← All articles

Universities, certification bodies and HR teams · 6 min read

How to Verify Certificates and Stop Fake Documents

A fake degree or training certificate can be produced with ordinary design software in minutes. Employers, admissions offices and regulators then spend hours emailing issuers to confirm whether a document is genuine. The fix is not a better eye for forgeries — it is making every genuine document independently verifiable.

Why looking at the document is no longer enough

Seals, logos and signatures can all be copied from a genuine scan. Watermarks help on paper but disappear in a PDF. And a once-genuine certificate may have been revoked since it was issued. A verifier needs to answer two questions: who issued this, and is it still valid today?

The three layers of a verifiable document

A robust approach combines several independent checks:

  • Issuer signature: the document is cryptographically signed, so any change after issuance breaks verification.
  • Live status: a QR code or link lets anyone check the current record, including whether it was revoked.
  • Physical protection: for printed copies, copy-evident features such as guilloche patterns and microprint make photocopies easier to spot.

What verification can and cannot tell you

Cryptographic verification proves that a document came from the stated issuer and has not been altered. It does not prove that every statement the issuer wrote is true. That is why issuer identity setup and approval controls before issuance matter as much as the technology.

A checklist for issuers

  • Use templates and bulk issuance so every certificate follows the same verifiable format.
  • Separate preparation from approval (maker-checker) before anything is issued.
  • Give recipients a public verification page that needs no account.
  • Keep the ability to revoke, and show revocation status clearly.
  • Offer signed PDFs or digital badges alongside paper where recipients share credentials online.

A checklist for verifiers

  • Scan the QR code or open the verification link — never trust a link sent separately by the candidate.
  • Confirm the issuer name on the verification page matches the institution you expect.
  • Check the status shows valid, not revoked.
  • If no verification method exists, contact the issuer through its official website.

Where Signetum fits

Signetum gives institutions issuer-signed QR verification, timestamped PDF signatures, Open Badges 3.0 credentials, copy-evident print protection, maker-checker approvals and public verification with revocation. Authenticity rests on signatures and live record status — not on an AI guess.

Explore Signetum

Issuer-signed credentials, QR verification, digital signatures and copy-evident print protection, with revocation and bulk issuance workflows.