How to Verify an ISO or Audit Certificate — and Spot a Fake

Company · 2026-07-21 · 2 min read · CR Global Assurance Editorial Team

A certificate is only as good as the organisation that stands behind it. Here is a five-minute process buyers and sourcing teams can use to confirm a certificate is genuine.

Every week, sourcing teams receive PDFs that claim a supplier is ISO 9001 certified, Higg FEM verified or C-TPAT audited. Most are genuine. Some are expired, out of scope, altered — or issued by organisations that do not exist. At CR Global Assurance we built a public verification portal precisely because buyers asked us for a fast way to confirm certificates issued by CR Global and, before our rebrand, CR Team Ltd.

Why certificate verification matters

Relying on a false certificate can expose a brand to product recalls, customs holds, reputational damage and failed due-diligence obligations. Under emerging human rights and environmental due diligence laws in export markets, "we had a certificate on file" is no longer enough — buyers are expected to check.

Five checks for any certificate

  1. Confirm the issuing body exists and is eligible. Look up the certification body's website independently (do not use links printed on the certificate). For ISO certificates, check whether the body is accredited for that standard.
  2. Check the certificate number online. Credible bodies provide a verification portal or will confirm by email. If the issuer cannot or will not confirm, treat the certificate as unverified.
  3. Match the legal name and address. The certificate should name the exact legal entity and site you are buying from — not a sister unit or head office.
  4. Read the scope. An ISO 9001 certificate for "cutting and sewing" does not cover dyeing or printing. A scope that seems too broad or vague deserves a question.
  5. Check validity dates and status. ISO certificates usually run three years with annual surveillance audits. A certificate can be suspended or withdrawn before its expiry date — only the issuer's live record shows that.

Warning signs of a fake certificate

  • Spelling mistakes, inconsistent fonts or a logo that looks stretched or pixelated.
  • A standard version that does not exist, or a version that was withdrawn long ago.
  • No certificate number, or a number the issuer cannot find.
  • Issue dates that fall on weekends or holidays for every certificate from the same "body".
  • An issuer that only communicates through free email addresses.

How to verify a CR Global Assurance certificate

Certificates issued by CR Global Assurance — including legacy CR Team Ltd certificates and training certificates — can be checked in seconds:

  1. Open the CR Global Assurance certificate verification page.
  2. Enter the certificate number exactly as printed.
  3. Compare the organisation or participant name, scope, issue date and validity against the document you received.

If the details do not match, or the certificate cannot be found, please contact us and we will investigate. Reports of suspected misuse of the CR Global or CR Team name are handled confidentially.

For suppliers: make verification easy

If you hold a certificate from CR Global Assurance, share the certificate number with your buyers along with the PDF. It shows confidence and speeds up onboarding. For training certificates, participants can also access records through the CR Global LMS portal.

Frequently asked questions

How can I check if an ISO certificate is genuine?

Look up the issuing body independently, verify the certificate number on its official website or by email, and confirm the legal name, site address, scope and validity dates match the supplier you are dealing with.

Can I verify an old CR Team Ltd certificate?

Yes. Certificates issued under the CR Team Ltd name can be checked on the CR Global Assurance verification page using the certificate number.

What should I do if a certificate looks fake?

Do not rely on it. Contact the named issuer through contact details you find independently. If the certificate claims to be from CR Global Assurance, send it to info@crglobalassurance.com for confirmation.