HPLC analytical equipment for peptide purity testing

How to Choose a Vendor: Reading a COA and Spotting Red Flags

Educational research reference only - not medical advice. Full Disclaimer

If you’ve worked through What Is a Peptide?, How Do I Become a Researcher?, and the First-Timer’s Guide, you already know that vendor selection is the step referenced most often — and for good reason. It’s the single decision that determines whether everything downstream (your dosing math, your observations, your safety) is actually meaningful. This guide covers exactly how to evaluate a vendor and read the document that matters most: the Certificate of Analysis.

Annotated Certificate of Analysis reading guide CERTIFICATE OF ANALYSIS Batch #: RX-2026-0417 Test Method: HPLC-MS Purity: 99.1% Identity: Confirmed Endotoxin: <0.5 EU/mg Chromatogram (single sharp peak = high purity) 1. Batch number — traceable to this test 2. Test method — HPLC/MS is the gold standard 3. Purity % — third-party verified, not vendor-claimed 4. Identity confirmation — proves it’s the right compound 5. Endotoxin test — relevant for injectable research use 6. Chromatogram — visual proof behind the numbers
An annotated example of a Certificate of Analysis, showing exactly what each section means and why it matters for verifying a research compound.

How HPLC and Mass Spectrometry Actually Work

Understanding the two core testing methods makes it far easier to evaluate a COA critically rather than just trusting its numbers at face value:

  • HPLC (High-Performance Liquid Chromatography): Separates a sample’s components based on how they interact with a stationary phase inside a column, producing a chromatogram — a graph with peaks corresponding to different substances present. A single sharp peak at the expected retention time, with minimal area under any secondary peaks, indicates high purity. Multiple unexplained peaks or a broad, shouldered peak suggest degradation products, synthesis byproducts, or contamination.
  • Mass Spectrometry (MS): Measures the exact molecular weight of what’s actually in the sample, confirming identity — that the substance is the compound it claims to be — rather than just measuring how much of whatever-it-is is present.

A COA showing purity without identity confirmation, or identity without purity, is an incomplete picture. High purity of the wrong compound is meaningless, and confirmed identity with unknown purity tells you nothing about contamination. A rigorous COA needs both tests, not one.

Common COA Red Flags and Fraud Tactics

Because COAs carry real weight in purchasing decisions, some sellers reuse, alter, or fabricate them. Watch for:

  • Batch number mismatch: The number on the COA doesn’t match the number printed on your physical product packaging — one of the clearest signs a document has been reused or copy-pasted from a different batch.
  • Suspicious dating: A COA dated well before the vendor’s own claimed manufacture or repackaging date.
  • Unverifiable testing lab: A lab name that can’t be independently confirmed to exist, or that has no public presence or contact information.
  • Identical chromatograms across “different” batches: If two COAs for supposedly different batches show pixel-identical chromatogram images, that’s strong evidence of copy-paste fraud.
  • Low-resolution image-only COAs: Documents provided only as compressed images rather than files that preserve any verifiable metadata.

Cross-referencing the testing lab’s name against public registries, or contacting the lab directly to confirm a report is genuine (when the lab allows this), is one of the few ways to independently verify a COA rather than simply trusting it at face value.

HPLC laboratory testing instrument used for independent compound analysis Independent HPLC-MS Analysis Run by community testing initiatives, not the vendor
Third-party testing initiatives, run by research communities rather than the vendor itself, provide a check that’s harder to manipulate than vendor-supplied documentation alone.

Vendor Reputation: Useful, But Not Sufficient On Its Own

Positive community reviews and years in business are meaningful signals, but they are not substitutes for verifiable, batch-specific testing. Review-based reputation can be manipulated or simply reflect variance — a vendor that has produced clean product for years can still have a single contaminated or under-dosed batch, which is exactly why serious researchers evaluate the current batch’s documentation rather than relying purely on general reputation. Independent, third-party testing initiatives run by research communities (rather than the vendor itself) provide a genuinely useful check, since the testing lab has no direct commercial relationship with the seller being evaluated.

Red Flags in a Vendor’s Marketing and Website

Beyond the COA itself, a vendor’s own marketing language is informative. Legitimate RUO (Research Use Only) vendors are legally prohibited from providing human dosing instructions or making clinical/therapeutic claims — a vendor’s website that includes specific human dosing protocols, before/after testimonials implying personal use, or disease-treatment claims is operating outside the legal RUO framework its products are supposedly sold under, regardless of what the COA looks like. Other marketing red flags worth noting: pricing dramatically below the rest of the market (a common indicator of compromised quality or fraud), a lack of any visible company information or physical address, and an inability or unwillingness to answer direct sourcing questions.

What Real FDA Enforcement Actions Reveal About Red Flags

It’s one thing to list red flags in the abstract. It’s more useful to see what actually triggers regulatory action, because the FDA has been unusually active on this front throughout 2026, sending well over 50 warning letters to online peptide sellers in three coordinated waves since late 2025. Reading a few of these real letters is genuinely instructive for evaluating a vendor.

In one June 2026 letter, the FDA cited a seller for marketing copy claiming a product “reduces chronic inflammation in the prostate” and “improve[s] bladder control” — clear disease-treatment claims dressed up as research language. The letter’s key legal point is worth internalizing: the agency found that despite “RESEARCH USE ONLY” labeling on the site, the seller’s own marketing established that the products were “intended to be drugs for human use.” In other words, the RUO label didn’t save them, because everything else on the page contradicted it.

An earlier wave, sent in April 2026, specifically targeted sellers whose product pages discussed appetite suppression and weight loss for GLP-1 “copycat” peptides while also selling bacteriostatic water and syringes right alongside the vials. That combination — health claims plus the accessories needed for human self-injection — is exactly the pattern regulators describe as a “totality of circumstances” test: they don’t just read the disclaimer, they look at what the whole page is actually telling a buyer to do with the product.

The practical takeaway for evaluating any vendor: run their product pages through the same test the FDA does. Does the listing make disease or performance claims? Does it describe effects on appetite, weight, healing, or any other outcome you’d expect from a real therapeutic drug? Is it selling injection supplies bundled with the compound? A vendor whose pages would survive FDA scrutiny is generally a vendor treating the RUO designation as more than decoration.

Shipping and Handling: What to Expect

Most lyophilized (freeze-dried) research peptides are reasonably stable at room temperature for short shipping windows, so overnight cold-chain shipping usually isn’t strictly required for the powder form — though a responsible vendor should still ship promptly and use appropriate packaging to avoid excessive heat exposure in transit, particularly during summer months. On arrival, inspect the vial for a broken seal, unusual discoloration, or visible clumping suggesting moisture exposure, and document any concerns immediately with photos before use — a legitimate vendor should be responsive to a documented quality concern.

Why Purity Verification Matters More For Some Compounds Than Others

Not all research compounds carry the same stakes if a COA is fudged or a vendor cuts corners. The active research areas around peptides right now — GLP-1/GIP metabolic research, BPC-157 and tissue-repair studies, growth hormone secretagogues, cognitive peptides like Semax and Selank, and longevity compounds like epitalon — all depend on researchers actually working with the compound they think they’re working with, at the purity they think they’re getting. A contaminated or mislabeled sample doesn’t just waste money; it invalidates whatever observation or result comes out of using it. That’s the whole reason third-party testing and a real Certificate of Analysis matter so much more here than in a typical consumer purchase. For a deeper look at what’s being researched in each of these areas, see our plain-language peptide primer.

A Practical Vendor Vetting Checklist

  • Does every product have a batch-specific COA available, not just a generic COA for the compound in general?
  • Does the COA include both purity (HPLC) and identity (MS) results?
  • Does the batch number on the COA match the number on the physical packaging?
  • Can the testing laboratory be independently verified to exist?
  • Does the vendor avoid making human dosing or clinical claims on their site?
  • Is pricing reasonably in line with the broader market, rather than suspiciously low?
  • Does the vendor have a visible, findable company identity rather than operating anonymously?
  • Are there independent (non-vendor-run) community discussions or third-party test results referencing this specific vendor?

A vendor that checks every box on this list isn’t guaranteed to be perfect on every single batch — no verification system is infallible — but a vendor that fails several of these checks is a meaningfully higher-risk choice, and the failures tend to cluster together in practice.

Frequently Asked Questions

What’s the single most important thing to check on a COA?
That the batch/lot number matches your physical product exactly, and that both purity (HPLC) and identity (mass spectrometry) results are present — not just one or the other.

Can a COA be faked?
Yes — reused batch numbers, altered dates, and copy-pasted chromatogram images are documented tactics. Cross-checking the batch number against the physical product and verifying the testing lab independently are practical ways to catch this.

Is a vendor with years of good reviews automatically trustworthy?
Reputation is a useful data point but not a substitute for current, batch-specific, independently verifiable testing — any individual batch can vary regardless of a vendor’s overall track record.

Is it a red flag if a vendor’s website includes human dosing instructions?
Yes — legitimate RUO vendors are legally prohibited from providing human dosing guidance or clinical claims. A vendor doing so is operating outside the legal framework its own labeling claims to follow.

Does a vial need to ship cold?
Most lyophilized peptides are reasonably stable at room temperature for typical shipping windows, so overnight cold-chain shipping usually isn’t strictly necessary — though prompt shipping and reasonable packaging still matter, especially in hot weather.

Educational content about quality evaluation standards. Not an endorsement of any specific vendor for any specific use. Research compounds are for laboratory research only.

Dripping liquid from pipette into test tube resize
Research Tools
Scroll to Top