A consumer scans what looks like a legitimate QR code on a supplement bottle. The code resolves. A branded landing page appears. The product feels real. But the active ingredients inside are diluted, the batch number is cloned from a genuine unit manufactured six months earlier, and the “authorised retailer” selling it operates from an unregistered warehouse two countries away.
This scenario is not hypothetical. It plays out across consumer goods, healthcare, electronics, and industrial products every day — and the brand whose name is on the label bears the reputational cost, even though it never authorised a single unit of that product to reach that customer.
Verifying product authenticity is no longer a checkbox exercise. For shoppers, it is a matter of safety and value. For brand owners, operations leads, and compliance managers, it is a question of revenue protection, supply chain control, and long-term consumer trust. This guide walks through both sides: what shoppers can do when they want to confirm a product is genuine, and what brands need to build to make that confirmation possible, reliable, and defensible.
Why Product Authenticity Has Become a Business-Critical Issue
The scale of the counterfeit problem is larger than most brands realise until they encounter it directly. Research from Corsearch estimates that global trade in counterfeit goods could reach $1.79 trillion by 2030 — a 75% increase from 2023, growing at a rate more than three times faster than the global economy. Expressed differently, by 2030 roughly one dollar in every twenty spent on physical goods globally could be spent on a fake. That is not a niche enforcement issue. It is a structural threat to legitimate commerce.
The problem is especially pronounced in Asia-Pacific, where complex multi-tier distribution networks, rapid e-commerce growth, and porous cross-border trade create ideal conditions for product diversion and counterfeiting to flourish simultaneously. A brand selling through authorised distributors in five countries may find its products appearing on grey market platforms in two more — at prices that undercut authorised channels and strip regional pricing strategy of any meaning.
What makes this particularly difficult for brand owners is that the counterfeit and diversion problems are distinct but interrelated. Counterfeits are unauthorised copies of a genuine product. Grey market or diverted goods are often genuine products that have left the authorised supply chain — sold to unauthorised resellers, re-exported to unintended markets, or produced as overruns beyond contracted quantities. Both erode brand equity. Both confuse customers. Both generate revenue that flows away from the legitimate brand.
The Real Cost: Revenue, Trust, and Regulatory Risk
The financial figures are stark. In 2022 alone, counterfeiting displaced an estimated $1.1 trillion in legitimate economic activity, resulting in $174 billion in lost tax revenues worldwide and affecting up to 5.4 million jobs. For individual brands, the losses translate into direct revenue erosion, inflated customer service costs (consumers who receive fake products often contact the genuine brand for support), and the ongoing expense of enforcement, legal action, and market surveillance.
The trust dimension is often underestimated. Research by Corsearch found that 66% of consumers who unintentionally purchased counterfeit goods lost trust in buying from that brand again — and 34% of all consumers surveyed said they were less likely to buy from the brand’s own website if its products had been found susceptible to counterfeiting elsewhere. Trust, once broken, does not recover quickly. A customer who receives a diluted pharmaceutical product or a failing electronic component does not blame the counterfeiter. They blame the brand name on the label.
Regulatory exposure adds another dimension. In pharmaceutical and healthcare sectors, serialisation and traceability requirements are becoming mandatory in many markets. In consumer goods and FMCG, importers and distributors face increasing scrutiny from customs authorities. A brand that cannot demonstrate chain of custody for its products is not only commercially vulnerable — it is potentially liable. The question for compliance managers is increasingly not whether to implement authentication, but which authentication approach is proportionate to their risk profile.
How Shoppers Can Verify Product Authenticity: Step-by-Step
For consumers, the ability to verify a product depends heavily on what authentication tools the brand has put in place. However, there are practical checks that apply across most product categories, and understanding them helps shoppers make more informed decisions — and helps brand teams understand what their customers are actually looking for.
-
1. Check the packaging carefully before you open it. Authentic products are manufactured under consistent quality controls. Look for even printing, correct colour matching, and properly aligned labels. Misaligned text, blurry logos, inconsistent font weights, or packaging that feels lighter or flimsier than expected are all warning signs. Counterfeiters often replicate the visual design of packaging but cut costs on materials and print quality.
-
2. Inspect seals and tamper-evident features. Many genuine products include tamper-evident seals, shrink wrap, or inner foil barriers. Check that these are intact and consistent with what the brand shows on its official website. A seal that peels away too easily, leaves no adhesive residue, or appears to have been re-applied is a red flag. Some brands also use void labels that leave a visible “VOID” pattern when removed — a simple but effective deterrent.
-
3. Scan any QR codes or authentication codes — but know what a genuine scan looks like. Many brands now include scannable codes on packaging. A legitimate authentication QR code should resolve to a brand-controlled verification page, confirm the specific product and batch, and indicate whether the product is genuine. If the code leads to a generic homepage, an error page, or asks you to download an unfamiliar app, treat that as suspicious. Fake codes often redirect to irrelevant destinations or return no verification result at all. Note that a standard QR code that simply opens a marketing page is not an authentication tool — it provides no confirmation that the specific unit in your hand is genuine.
-
4. Verify the seller’s authorisation status. Most brands publish a list of authorised retailers and distributors on their website. If you are buying from an online marketplace, a social media storefront, or a third-party seller you have not used before, cross-reference that seller against the brand’s authorised channel list. Prices significantly below the standard market rate are a reliable signal that something is off — genuine products sold through authorised channels carry the cost of proper sourcing, quality control, and distribution.
-
5. Check serial numbers and batch codes against official records. Some brands operate verification portals or customer helplines where you can enter a product’s serial or batch number to confirm its authenticity. If the brand offers this service, use it. If the number returns no result, or if the same number appears to have been verified multiple times in different locations (which a good authentication system will flag), that is a strong indicator of a counterfeit or cloned product.
-
6. Trust your senses for the product itself. For personal care products, food, and supplements, smell, colour, and consistency matter. A counterfeit product may smell different, have an unusual texture, or dissolve differently from what you have used before. For electronics, unexpected heat generation, unusual charging behaviour, or missing safety certifications on the device itself are worth investigating before continued use.
How Brands Can Build a Robust Authentication System
For brand owners, the goal is not just to make products verifiable in theory — it is to make verification easy enough that consumers actually do it, and secure enough that counterfeiters cannot replicate it. That requires thinking in layers rather than relying on any single method.
-
1. Map your risk exposure before choosing a solution. Not all products carry the same counterfeiting risk, and over-engineering an authentication system for a low-risk product is as wasteful as under-protecting a high-risk one. Start by identifying which product lines, markets, and distribution channels are most exposed. Are your products being sold on unauthorised platforms? Have customers reported fakes? Are you seeing unexplained overruns in your supply chain? The answers shape the right authentication architecture.
-
2. Apply serialised, unique identifiers at the unit level. Batch-level authentication (where a single code covers thousands of identical units) is far weaker than unit-level serialisation. When each product carries a unique identifier linked to a central database, it becomes possible to detect when the same identifier appears in two different locations — a clear sign of cloning. Serialised packaging is the foundation of any credible authentication programme, and it also provides the data needed to investigate supply chain leakage.
-
3. Choose authentication mechanisms that are hard to replicate without insider access. Standard printed QR codes are easy to copy — anyone with a scanner and a printer can duplicate a static code in under a minute. Genuinely secure authentication requires codes that are either cryptographically generated (so each scan produces a unique, time-stamped verification event) or physically unclonable (such as micro-printed security patterns or NFC chips with encrypted identifiers). The goal is to make replication economically unviable for a counterfeiter at scale.
-
4. Make verification frictionless for consumers. The most secure authentication system in the world has limited value if consumers do not use it. Verification should require nothing more than the camera already on a consumer’s smartphone. It should return a clear, immediate result — genuine or suspect — with enough product-specific detail (batch number, manufacturing date, authorised region) to be meaningful. Systems that require app downloads, account registration, or manual data entry will see low adoption rates.
-
5. Use scan data as an intelligence feed, not just a confirmation mechanism. Every verification scan generates data: when the scan happened, where it happened geographically, how many times the same code has been scanned, and whether the scan location matches the authorised distribution territory for that product. Brands that analyse this data systematically can identify counterfeit clusters, detect grey market diversion before it becomes entrenched, and build evidence for enforcement actions. Authentication is not just a consumer-facing feature — it is a supply chain intelligence tool.
-
6. Integrate authentication with your broader supply chain visibility programme. Authentication at the point of consumer purchase is the last line of defence. Ideally, products are tracked through the supply chain from manufacturing through distribution to retail — so that any unauthorised movement, unexpected diversion, or volume discrepancy is visible before it reaches the end consumer. This is the difference between reactive brand protection (discovering fakes after customers complain) and proactive brand protection (identifying diversion events as they happen).
Authentication Technologies Explained in Plain Terms
The technology landscape for product authentication has become more accessible and more layered in recent years. Understanding what each option actually does — and where each has limitations — helps brand owners make better decisions.
Anti-Copy Security QR Codes
A standard QR code is a static image that encodes a fixed URL. It can be photographed, reproduced, and printed onto counterfeit packaging without any special equipment. An anti-copy security QR code works differently. Each code is cryptographically unique to a single product unit and is tied to a live database record. When a consumer scans it, the system checks whether that specific code exists, whether it has been scanned before (and from where), and whether the scan location matches the product’s authorised distribution geography. A counterfeiter who copies the code from a genuine product will generate a scan event that the brand’s system flags as a potential duplicate — providing both a consumer-facing alert and a brand-side intelligence signal.
NFC Tags
Near Field Communication (NFC) tags contain a small embedded chip that communicates wirelessly with an NFC-enabled smartphone when the phone is held close to the tag (typically within a few centimetres). Unlike printed codes, an NFC chip with an encrypted identifier cannot simply be copied by photographing it. Each chip stores a unique cryptographic key, and the verification process involves the chip generating a new authentication response each time it is tapped — making replay attacks or cloning extremely difficult without access to the original chip programming. NFC tags are particularly well-suited to high-value products, luxury goods, and industrial components where the additional unit cost of the tag is proportionate to the value of the product being protected.
Holographic Labels and Physical Security Features
Holographic labels and other optically variable features serve a different function. They are primarily visual deterrents — difficult to replicate at low cost, and immediately recognisable to trained eyes. On their own, they provide a first layer of assurance but limited forensic authentication, because sophisticated counterfeiters can produce convincing holographic replicas. Their most effective role is as part of a layered system: a holographic label alongside a serialised QR code creates two independent barriers, each of which a counterfeiter would need to overcome separately.
Batch Verification and Serialised Packaging
Serialised packaging assigns a unique identifier to every individual product unit, not just to a production batch. This matters because batch-level codes can be cloned across thousands of counterfeit units, all of which would pass a basic authenticity check. Unit-level serialisation means that if a code is scanned twice in different locations within a short time window, the system can flag a likely clone event. Combined with geo-location data from scan events, this gives brand owners a detailed picture of where their products are actually ending up — including whether authorised units are being diverted to unintended markets. Nabcore’s product authentication solutions are built around this serialised, unit-level approach, combining secure codes with real-time database verification to make cloning commercially unviable.
Why Authentication Alone Is Not Enough: The Supply Chain Layer
Product authentication solves the question of whether a specific item is genuine. It does not, on its own, answer the question of how an unauthorised product entered the market, or where in the distribution chain the leakage occurred. That requires a separate capability: end-to-end supply chain visibility.
Grey market diversion is a well-documented problem in Asia-Pacific markets, where price differences between countries create arbitrage opportunities and multi-layer distribution structures make traceability difficult. Products manufactured for one market are re-exported and sold in another. Distributors sell excess inventory to unauthorised resellers rather than returning it. Overruns from contract manufacturers find their way to grey market channels. Smart tracking technology — which assigns scannable identifiers to products at the point of manufacture and logs every movement through the supply chain — makes these diversion events visible in near-real-time, rather than weeks or months after the fact when the damage is already done.
The practical value of this visibility extends beyond enforcement. When a brand can see exactly where each product is at every stage of the supply chain, it can identify which distributors are consistently selling into unauthorised territories, which manufacturing sites are producing beyond contracted quantities, and which geographic markets are experiencing unusual price erosion. That intelligence informs both commercial decisions and enforcement priorities — and it provides the documented evidence needed to take contractual or legal action against supply chain partners who are breaching their agreements.
Authentication Across Industries: Different Risks, Different Needs
The right authentication approach varies significantly by industry, because the nature of the counterfeiting risk and the consequences of a fake product reaching a consumer differ so widely.
Consumer goods and FMCG: The sheer volume of units means that authentication must be low-cost per unit and completely frictionless for consumers. QR-code-based serialisation at scale is typically the most practical approach, combined with supply chain tracking to manage distributor compliance and detect overrun inventory before it reaches grey market channels.
Healthcare and pharmaceuticals: The stakes are higher because a counterfeit medicine can cause direct harm. The WHO estimates that up to 10% of medicines available globally could be counterfeit — a figure that represents not just economic loss but patient safety failures. Pharmaceutical authentication typically combines serialised packaging (often mandated by regulatory frameworks) with tamper-evident seals, and increasingly with NFC-enabled verification for premium or high-risk product lines.
Industrial products: Counterfeit components in industrial and engineering contexts — bearings, fasteners, electrical connectors, safety equipment — can cause equipment failure with serious safety consequences. Authentication for industrial products needs to survive harsh environments and be verifiable by supply chain professionals rather than end consumers, which often makes NFC or RFID-based solutions more appropriate than consumer-facing QR codes.
Government and regulated sectors: Agencies responsible for procurement of everything from uniforms to medical supplies face the risk of counterfeit goods entering public supply chains. Authentication in these contexts needs to support audit trails and provide legally defensible chain-of-custody documentation, not just a consumer-facing scan result.
Getting Started: Matching Your Risk Profile to the Right Solution
One of the most common mistakes brands make when approaching authentication is selecting a technology first and trying to fit their problem to it. The more effective approach is to start with a clear picture of your actual risk: which products, which markets, which distribution channels, and what the commercial or safety consequences of a successful counterfeiting or diversion event would be.
From that foundation, an authentication programme can be designed with the right combination of layers — physical security features, digital verification codes, supply chain tracking, and consumer engagement — calibrated to the risk level and the operational reality of your business. A single-product startup and a multinational FMCG brand face different problems and need different solutions, even if both operate in the same product category.
The most effective programmes also treat consumer engagement as part of the authentication infrastructure. When a consumer scans a verification code and receives a genuine confirmation, that moment is also an opportunity to deliver product information, loyalty rewards, or post-purchase support. Rather than a one-time security check, the scan becomes the beginning of an ongoing relationship between the brand and the consumer. Nabcore’s consumer engagement tools are built on this principle — turning the authentication moment into a value exchange, not just a verification event.
For brands that are just beginning to assess their exposure, the revenue loss prevention resources and case studies available from Nabcore provide a useful starting point for understanding what effective brand protection looks like in practice across different industries and risk profiles. Their solutions hub outlines the interlocking authentication, tracking, and engagement capabilities that make up a complete programme.
The Bottom Line
Verifying product authenticity is not a problem that can be solved once and set aside. Counterfeiters adapt. Distribution channels evolve. New markets open. E-commerce creates new points of vulnerability. The brands that manage this most effectively treat authentication not as a compliance cost but as an ongoing capability — one that simultaneously protects revenue, supports consumer trust, provides supply chain intelligence, and enables direct consumer engagement.
For shoppers, the practical steps are straightforward: check the packaging, verify the seller, scan the authentication code, and compare against official records. The more consistently consumers do this, the harder it becomes for counterfeit products to persist in the market undetected.
For brands, the challenge is more structural: building the systems that make consumer verification meaningful, connecting authentication to supply chain tracking, and using scan data as an intelligence tool rather than just a consumer-facing feature. That requires the right technology, the right implementation methodology, and an honest assessment of where the real risks lie in your specific business.
Not sure where your brand’s authentication gaps are?
Nabcore works with brand owners and operations teams across Asia-Pacific to assess counterfeiting and diversion risk, design layered authentication programmes, and implement solutions that fit the operational reality of your business. With over 14 years of experience and more than 300 million products protected across 11 countries, the team brings a practical, consultative approach rather than a one-size-fits-all product.
