Most brand teams don’t go looking for an anti-counterfeiting solution until something has already gone wrong — a distributor flags suspicious stock, a consumer complaint surfaces about a product that clearly wasn’t theirs, or a colleague spots their packaging on a marketplace at half the normal price. By that point, the instinct is to act fast and implement something. But “something” is where many brands make their costliest mistake.
Anti-counterfeiting is not a single technology. It is a set of distinct tools — physical, digital, and operational — each designed to solve a specific problem in a specific part of the supply chain. A holographic seal and a serialized QR code are both called “anti-counterfeiting measures,” but they work differently, protect against different threats, and fail against different attack vectors. Picking the wrong one, or deploying the right one incorrectly, leaves a brand with a false sense of security and a gap a counterfeiter will find.
This guide breaks down the main anti-counterfeiting solutions available today: what each one is, how it actually works under the hood, the threats it is best suited to address, and the situations where it falls short. The goal is to give brand owners, operations leads, and compliance managers a clear framework for choosing the right mix — not a checklist to run through, but a decision-making guide grounded in real-world risk.
The Real Cost of Getting This Wrong
The business case for acting on counterfeiting is not difficult to make. Revenue lost to counterfeit goods is the most visible damage, but it is rarely the largest. Consumer safety incidents tied to fake pharmaceuticals, substandard cosmetics, or faulty industrial components carry liability exposure that can dwarf any lost sales figure. And in categories where trust is a brand’s primary asset — health supplements, baby products, premium FMCG — a single widely-shared story about a fake causing harm can do lasting damage that no marketing spend can undo.
The scale of the problem across Asia-Pacific is significant and growing. The Asia-Pacific anti-counterfeit packaging market is projected to reach USD 105.4 billion by 2030, up from USD 51.2 billion in 2025, at a compound annual growth rate of 15.45%. That growth is not speculative; it reflects real demand from brands responding to real exposure. The rise in product fraud is most acute across pharmaceuticals, electronics, and FMCG sectors, coupled with stricter regulatory enforcement and rapid adoption of digital authentication technologies. Globally, counterfeit goods accounted for an estimated USD 467 billion in global trade in 2021 — and that figure captures only what was intercepted at borders. The actual exposure faced by any individual brand runs considerably higher.
What has changed in recent years is the distribution method. Counterfeiters are increasingly using international waterways and adopting “localisation” strategies, shipping unassembled parts or packaging to assemble fake products closer to end markets. Around 65 percent of seizures now involve small parcels and mail, showing a shift toward distribution channels that offer speed, convenience, and lower risk of inspection. This makes border interception less reliable as a sole defence, and shifts more of the protection burden onto the product itself and its supply chain controls.
Know What You’re Actually Fighting
Before choosing a solution, it is worth being precise about the threat. Brands that bundle every problem under the label “counterfeiting” tend to reach for the wrong tools. There are four distinct problems, and each requires a different response.
Outright counterfeiting is when a third party manufactures a fake product and sells it under your brand, trademark, or packaging. The goods are not yours in any way. This is the threat most people picture, and it is what most authentication technologies are primarily designed to address.
Grey market and product diversion is a different problem entirely. Product diversion occurs when an unauthorized party sells a brand’s genuine products without permission, often in a different geographical market or through a different sales channel than was intended. The goods are real — they came from your factory — but they are outside your authorized channel. The commercial damage is substantial: authorized retailers lose sales to grey market competitors, the brand’s pricing structure is eroded, and the brand owner loses control over how and where their products are sold. In pharmaceutical markets, the consequences go further: a medicine approved for one regulatory environment may not carry the same batch information or comply with the same cold chain standards in another.
Unauthorized overruns occur when a manufacturer produces volumes beyond what was contracted and sells the surplus through unofficial channels. The product is often indistinguishable from genuine stock, which makes it particularly difficult to detect without serialized controls. Duplication without trademark use — sometimes called “dupes” — copies a product’s design, format, or formulation while deliberately avoiding any registered mark. These require different legal tools to address and are largely outside the scope of product-level authentication.
Authentication technology, serialization, and track-and-trace are primarily effective against the first three. Knowing which of these problems you have determines which solution is worth deploying.
Physical Authentication Methods: Overt, Covert, and Forensic
Physical authentication features are applied to the product or packaging during manufacturing. They are divided into three tiers based on how much equipment or expertise is required to verify them, and the tiers involve a genuine trade-off between consumer accessibility and resistance to replication.
Overt Features
Overt features are visible to the naked eye and are designed to be checked by any consumer or inspector without special tools. Common examples include holograms, color-shifting inks, tamper-evident seals, and security threads woven into packaging materials. Their primary value is consumer-facing: they create a visible signal that a product is genuine and give buyers something concrete to check at point of purchase. The weakness is that sophisticated counterfeit operations have become adept at producing convincing replicas of standard holograms and seals. Overt features raise the cost and complexity of counterfeiting, but they rarely eliminate it on their own.
Covert Features
Covert features are invisible or undetectable without specific equipment or trained personnel. UV-reactive inks, micro-printing readable only under magnification, steganographic patterns embedded in printing, and chemical taggants mixed into inks or substrates all fall into this category. Because consumers cannot verify them in the field, their value lies primarily in enforcement: when a product is seized and examined, covert markers provide confirmation of authenticity (or its absence) that overt features cannot reliably provide. Brands dealing with high-volume counterfeit operations in markets where fake holograms are common benefit most from adding at least one covert layer alongside any overt features.
Forensic Markers
Forensic markers — including DNA taggants and molecular signatures — can only be confirmed through laboratory analysis. They offer the highest level of replication resistance of any physical method, making them extremely difficult for a counterfeiter to reproduce even if they are aware of their presence. Their limitation is that verification is slow and expensive, and there is no consumer-facing check possible. They are most appropriate for high-value products, pharmaceutical ingredients, or industrial components where the consequences of a fake are severe enough to justify the verification process.
Most brands operating in high-counterfeit categories layer more than one tier. Overt features give consumers a check. Covert features give inspectors a confirmation. Forensic markers give legal proceedings an irrefutable record. Each layer addresses a different point in the verification chain.
Digital Authentication: Secure QR Codes and NFC Tags
Digital authentication connects a physical product to a cloud-based record that can be verified instantly by a smartphone. This is where the market has moved most rapidly, driven by near-universal smartphone penetration across Asia-Pacific and consumer willingness to scan codes as part of normal purchase behaviour. In Asia-Pacific, smartphone-enabled QR code verification has become widespread, with over 3.5 billion unique scannable codes generated across packaged goods. The two dominant technologies are secure QR codes and NFC tags, and they work quite differently.
How Secure QR Codes Work
A standard QR code is simply a link — it points to a URL, and a counterfeiter can print an identical-looking code that points anywhere they like. An anti-copy security QR code works differently. Each code is unique to a single unit and tied to a specific serialized record in a cloud backend. When a consumer scans the code, the system checks that specific unit’s record: Has it been scanned before? Is it in the expected market? Does the serial number match a genuine production record? The protection does not come from the physical appearance of the code — it comes entirely from what happens when the code is scanned against the backend database. A counterfeiter can copy the visual appearance of the code, but they cannot replicate the underlying serial number or generate a backend record that passes verification. The result is that a fake product either returns a failed verification message or — if the counterfeiter has copied a legitimate serial number — an alert that the same code has been scanned in two different locations.
Secure QR codes also produce scan data: timestamps, approximate locations, and scan frequency. That data becomes an asset for both brand protection and consumer engagement, giving brands visibility into where their products are being verified and by whom.
How NFC Tags Work
Near Field Communication (NFC) technology is a wireless connectivity technology based on Radio Frequency Identification (RFID), enabling contactless communication between an NFC reader chip and an NFC tag. In practical terms: a tiny chip is embedded in the product or its packaging during manufacture. When a consumer holds their NFC-enabled smartphone close to the product, the phone reads the chip and sends an encrypted query to a verification server. Each item is assigned its own unique ID number, making it easy for manufacturers to track and trace each product and verify that each transaction is genuine.
The key advantage of NFC over a printed QR code is that the chip itself is significantly harder to clone or replicate. Embedding an encrypted NFC inlay into accessories or packaging creates a more robust authentication method, and embedding the inlay into the product itself makes it hard to remove without causing visible damage. This makes NFC particularly well-suited to higher-value products — luxury goods, premium health supplements, branded electronics accessories — where counterfeiters have both the motivation and the resources to attempt sophisticated replication of printed codes. The limitation is unit cost and integration complexity; NFC is more expensive to deploy at scale than QR codes, making it less practical for high-volume, low-margin FMCG items.
Both technologies, it should be noted, are only as secure as the backend system they connect to. A QR code or NFC tap that verifies against a poorly secured database provides limited real protection. The strength of the verification is a function of the database architecture, the encryption, and whether the system flags anomalies such as duplicate scans or geographic mismatches.
Track-and-Trace and Supply Chain Visibility
Serialization assigns every unit a unique identifier at the point of manufacture. Track-and-trace layers movement data on top of that, recording when and where each identifier passes through checkpoints in the supply chain — a factory gate, a customs clearance point, a distribution hub, a retail scan. Together, they create a digital chain of custody for every product. Smart tracking technology makes this chain available in real time, so anomalies surface before they become a large-scale problem rather than after.
The specific threat that track-and-trace addresses most directly is not outright counterfeiting — it is product diversion, grey market activity, and unauthorized overruns. Consider a practical scenario: a brand allocates a batch of FMCG products to a distributor in one market. Each unit carries a serialized code linked to that allocation in the backend. When units from that batch start scanning in a different market, the system flags the geographic mismatch. The brand now has a timestamped, location-stamped record pointing to the specific distribution node where the leak occurred — not a general suspicion, but evidence specific enough to act on.
Brands need source-level intelligence: which products are leaking, where inventory is entering unauthorized channels, and which internal or partner processes are enabling the problem. Track-and-trace provides exactly that. It shifts the brand from reactive investigation — trying to figure out after the fact where diverted stock came from — to proactive monitoring that identifies the leak while it is still happening.
In pharmaceutical and regulated healthcare contexts, the value goes beyond brand protection. Supply chain visibility is increasingly a regulatory requirement, not just a best practice. Batch-level traceability allows recalls to be executed with precision, limiting consumer exposure and regulatory liability to the affected units rather than requiring a market-wide withdrawal.
Consumer Engagement as a Protection Layer
Most discussions of anti-counterfeiting treat authentication as a one-directional activity: the brand puts something on the product, the consumer or inspector checks it. But smart packaging and scannable codes create a two-directional relationship that serves both protection and business goals simultaneously, and this is an angle that many brands underutilize.
When a consumer scans a secure QR code to verify a product’s authenticity, that interaction is a moment of direct brand contact. If the system is designed well, the verification page does not just return a “genuine” result — it can deliver product information, register the consumer for a loyalty programme, offer a warranty activation, or invite a post-purchase review. The same scan that protects the brand also deepens the consumer relationship and generates first-party data about where products are being purchased and by whom.
This matters particularly in markets where genuine and counterfeit products are sold through the same channels and consumers have limited other ways to verify what they have bought. A brand that has trained its customer base to scan for verification has also created a consumer behaviour that makes fakes visible: when a fake fails the scan, the consumer knows immediately. The authentication layer becomes self-reinforcing because consumers who have been burned by a fake are motivated to check the next time. Post-purchase consumer engagement built on top of authentication infrastructure turns a security feature into a continuous touchpoint rather than a one-time check.
How to Choose the Right Solution for Your Situation
There is no universal configuration that fits every brand or product category. The right combination of solutions follows from five questions about your specific situation.
- What is your primary threat? Outright counterfeiting of your product calls for strong on-product authentication. Grey market and product diversion calls for serialization and track-and-trace. Unauthorized overruns require both serialization and tight batch controls. Identifying the primary threat avoids spending budget on the wrong layer.
- What is the consumer safety risk if a fake reaches an end user? A pharmaceutical, baby formula, or health supplement warrants covert markers, forensic-grade features, and verification mechanisms that work even when the consumer is not actively looking for them. A fashion accessory sits at the lower end of this scale and may be adequately served by a serialized QR code and visible tamper evidence.
- How do your consumers interact with the product at point of purchase? A consumer in a modern retail environment who is already accustomed to scanning codes will use a QR verification naturally. A consumer in a market with lower digital engagement may rely more on visible physical cues. The verification mechanism needs to match the actual behaviour of your buyers.
- What is the unit economics of your product? NFC tags add meaningful per-unit cost. DNA taggants more so. For low-margin, high-volume FMCG, the economics typically favour serialized QR codes with a strong backend. For premium products, the unit margin supports a higher investment per product in authentication.
- Where in the supply chain is your exposure highest? If your risk is at the factory (unauthorized overruns), controls need to be applied at production. If the risk is at a distribution node (grey market diversion), serialization with downstream verification is the priority. If the risk is at retail or in post-purchase resale, consumer-facing authentication is the most important layer.
These questions do not produce a formula, but they narrow the field considerably. Most brands operating across Asia-Pacific find that their situation calls for at least two layers — typically a physical authentication feature combined with a digital verification mechanism — because each covers the failure modes of the other.
Building a Layered Strategy: The Right Sequence
Once the right tools are identified, the sequence of implementation matters. A layered strategy works because each layer addresses failure modes the previous one cannot cover, but only if the layers are integrated rather than bolted on independently.
- Start with an honest assessment of your current risk profile. Map where your products have appeared outside authorized channels, what kind of complaints you have received, and which markets or channels carry the highest exposure. This determines which threats are live, not theoretical.
- Apply product-level authentication first. This protects the unit regardless of where it ends up. For most brands, this means at minimum a serialized QR code with a secure backend. For higher-risk categories, add a covert physical feature. Product authentication forms the foundation of every other control.
- Add serialization and supply chain controls for key SKUs. Not every product in your range warrants full track-and-trace infrastructure. Prioritize high-margin, high-volume, or high-risk SKUs — the products that generate the most revenue or carry the most safety exposure if compromised.
- Build consumer engagement into the authentication flow. Design the verification experience so that it delivers something of value to the consumer beyond a pass/fail result. A warranty, a loyalty point, a product guide — any of these increases the likelihood that consumers will scan, which in turn increases the data you collect and the rate at which fakes are surfaced.
- Establish monitoring and response protocols. Authentication technology generates signals — duplicate scan alerts, geographic mismatches, unusual scan patterns. None of those signals is useful without a process for reviewing them and escalating when an anomaly indicates a real problem. The monitoring loop closes the strategy.
The effectiveness of a layered approach depends on consistency. A system that is deployed on some SKUs but not others, or in some markets but not the primary risk markets, leaves visible gaps that experienced counterfeiters will find and exploit.
How Nabcore Approaches This
For brands operating in Asia-Pacific that are working through these decisions, Nabcore offers a structured approach built around three integrated capabilities: product authentication (including secure QR codes, NFC tags, batch verification, and serialized packaging), smart track-and-trace for supply chain visibility and diversion detection, and post-purchase consumer engagement that builds loyalty and brand insights on top of the authentication infrastructure.
The company does not apply a single template across clients. Each engagement starts with a consultation to map the brand’s actual risk profile — the industries served, the markets operated in, the supply chain structure, and the specific threats that have already materialized or are most likely to. From that assessment, a combination of solutions is designed and implemented. This approach is particularly relevant in markets like Southeast Asia and broader APAC, where the threat landscape, regulatory environment, and consumer behaviour vary significantly by country. You can explore the full range of available solutions through Nabcore’s Solutions Hub or review case studies from brands across the region that have deployed these approaches in practice.
Anti-counterfeiting is not a single problem with a single solution. It is a set of threats — outright faking, grey market diversion, unauthorized overruns — each requiring different tools applied in the right sequence. Physical authentication features, secure digital verification, track-and-trace systems, and consumer engagement infrastructure all have a role to play, but only when they are matched to the specific risk and deployed as an integrated system rather than a collection of unconnected measures.
The brands that manage this well are not necessarily the ones with the most sophisticated technology. They are the ones that started with a clear understanding of where their exposure was, chose tools that addressed that exposure specifically, and built a process for acting on the signals those tools generate. That discipline — clear threat identification, appropriate tool selection, and consistent monitoring — is what separates brands that are genuinely protected from those that have spent on security without achieving it.
Not Sure Which Solution Fits Your Situation?
The right anti-counterfeiting strategy depends on your specific risk profile, product category, and supply chain structure. Nabcore’s team works through that assessment with you before recommending anything — so you invest in solutions that address your actual exposure, not a generic checklist.
