangements. The logo is not the point; the scope is. A lab accredited for textiles that issues a battery transport report is a mismatch worth questioning.

3. Check the register, then cross-check the model number

Management-system certificates and notified-body designations sit in public registers kept by the issuing body or regulator. Search the certificate number and site address, then read the scope wording and the surveillance cycle — expired certificates are extremely common in supplier packs, and usually from neglect rather than dishonesty. Finally, compare the model number on the report, the proforma invoice and the carton. In a clean chain all three match; where they diverge you have found either a data-entry habit or a scope problem, and you need to know which before you pay a deposit.

The Forgeries That Pass a Visual Check

Most document problems are not clever. But a handful of patterns recur often enough to name.

One more: the report that cannot be reproduced in full. If it arrives as screenshots, or as images pasted into Word, treat it as unverified until you hold the original. Reputable labs issue sealed PDFs precisely so extraction is visible.

CE Marking: The Document Most Importers Misread

For most product groups CE marking is a self-declaration. You or the manufacturer draw up a Declaration of Conformity, cite the applicable directives and standards, and sign. There is no central EU register of approved products, and no authority issues a "CE certificate" for a general consumer good.

That is why the market is full of CE-looking documents from commercial bodies. Some are legitimate voluntary certifications. None transfers legal responsibility away from the operator placing the product on the EU market, and where a notified body is genuinely required for a category, a certificate from a body not designated for that category has no legal effect.

When you review a DoC:

• The product description must identify your item, not a product family.
• The manufacturer must be a real legal entity, and the EU responsible person identified where the rules require one.
• Standards cited must be current harmonised editions, with the year suffix.
• Any notified body number must correspond to a body designated for that scope — check the Commission's public register, not the supplier's summary.
• The declaration must be dated, signed, and backed by test reports you actually hold.

Rules in this area change and national market-surveillance practice varies. Treat this as a review framework and confirm current requirements against the official texts before you ship.

Real Reports That Are Still Useless

A document can pass every authenticity check and still fail your order. This is the more expensive failure, because nobody is lying, so nobody flags it.

• The tested sample was a golden prototype. Hand-built, tested, passed. Mass production moved to a different line in a different plant. The report describes a product that no longer exists.
• Only one colourway was tested. Inks, dyes and coatings are where chemical failures concentrate. Five colours on one report is a scope gap you are carrying.
• The report predates a design change. New cell, new motor, new plastic supplier. Any material or electrical change voids the relevance of the earlier test.
• Wrong market or wrong age grade. A US-standard report submitted for an EU shipment, or an item tested as general use and sold as a children's product. Age grading decides which rules apply, and it is the most common mismatch I see in toys and juvenile goods.

The fix is procedural: tie the report to a production lot and the lot to the shipment — a date code on the carton, a note of which report covers which code, and a review whenever something changes. If you already run factory audits and pre-production sampling, this is the third leg of the same stool.

What to Write Into the Purchase Order

Documents negotiated over WeChat do not survive a dispute. Put the obligation in the order, with a consequence attached.

1. Name the document, standard and language. "A test report against [standard, current edition] for the exact model and colourways in this order, in English, from a laboratory accredited for this test category."
2. Require it before balance payment. Deposit releases materials; balance releases goods. Put the document deadline on the balance milestone, not on shipment.
3. Require the report in your name where you are the responsible party. For US children's products this is structural: the certificate must be issued by the importer, built on testing of your product.
4. Fix the change-notification duty. "Supplier shall notify buyer in writing of any change to materials, components, production site or subcontractor, and shall retest at supplier's cost where the change affects conformity."
5. Reserve independent testing. State that you may commission your own testing and that a failed independent result obliges the supplier to remedy at their cost.

When to Accept the Factory's Report and When to Test Yourself

Independent testing is not free, and testing everything is not a strategy. The decision is about exposure.

Where you pay for testing, insist the report names your company as applicant and the factory as manufacturer. That one detail converts a document the supplier controls into a document you control.

Two shifts make this more than housekeeping: border and marketplace checks are increasingly digital, and platforms now treat a document mismatch as a seller-account issue rather than a listing issue. Neither changes the method, but both raise the cost of getting it wrong. The EU product compliance guide covers the market-side obligations in more depth.

A Twenty-Minute Pre-Payment Routine

1. Ask for the native PDF, not screenshots, for the exact model in the order.
2. Compare the sample description and photo against the sample on your desk.
3. Check the standard designation and year against the edition in force.
4. Read the clause table: what was performed, what was skipped, why.
5. Email the laboratory at the address on its own website and confirm the report number.
6. Look up any management-system or notified-body certificate in the issuing register.
7. Ask one written question: "Has anything about this product, its materials or its production site changed since this report was issued?" Keep the reply.
8. File the report against the SKU and lot, with the verification email attached.

Twenty minutes, once per SKU per year. Against a detained container, a suspended listing or a recall, it is the cheapest insurance in sourcing — and unlike most insurance it also tells you something about how the factory actually operates.

The Bottom Line

Suppliers are not usually lying about compliance; they are summarizing it, and the summary drops exactly the details that matter. Convert every summary back into a specific claim: this lab, this sample, this standard, this date, this lot. If a document cannot carry those five anchors it is not evidence — and if you cannot verify it through the issuer, you are relying on the supplier's word with extra steps.

— Jack Zhang, ChinaBizGuides