Why verification matters
Certificates are cheap to print and expensive to verify. Every year, buyers source from "factories" whose ISO certificate was bought for a few hundred dollars, whose FDA "approval" does not exist as a document at all, and whose test reports were generated with no product behind them. The good news: a real compliance document always leaves fingerprints that a fake one cannot reproduce. This guide walks through each document a cosmetic factory should show you, exactly what to check on it, and what tells you it is not genuine.
Run this checklist on any supplier, including us. We have nothing to hide — and we will show you where to verify each item independently.
1. The GMP certificate: check the issuer, not the word
"GMP" by itself means nothing — it is a set of manufacturing principles, and anyone can put the letters on a letterhead. What matters is who issued the certificate and under what scope:
- In China, GMP status for a cosmetics facility comes from the provincial drug regulatory authority, or is demonstrated through third-party factory audits (SGS, BV, Intertek). Ask which one applies and request the certificate or audit report.
- A genuine certificate shows: issuer name, certificate number, issue date, expiry date, and the exact scope (e.g., "manufacturing of skincare cosmetics").
- Red flags: a "GMP certificate" with no issuer, no number, no expiry date, or a scope that reads like marketing copy.
2. ISO 22716: it must carry a certification body's name
ISO 22716 (cosmetics GMP) is not something a factory issues to itself. It is granted by an accredited certification body — TÜV, SGS, BSI, Intertek, or a local accredited body. That means a genuine ISO 22716 certificate always has:
- The certification body's name and logo, a certificate number, and an expiry date (typically 3 years with annual surveillance).
- W ritten scope: the certificate must say the scope covers manufacturing of cosmetics for your product category. A scope that says "consulting" or "trading" proves nothing about your product line.
- Public verification: most major certification bodies operate online certificate registries — enter the certificate number and company name and confirm the status (active, suspended, or expired). If a supplier "does not know" its own certificate number, you already have your answer.
- Red flags: "ISO 22716 certified" with no body name and no number; an expired certificate still being presented as current; a certificate company name that differs from the entity invoicing you.
3. FDA MoCRA: "FDA certified" is itself a red flag
Here is the fact that separates serious buyers: the FDA does not certify cosmetics. There is no such document as an "FDA certificate" for a cosmetic product. Anyone who shows you one is either a trading company or a liar.
What the Modernization of Cosmetics Regulation (MoCRA, effective 2022–2024) actually requires of a US-bound facility:
- Facility registration, renewed every even-numbered year — an internal FDA record with an FEI number, not a certificate handed to customers.
- Product listing — a record of each product's ingredients, held by the FDA.
- Safety substantiation — the manufacturer's documented evidence that the product is safe.
How to verify a supplier's MoCRA posture: request the FDA facility registration confirmation (it shows the FEI number) and check that the registered name and address match the company you are actually dealing with. The FDA does not publish a public list of registered cosmetic facilities, so the consistency of the confirmation letter — and the supplier's ability to explain the listing process — is your evidence.
Red flags: "FDA certified" or "FDA approved" anywhere in the materials; a "MoCRA certificate" printed on nice letterhead (no such thing exists); a supplier who cannot explain what product listing is.
4. Patents: the one document anyone can verify
A patent is the most checkable document on this list. In China, the CNIPA grants patents, and every granted patent is publicly searchable. To verify:
- Search the patent number on Google Patents or the CNIPA public database — no account, no request, no waiting.
- Check the assignee: the name on the patent must be the factory, not a random individual or a trading company.
- Check the status: granted, not pending. Only granted patents count as demonstrated R&D.
- Check the relevance: does the claimed invention actually relate to the category you are sourcing — film-forming hydrogel, cross-linking agents, mask material? A patent portfolio in unrelated categories is decoration.
FKY holds seven CNIPA patents, all in-house across our mask and serum lines. Send us any number from that list and verify it yourself in ten seconds — that is the standard we hold every supplier's claim to.
5. Test reports: lot number, or it never happened
Certificates of analysis, stability data, and preservation-efficacy (challenge) reports are the working documents of a real QC system. Check:
- The testing lab's accreditation — CNAS or ISO 17025. A report from a lab you cannot look up is a report you cannot use.
- Report number, date, and signature or stamp.
- The sample lot on the report — it must match the product you are actually buying. A "test report" with no lot, or a generic product name, is a template, not a test.
- Method plausibility: preservation efficacy should reference a recognized challenge method (ISO 11930); stability should show actual time points at defined temperatures.
Red flags: the same report number reused for unrelated products; lab names that do not resolve; reports that are "coming soon" for products the supplier claims to have made for years.
6. The cross-document test: the single strongest tell
Lay every document side by side: business license, GMP certificate, ISO 22716 certificate, FDA registration confirmation, patents, and a current COA. A genuine factory's documents tell one consistent story — the same legal name, the same address, dates that make sense (the ISO certificate issued after the factory existed, the patents held by the same entity that manufactures).
A document pack assembled by a middleman shows mismatches: the certificate names a different company than the invoice, the address is a shared virtual office, the patents belong to an unrelated individual. You do not need to know which single document is fake. The inconsistencies are the evidence.
The live step: fifteen minutes on video
Documents can be forged. A live video call cannot be. Ask for a video factory tour — production floor, clean room, warehouse — and while you are on the call, ask the person to hold up the framed certificates and read you the numbers, which you verify in real time.
Then ask one specific technical question: "Which stability lot can you show me for this exact formula?" A real factory answers without hesitation. A middleman stalls, says "I will confirm with the factory," or changes the subject. That single answer tells you more than any certificate.
What this looks like at FKY
Since we asked you to verify, here is where to verify us:
- GMP and ISO 22716: certificates with issuer name and certificate number — checkable through the issuing body's public registry.
- MoCRA: our Zhuhai facility is registered under the US FDA Modernization of Cosmetics Regulation; the registration confirmation with FEI number is provided on request.
- Seven CNIPA patents: granted, in-house, across our mask and serum lines — every number publicly searchable.
- SGS-audited factory: the audit file pack is available to qualified buyers before you commit.
- Batch COA: every production batch ships with its own certificate of analysis matching the lot number on the carton.
Our offer: request the full compliance pack (scanned documents, all numbers visible) and a fifteen-minute live video factory tour before you spend money on a single container. Write to fkyskincare@gmail.com. If any item in our pack does not verify, tell us — we would like to know exactly where the gap is.
The bottom line
Check the issuer. Verify the number. Match the scope. Cross-check every document against every other one. Then put the factory on video. Ten minutes of this work separates a manufacturer from a middleman — and it protects your brand, not just your first order.