Your product is on a shelf in Bangkok, a marketplace in Jakarta, or a pharmacy counter in Manila. A consumer picks it up, and at that moment, they have no reliable way of knowing whether what they are holding is genuine. That gap — between a product that looks authentic and one that actually is — is where counterfeiters thrive.

The scale of the problem is not abstract. According to a joint OECD-EUIPO report, global trade in counterfeit goods was valued at approximately USD 467 billion in 2021, representing 2.3% of total global imports. Research by Corsearch projects that figure could reach USD 1.79 trillion by 2030 — a 75% increase that would mean roughly one in every twenty dollars spent globally going to fake goods. For brand owners operating across Asia-Pacific, the exposure is especially acute: the region is one of the most active markets for both counterfeit production and distribution.

Anti-counterfeit codes have become one of the most practical first lines of defence — affordable enough to apply at scale, flexible enough to work across packaging formats, and increasingly powerful when backed by the right verification infrastructure. But not all anti-counterfeit codes are the same. A serialized QR code works very differently from an anti-copy security code, and both differ fundamentally from a scratch-to-reveal label. Choosing the wrong type — or relying on a single type when the threat demands more — can leave a brand exposed in ways that only become visible after fakes are already in the market.

This article explains how each of the three main anti-counterfeit code types works in practice, where each one succeeds or falls short, and how brands can make an informed decision about the protection strategy that best fits their products and risk profile.

Why Anti-Counterfeit Codes Matter More Than Ever

Counterfeiting has always been a business risk, but two developments have made it structurally harder to manage. The first is e-commerce. Online platforms give counterfeiters direct access to end consumers across multiple countries simultaneously, without the logistical constraints of physical retail. Approximately 65% of counterfeit seizures in 2020 and 2021 involved goods sent by mail or express courier — small parcels that are individually difficult to screen. The second is the sophistication of modern fakes. High-resolution scanning and printing technology means that visual packaging features — barcodes, logos, label designs — can be reproduced with near-perfect fidelity. A consumer, and often a retailer, cannot tell the difference by looking.

The consequences reach well beyond lost revenue. In Southeast Asia, counterfeit pharmaceuticals pose direct public health risks: one study found that up to 47% of anti-malarial medicines in the region were fraudulent in some way. In fast-moving consumer goods (FMCG) and cosmetics, fake products carrying a genuine brand’s identity erode consumer trust in ways that persist long after the counterfeit is removed from circulation. The brand suffers the reputational damage of a quality failure it had no hand in.

Anti-counterfeit packaging technologies are responding to this pressure. The Asia-Pacific anti-counterfeit packaging market is projected to grow at a CAGR of 14.45%, driven by rising incidents of counterfeiting across pharmaceuticals, electronics, and FMCG — and by governments across the region mandating serialization and traceability requirements for regulated industries. For brand owners, the question is no longer whether to invest in code-based authentication, but which type of code to use and how to deploy it effectively.

How Anti-Counterfeit Codes Work: The Core Principle

At their most basic, anti-counterfeit codes are unique identifiers applied to product packaging that allow a product’s authenticity to be verified — either by a consumer with a smartphone, by a supply chain partner with a scanner, or by an automated system checking codes in real time. What separates a genuine anti-counterfeit code from a standard printed barcode or QR code is the combination of uniqueness, traceability, and resistance to copying.

A standard static QR code contains a fixed URL. Every unit of a product carries the same code, which directs whoever scans it to the same webpage. There is nothing unique about it, and nothing that prevents a counterfeiter from scanning, copying, and reprinting it onto fake packaging in seconds. Standard QR codes are useful for marketing and information delivery; they provide no protection against counterfeiting whatsoever. Anti-counterfeit codes are built differently — they are designed with the assumption that a sophisticated adversary will attempt to replicate them, and they make that replication either detectable or physically impossible.

The three main types of anti-counterfeit codes achieve this in distinct ways: serialized QR codes use database-backed uniqueness to detect anomalies; anti-copy security codes use physical print characteristics that degrade when copied; and scratch-to-reveal codes use a tamper-evident physical barrier to confirm the code has not been previously accessed. Understanding how each mechanism works helps brand owners evaluate which is appropriate for their specific situation.

Serialized QR Codes: A Unique Identity for Every Product

A serialized QR code assigns a unique identifier to every individual unit coming off a production line. Where a standard QR code is like a street address that anyone can look up, a serialized code is more like a passport number — it belongs to one specific item, it is registered in a secure database, and every time it is scanned, the system records where and when the scan happened and checks whether the interaction is consistent with expected behaviour.

Here is what that looks like in practice. A brand produces 500,000 units of a consumer health product. Each unit receives a unique QR code at the point of manufacture, and those codes are uploaded to a secure cloud platform. When a consumer scans the code at the point of purchase, the platform checks the code against the database, confirms it is valid, records the scan location and timestamp, and delivers an authentication result. If the same code is scanned by multiple different people in different cities within a short window — a pattern consistent with a counterfeiter having copied one code and printed it across thousands of fakes — the system flags it as suspicious and alerts the brand team.

Serialized codes are particularly well suited for supply chain tracking. Because each code is tied to a specific unit, brands can track exactly where a product has been — from production facility to distribution centre to retail shelf — and identify where diversion, grey market activity, or overruns are occurring. This is a meaningful capability for brands distributing across multiple countries or through complex multi-tier distribution networks.

The primary limitation of serialized codes is that they are reactive rather than preventive. A counterfeiter can copy a serialized QR code and distribute it widely before the duplicate-scan pattern becomes detectable. In markets where counterfeit volumes are high and goods move quickly, a window of weeks or even months can pass before a compromised code is identified and blacklisted. During that window, consumers are scanning fake products and receiving authentic-looking verification results — because the code itself was once real. This is not a reason to avoid serialized codes; it is a reason to understand that serialization alone is not a complete solution in high-risk environments.

Anti-Copy Security Codes: When Copying the Code Is the Attack

Anti-copy security codes, sometimes called copy-proof QR codes or forensic print codes, take a different approach to the counterfeiting problem. Rather than detecting that a code has been copied after the fact, they make copying the code physically detectable at the moment a consumer scans it. The security is built into the printing of the code itself.

The mechanism works like this. During production, the QR code is printed with a micro-level security pattern embedded within or alongside the visible code structure. This pattern is engineered to a specific print density and resolution tolerance. When a counterfeiter attempts to reproduce the code using a high-resolution scanner and printer, the copying process introduces subtle degradation — tiny losses in dot density, micro-contrast changes, or pattern-level distortion that the original printing did not contain. The authentication platform is trained to detect these degradation signatures. When a genuine product is scanned, the pattern reads as valid. When a copied product is scanned, the degraded pattern fails the check and the product is immediately flagged as counterfeit — from the very first scan, before any duplicate-scan pattern could accumulate.

This proactive detection quality makes anti-copy codes particularly valuable in markets where counterfeiters are sophisticated and fast-moving. It also addresses one of the more uncomfortable failure modes of serialized-only systems: the scenario where counterfeit products reach the market before the genuine ones, causing the genuine items to be flagged as suspicious simply because their serial numbers have already been scanned on fakes. Anti-copy codes do not depend on scan history to work — they authenticate the physical print, not the database record.

Nabcore’s Anti-Copy Security QR Code combines print-level copy resistance with a backend authentication system, allowing brands to deploy codes that are both immediately tamper-detectable and capable of supporting the scan analytics that help identify counterfeit hotspots over time. The integration of copy-resistance with serialization captures the strengths of both approaches, which is the direction most brand protection specialists now recommend for high-value or high-risk product categories.

Scratch-to-Reveal Codes: Consumer-Activated Verification

Scratch-to-reveal codes occupy a different part of the anti-counterfeit toolkit. Rather than relying on print-level security or database-backed uniqueness alone, they add a physical tamper-evident layer: the verification code is printed beneath a scratch-off coating, and the act of removing that coating is itself an indicator of whether the product has been previously opened or the code previously exposed.

The consumer experience is straightforward. A unique alphanumeric code or QR code is printed under an opaque scratch-off panel on the product label or packaging. The consumer scratches to reveal the code, then sends it — via SMS, a dedicated app, or a web form — to the brand’s verification platform. The platform checks the code against its database, confirms whether it is genuine and whether it has been used before, and returns an authentication result. If the code has already been submitted once, the platform flags it: the coating has either been scratched by a previous user (indicating the product may have been tampered with) or the code has been copied and submitted fraudulently.

One important practical advantage of scratch-to-reveal codes is their accessibility. They can work via SMS on basic mobile phones without requiring a smartphone camera or internet connectivity — a meaningful consideration in markets across Southeast Asia and South Asia where smartphone penetration is uneven. Smaller businesses and brands in early stages of anti-counterfeit deployment often find scratch-to-reveal labels a cost-effective entry point, particularly for products sold in markets where consumers are already familiar with scratch-code verification through prepaid mobile top-up cards.

The technology does have real limitations. The scratch-off coating can be damaged in transit or through normal handling, creating false negatives that frustrate legitimate consumers. More critically, the security of the system depends entirely on the secrecy and uniqueness of the underlying code — if a counterfeiter obtains genuine codes in bulk (through supply chain compromise or production facility infiltration) or if the random code generation is not cryptographically robust, the system can be defeated. Scratch-to-reveal is generally considered a foundational layer rather than a standalone solution for products facing determined, organised counterfeiting operations.

Comparing the Three: Strengths, Limitations, and Best Fit

Each code type addresses a different facet of the counterfeiting problem, and understanding those differences helps brand owners make practical decisions rather than simply adopting the most technically sophisticated option available.

• Serialized QR Codes are strong for supply chain traceability and post-market surveillance. They generate actionable data — scan locations, frequencies, geographic patterns — that helps brands identify where counterfeiting is concentrated and build the evidence needed for enforcement action. Their weakness is the reactive detection window: fakes can circulate before anomalies become visible in the data.
• Anti-Copy Security Codes are the strongest option for proactive prevention. They stop a copied code from passing authentication from the very first consumer scan, without needing to accumulate scan history. Their integration into existing packaging and printing workflows requires some technical coordination, and they carry a slightly higher production cost than standard codes — but for brands facing active, high-volume counterfeiting, the investment is typically justified.
• Scratch-to-Reveal Codes offer a tamper-evident physical layer that is simple for consumers to understand and use, and accessible even on basic mobile devices. They work well as a consumer-facing trust signal in markets where product integrity assurance is a purchase decision factor. Their dependence on code secrecy and physical coating integrity makes them less robust when standing alone against sophisticated counterfeiting operations.

It is worth noting that these categories are not mutually exclusive in practice. A product might carry a serialized QR code with anti-copy print characteristics beneath a scratch-to-reveal panel — combining proactive copy resistance, database-backed uniqueness, and a physical tamper indicator in a single packaging element. This kind of layering is common among brands that have moved past a basic first deployment and want to close the gaps each individual technology leaves open.

Why One Code Type Is Rarely Enough

Brand protection specialists consistently observe that anti-counterfeit codes perform best when they are part of a broader, layered system rather than deployed in isolation. A code on the packaging is only as useful as the infrastructure behind it — the verification platform that processes scans, the analytics that surface suspicious patterns, the alert mechanisms that notify brand teams, and the post-scan engagement tools that give consumers a reason to scan in the first place.

Consider a consumer who scans a QR code on a product and receives an authentication result. If that result is a simple “authentic” message with no further content, the consumer has no incentive to scan the next product they buy from the same brand. Over time, scan rates drop, and the data flowing into the analytics platform becomes too thin to generate reliable counterfeit detection signals. But if that scan delivers something meaningful — personalised product information, a warranty registration, a loyalty reward, or supply chain provenance detail — consumers develop a habit of scanning. That habit is what creates the distributed verification network that makes code-based authentication genuinely effective at scale.

This is one reason why the most effective anti-counterfeit implementations integrate consumer engagement capabilities alongside the authentication layer. When scanning a code becomes part of the consumer’s natural interaction with a product rather than an extra step they take only when they are suspicious, the resulting scan data is both more representative and more actionable.

The supply chain dimension matters equally. Anti-counterfeit codes applied only at the consumer end cannot prevent diversion or grey market activity happening further upstream. Brands that use codes to enable end-to-end smart tracking — verifying that a product has moved through the intended distribution path before it reaches retail — close off the upstream vulnerabilities that allow counterfeiters to intercept or divert goods before they ever reach the consumer-facing verification layer.

How to Choose the Right Anti-Counterfeit Code for Your Product

There is no universal answer to which anti-counterfeit code type a brand should use. The right choice depends on several factors that are specific to each brand’s situation, and getting the combination wrong — either underprotecting against a sophisticated threat or overcomplicating the verification experience for consumers in a low-risk market — can undermine the investment. The following questions provide a practical starting framework.

What is the counterfeiting threat level? Products in pharmaceuticals, premium FMCG, cosmetics, and industrial components typically face organised, high-volume counterfeiting operations. These categories generally require anti-copy print security combined with serialization, backed by real-time analytics. Products in lower-risk categories may be well served by serialized codes alone as a starting point.

Who will be doing the verification, and how? If the primary verifier is the end consumer, the process needs to be fast, simple, and familiar. A QR code scanned with a standard smartphone camera is ideal. If verification happens primarily at distribution or retail level, a wider range of scanning technologies and more complex authentication steps are feasible. If you are reaching consumers in markets where smartphone adoption is incomplete, scratch-to-reveal with SMS verification may be more practical than QR-based approaches.

What do you need from the data? If your primary goal is consumer trust at the point of purchase, copy-resistant codes with a clean authentication experience are the priority. If you need to understand where in your distribution network counterfeiting is entering, serialized codes with supply chain tracking integration are essential. If you want both — which is typically the right answer for brands operating across multiple markets — the solution needs to span both functions.

What is your production and packaging reality? Anti-copy codes require specific printing specifications and quality controls that need to be coordinated with your packaging supplier. Scratch-to-reveal labels can often be integrated into existing label printing workflows with relatively minor modifications. Serialized QR codes require a reliable code-generation and database infrastructure but are compatible with most modern packaging lines.

Brands that are new to product authentication often benefit from a structured consultation process that maps their specific risk profile before recommending a code technology or combination of technologies. The goal is a solution that fits the threat, the consumer behaviour, and the operational reality of the brand — not a generic deployment that looks like brand protection but leaves meaningful gaps. Nabcore’s solutions hub and the case studies drawn from over 300 million protected products across Asia-Pacific offer a useful reference point for brands at any stage of this journey.

The Code Is the Starting Point, Not the Solution

Anti-counterfeit codes — whether serialized, anti-copy, or scratch-to-reveal — are one of the most practical and scalable tools available to brand owners facing counterfeiting pressure. Each type has a genuine role to play, and each has real limitations that make combining approaches a stronger strategy than relying on any single technology. Serialized codes generate the data needed for supply chain visibility and enforcement. Anti-copy codes prevent detection-evasion by making the copied code itself fail. Scratch-to-reveal codes add a consumer-visible tamper indicator that is accessible across device types and literacy levels.

What matters most, however, is not which code you apply to your packaging, but how that code connects to a broader system — one that authenticates in real time, surfaces intelligence from scan data, engages consumers in a way that makes scanning habitual, and covers the supply chain from production to purchase. A code without that infrastructure is a label. A code within that infrastructure is a protection system. Understanding that distinction is what separates brands that are genuinely protected from brands that are merely protected on paper.