A PDF takes three minutes to edit with a free tool. A convincing fake of a course certificate requires no specialist knowledge and no money, and the person receiving it usually cannot tell the difference. In a normal hiring process, nobody calls the school to check. That is exactly what makes fake certificates a real problem.
The good news: you do not need to call anyone, and you do not need to be an expert. You just need to know where to look.
Warning signs that a certificate may be fake
No single sign proves a fake, but several together are a clear signal:
- The certificate exists only as a PDF or image, with no way to check it at the source.
- The issuer’s name and logo appear, but there is no way to trace them back to the issuer.
- A verification link or QR code is present but leads to a different domain than the provider’s, or does not work.
- Details are off: a misspelled name, an odd date, or a course title that does not match what the provider actually runs.
Every trustworthy certificate has the opposite of that list: it can be checked, and the check happens at the issuer.
How to check if a certificate is real - in three steps
- Find the check. Look for a verification link or QR code on the certificate. That is the shortcut to the authenticity check. If neither exists, there is no source-level check to run.
- Follow it to the right place. The link should lead to the issuer, not to a loose file. Once you are there, the credential’s content (name, course and date) is shown alongside a confirmation that nothing has been changed.
- Read what it shows. A genuine credential answers three questions at once: who issued it, who received it, and that nothing has been changed since it was issued.
The whole check takes seconds, and anyone who receives the credential can run it.
What “real” actually means - three things a credential must prove
Behind a quick check sit three things. If all three hold, the credential is genuine:
- Who issued it. The credential is tied to the provider that ran the course, not just a name typed into a PDF. The origin is verifiable, not only asserted.
- That it has not been changed. The content is encrypted and secured on blockchain. Change a single detail, a character, a date, a name, and the check breaks immediately. What you see is exactly what was issued.
- That you can check it yourself. You do not take the school’s word for it, and not ours either. The check is done at the source, independently, by anyone who receives the credential.
These three things, origin, unchanged content, and independent verification, are what separates a genuine credential from a document that asks you to trust it.
Who needs to check - and when
The check is useful in three common situations:
You are an employer reviewing a candidate’s certificate. Instead of emailing the provider, you click the link and see the confirmation directly. Seconds, not days.
You are a course graduate and want to show your credential. The link or QR code on your certificate lets anyone, an employer, a client, a colleague, confirm it without contacting you or the school.
You receive a certificate and are unsure whether it is genuine. Look up the link, follow it, and see the check. No link, a broken link, or one that leads elsewhere, that is your answer.
A PDF or paper certificate compared with a verifiable credential
| PDF or paper certificate | Verifiable credential | |
|---|---|---|
| Authenticity | Trusted on sight | Checked at the source |
| Can be changed | Yes, in minutes | No, changes break the check |
| Checking | Call or email the school | In seconds, by anyone |
| Lasts over time | Sits in a file that can vanish | Yours to keep and check forever |
What to do if you suspect a certificate is fake
Try to verify it at the source. If it cannot be checked, or the link points somewhere other than the issuer, ask for a verifiable credential instead. A serious provider can always show the check. If they cannot, that is an answer in itself.
For an employer or a client, this is the difference between guessing and knowing. Instead of trusting a document anyone can edit, you see a credential you can confirm in seconds.
How True Upskill makes it simple
The courses on True Upskill come from providers that issue verifiable credentials. Every provider is reviewed before being listed, and every certificate can be verified at the source, no phone call needed.
Want the basics first? Read what a verifiable credential is. Looking for a course? Browse by subject, compare courses, or read about the providers behind them.
Run courses yourself? List your courses on True Upskill, so your participants get a credential they can show, and anyone can check, for the rest of their careers.
FAQ
How do I check if a certificate is real or fake?
Look for a verification link or QR code on the certificate and follow it to the issuer. A genuine credential shows who issued it, who received it, and that nothing has been changed, without you contacting the school. If the link is missing, does not work, or leads somewhere else, ask for a verifiable credential instead.
What happens when I click the verification link or scan the QR code?
You land on a page at the issuer that shows the credential's content (name, course and date) and confirms that nothing has been changed. No login is required and you do not need to contact anyone. The check takes seconds.
Can a digital certificate be faked?
A plain PDF or image can be edited in minutes and often looks genuine. What cannot be faked is a credential checked at the source: change a single detail and the check breaks. Appearance proves nothing - verification at the source is the only reliable test.
How does an employer know if a certificate is genuine?
With a plain certificate, an employer has to call the school or take the candidate's word for it. With a verifiable credential, they click the link and see the confirmation in seconds, no phone calls, no email chains.
What should I do if a certificate cannot be verified?
If it cannot be checked at the source, or the link points somewhere other than the issuer, ask for a verifiable credential instead. A serious provider can always show the check. If they cannot, that is an answer in itself.