Selecting an anti-counterfeiting vendor is one of those decisions that looks straightforward until you are 12 months into a contract and realise the solution was never designed for your actual problem. The technology looked credible in the demo. The pricing seemed reasonable. But the system cannot handle your distribution complexity, the data dashboard raises more questions than it answers, and your team is doing manual workarounds that were never in the original brief.

The global trade in counterfeit goods reached an estimated USD 467 billion in 2021, according to a joint OECD-EUIPO report, and the underlying patterns driving that figure have only intensified since. For brands operating across Asia-Pacific — where supply chains span multiple countries, distribution tiers are deep, and regulatory environments vary significantly — the cost of a poor vendor choice is not just financial. It shows up in eroded distributor trust, consumer safety incidents, grey market leakage, and brand equity that takes years to rebuild.

This guide is not a technology comparison. It is a set of practical questions designed to help brand managers, operations leads, and compliance officers evaluate vendors before signing anything — questions that go beyond feature checklists and get to the heart of whether a vendor can actually solve your problem.

Why Vendor Selection Matters More Than Technology Selection

Most brand protection conversations start with technology: QR codes, NFC tags, serialisation, blockchain. These are useful tools, but they are only as effective as the programme built around them. A vendor who leads with a product catalogue rather than an understanding of your threat environment is telling you something important about how the engagement will go.

The vendors worth working with understand that counterfeiting problems are not uniform. A pharmaceutical company faces a different risk profile than an FMCG brand with a wide distribution network across emerging markets. A premium consumer goods brand dealing with outright fakes needs a different intervention from one whose primary problem is unauthorised overruns from a contract manufacturer. The right vendor will want to understand your specific situation before recommending anything. The wrong vendor will have a standard package ready to present before you have said a word.

With that context in mind, here are the ten questions that should form the backbone of every vendor evaluation conversation.

10 Questions to Ask Every Anti-Counterfeiting Vendor

1. Do you start with a threat assessment, or a product catalogue?

This is the most important question on the list, and it should come first. A vendor who opens with a product demonstration without asking about your supply chain structure, your distribution geography, your counterfeit history, or your regulatory obligations is not in a position to recommend the right solution. They are in a position to sell you something.

A credible vendor will want to understand where your products travel, who handles them, which markets are highest risk, and what kind of counterfeiting activity you have already seen or suspect. Only then can they match a solution to the actual threat. This consultation-first approach is more time-consuming upfront, but it is the only way to avoid deploying authentication technology on the wrong problem — or on the right problem with the wrong tool.

Ask specifically: What does your onboarding discovery process involve, and what information do you need from us before you can propose a solution? A vendor with a strong methodology will have a clear answer.

2. How does your authentication technology resist cloning over time?

Counterfeiters are not passive. Once a security feature enters the market, it becomes a target. Printed serial numbers, standard QR codes, and even basic holograms can be copied within months by a determined counterfeiter with access to modern printing equipment. The meaningful question is not whether the technology is secure on day one — it is whether it remains meaningfully harder to clone after six months of exposure in the market.

Look for vendors who can explain the specific mechanism that prevents replication: cryptographic encoding, dynamic data linked to a secure cloud database, or physical features with unique manufacturing tolerances. Understand the difference between overt features (visible to anyone, useful for consumer-facing verification) and covert features (detectable only with specific tools, useful for enforcement and channel audits). A layered approach that combines both is generally more resilient than any single technology.

Ask specifically: Can you show us how a counterfeiter would approach replicating your label or code, and where they would fail? Any vendor worth considering should be able to answer this directly. Vendors who cannot should be removed from the shortlist.

Nabcore’s product authentication solutions — including serialised secure QR codes and NFC tags — are designed around this principle: each code is cryptographically unique, linked to a cloud-based verification database that counterfeiters cannot replicate, even if they copy the visual appearance of the label itself.

3. Can consumers verify products without downloading an app?

Consumer-facing authentication only works if consumers actually use it. Any friction in the verification process — especially requiring a separate app download — dramatically reduces adoption rates, particularly in markets where consumers are cautious about installing unfamiliar software. If your end customers cannot authenticate a product with a quick scan from their native smartphone camera, the consumer-facing layer of your brand protection programme is largely theoretical.

This matters for more than just consumer verification. In many Asia-Pacific markets, consumer scanning behaviour is also a data source for identifying counterfeit clusters and diversion patterns. If the scan rate is low because the process is cumbersome, you lose both the protection signal and the market intelligence that comes with it.

Ask to walk through the consumer verification journey yourself, from scan to result, on a standard device. If it takes more than a few seconds or requires any steps beyond pointing a camera, it needs to improve before deployment.

4. Does your solution cover the full supply chain — not just the label?

A label that authenticates a product at point of sale cannot tell you whether that product was diverted from an authorised distributor, whether your contract manufacturer produced unauthorised overruns, or whether a batch was sold into a market it was never supposed to reach. Authentication and supply chain visibility are two distinct capabilities, and many vendors offer one without the other.

Real supply chain visibility means that every product has a unique identity from the point of manufacture, and that identity is tracked at key handoff points: leaving the factory, arriving at a warehouse, being picked up by a distributor, and eventually reaching the end consumer. When scan data shows a product appearing in a geography it was not assigned to, or being scanned multiple times across different locations, those are signals the system should surface automatically.

Smart tracking technology of this kind stops product diversion, grey market activity, and unauthorised overruns by creating a verified digital thread for every unit — not just every SKU or batch. Ask vendors whether their system tracks at the unit level, the batch level, or the SKU level, and why.

5. How do you address grey market diversion, not just outright counterfeits?

Grey market diversion — where genuine products are sold through unauthorised channels or into markets where they were not intended to be sold — is often treated as a logistics problem rather than a brand protection problem. This is a mistake. Grey market activity erodes distributor relationships, undermines pricing strategies, and creates the conditions under which counterfeit products enter the same distribution channels as authentic ones.

Many anti-counterfeiting vendors focus exclusively on detecting fake products and do not have a mechanism for identifying diverted authentic products. If your distribution network spans multiple countries with different pricing tiers — which is common across Asia-Pacific — this is a gap you cannot afford to leave open.

Ask specifically whether the vendor’s track-and-trace capability can flag when a product’s scan pattern suggests it has moved outside its authorised distribution territory. Ask how the system handles batch-level assignment to specific distributors or markets. This is a materially different technical requirement from simply authenticating a label, and not all vendors have built for it.

6. What does your analytics layer actually tell me, and who acts on it?

A dashboard full of scan data is not the same as actionable intelligence. Before you evaluate any platform’s analytics capability, be clear about what decisions the data needs to support. Are you trying to identify counterfeit hotspots by region? Detect diversion patterns across distributors? Monitor authentication rates by product line or batch? The answers to these questions should drive what you look for in a reporting layer.

During any vendor demo, ask to see the actual dashboard rather than a slide showing what it might look like. Look for anomaly detection that surfaces meaningful signals automatically — duplicate scan events from different locations, geographic scan patterns inconsistent with authorised distribution, sudden drops in authentication success rates for a specific batch. Also ask who on your team will be responsible for acting on alerts, and whether the vendor provides any support in interpreting the data during the early months of deployment.

Good analytics also extend beyond brand protection. Scan data from authenticated products is a direct line to consumer behaviour — which products are being verified, where, and when. Vendors who surface this data through a consumer engagement layer give brands the ability to turn product authentication into an ongoing relationship with verified end customers, not just a one-time security check.

7. How does the solution integrate with our existing systems?

This is the question most brands think about after they have signed a contract, at which point the answer becomes considerably more expensive. Anti-counterfeiting solutions do not exist in isolation — they need to connect with ERP systems, warehouse management platforms, CRM tools, and in some industries, regulatory compliance databases. The more integration touchpoints there are, the more important it is to understand exactly how each one works before deployment begins.

Ask vendors to name specific systems they have integrated with previously, and to connect you with a client reference where that integration was deployed at scale. Ask about the format of data exchange, who manages the integration on the vendor side, and what happens when an update to your ERP breaks the connection. A vendor who cannot answer these questions specifically has not done this integration at the scale you need, regardless of what their brochure says.

Also consider the operational side: who within your organisation will manage the connection between the brand protection platform and your existing processes? The vendor should be able to tell you what internal resource is typically required and provide documentation that your IT team can review before the contract is signed.

8. What does implementation look like beyond the pilot phase?

Pilot programmes are useful for testing technology and identifying integration issues, but they can also give a misleading picture of what full deployment actually involves. A solution that performs well across a single product line in one market may encounter significant complications when rolled out across a broader product portfolio, multiple packaging formats, a multinational distribution network, or a mix of contract manufacturers with different production environments.

Ask vendors to walk you through the full implementation timeline: not just the pilot, but the transition to full deployment, training requirements for different user groups (warehouse staff, distributors, field sales, consumer support), and how they handle unexpected complications that emerge after launch. Ask for a realistic view of internal resource requirements. Implementations that feel seamless in a vendor presentation often require more internal coordination than anticipated, particularly when packaging redesign, label procurement, and ERP changes are involved.

A vendor who has deployed at scale across your industry will have honest answers to these questions. One who has not will tend to underestimate timelines and understate complexity.

9. Can the solution scale with our volume, markets, and product range?

The solution you deploy today should be capable of handling the volume and complexity you expect to operate at in three to five years. This means asking about unit volume ceilings, the cost structure at higher volumes, the ability to add new markets with different regulatory requirements, and whether the platform can accommodate new product categories or packaging formats without a significant re-engineering effort.

Scalability is not just a technology question — it is also a commercial one. Some vendors price in a way that makes the solution increasingly expensive as your protection programme grows, effectively penalising you for success. Others have technical limits that require infrastructure upgrades at certain volume thresholds, creating costs that were not visible at the time of contract. Ask explicitly for a pricing model that covers your projected volumes over a multi-year period, and get confirmation in writing of what is included and what triggers additional fees.

For brands operating across Asia-Pacific, scalability also means the ability to adapt to the specific regulatory, language, and market requirements of individual countries. A platform built for one regulatory environment may require significant customisation to operate compliantly in another. Vendors with established regional partnerships and a track record across multiple markets in the region are better positioned to support this than those whose reference clients are concentrated in a single market.

10. What does ongoing support and programme governance look like?

The decision to deploy an anti-counterfeiting solution is not a one-time project — it is an ongoing programme that needs to evolve as counterfeiters adapt, as your business changes, and as the technology landscape develops. The vendor relationship should reflect this. Ask whether you will have a dedicated account manager or whether post-implementation support is handled through a general service queue. Ask what their process is for alerting clients to emerging threats or new attack vectors that affect their industry.

Also ask about technology roadmap access. A vendor committed to long-term partnership should be willing to share where the platform is heading and how clients feed into product development priorities. A vendor who cannot speak to this is likely managing a static product rather than an evolving platform — which means the solution you deploy today may not be adequate in 18 months.

Finally, ask what happens at contract renewal. Are there automatic price increases tied to volume? Are you locked into proprietary hardware or labels that can only be procured through the vendor? Understanding exit conditions before you enter a contract is not pessimism — it is good procurement practice. You can explore the full scope of Nabcore’s approach to programme design and ongoing support via their solutions hub.

Red Flags to Watch for During Vendor Evaluation

Beyond the ten questions above, there are several patterns that should prompt additional scrutiny regardless of how well a vendor performs elsewhere in the conversation.

• Starting with a demo before asking about your business. A vendor who presents a standard product demonstration without first understanding your threat profile is not approaching this as a consultative engagement. They may still have a good product, but the mismatch in how they work will likely persist through implementation.
• Vague answers about security mechanisms. If a vendor cannot explain specifically why their technology is difficult to clone — not in marketing terms, but in technical ones — that is a meaningful gap. Security through obscurity is not a protection strategy.
• No reference clients in your industry or region. Experience in your specific sector and geography matters. The supply chain structures, regulatory requirements, and counterfeiting patterns in FMCG across Southeast Asia are materially different from those in European pharmaceuticals. Ask for relevant references and actually speak to them.
• Pricing that only covers the label or the code. The technology is one component. Data storage, platform access, analytics, integration support, and ongoing updates all have costs. A price that seems low should prompt you to ask what is excluded, not to celebrate a good deal.
• Proprietary lock-in on physical materials. If the vendor is the only source of the labels, tags, or packaging materials your protection programme depends on, you have limited leverage in any future negotiation. Understand this dependency before signing.

What a Good Vendor Partnership Actually Looks Like

The best anti-counterfeiting engagements share a common characteristic: the vendor invested time in understanding the brand’s specific risk environment before recommending anything. This is harder to sell in a procurement process where multiple vendors are competing on price and feature lists, but it is the single best predictor of whether a solution will actually perform in the field.

A good vendor will tell you when a simpler or less expensive intervention is appropriate for your current risk level, rather than defaulting to their most comprehensive (and most expensive) offering. They will be honest about the limitations of their technology in certain contexts and transparent about the internal effort your team will need to invest for the programme to succeed. They will have a clear view of how their solution addresses not just today’s counterfeit threat but the likely evolution of that threat over the contract period.

Nabcore has built its Asia BrandProtect System on exactly this principle, combining product authentication, smart tracking, and consumer engagement as configurable, interlocking capabilities that are matched to each brand’s specific risk profile rather than deployed as a standard package. With over 14 years of experience protecting more than 300 million products across 11 countries in Asia-Pacific, the company’s approach is rooted in a consultation and design methodology that begins with understanding the threat before recommending the solution. You can review their approach to revenue loss prevention and see how their work has been applied across industries via the case studies hub.

The counterfeiting problem is not getting simpler. Supply chains are extending further, e-commerce is creating new diversion channels, and counterfeiters are adopting better technology faster than many brands’ protection programmes are evolving. The right vendor helps you stay ahead of that curve — not just on day one of the contract, but throughout the life of the programme.

Choosing a Vendor Is Choosing a Programme Partner

Anti-counterfeiting vendor selection is not a procurement exercise — it is a decision that shapes how effectively your brand is protected, how visible your supply chain is, and how much confidence your consumers have in the products they purchase. The ten questions in this guide will not guarantee the right outcome, but they will ensure you are evaluating vendors on what actually matters: their understanding of your problem, the durability of their technology, the quality of their data, and their commitment to the programme after the contract is signed.

Take the time to go beyond the demo. Speak to reference clients. Ask the uncomfortable questions about lock-in, scalability, and what happens when something breaks. The vendors with strong answers to these questions are the ones worth shortlisting. The ones who deflect, generalise, or pivot back to features every time you ask about process are telling you something important.

Brand protection done well is not visible — it is the absence of problems that would otherwise compound quietly into a much larger crisis. Choose the vendor who understands that.