What a $150,000 Group Buy Teaches About Reading a COA

In July, a grey-market peptide “group buy” collapsed and its members were out roughly $150,000. TitrateLab traced the money on-chain and published the details; Rick Gold at OHM Peptides separately described the same trick a month later. I’d point you to both pieces rather than retell them. What interests me is the part that had nothing to do with blockchains.

The certificates of analysis never held up.

Some resolved, on the testing lab’s own website, to entirely different companies. Others failed lookup altogether. The vendor’s name had been pasted onto reports that belonged to someone else. Every buyer who lost money had a PDF that looked right, and the PDF was real. Only the name at the top was fake.

This is worth sitting with, because it inverts the usual advice. “Check the COA” is not enough. A fraudulent seller who is any good at this will hand you a genuine COA. The question is whether the COA is theirs.

Three checks that would have caught it

Look up the report ID on the lab’s site, not the vendor’s. Janoshik, and most serious labs, let you enter a report number and see the original. If the vendor name on the lab’s copy doesn’t match the vendor selling to you, stop.

Match the lot number on the vial to the report. A COA for lot 2407-A tells you nothing about the vial marked 2409-C in your hand. Vendors reuse a good report across batches more often than anyone admits.

Call the lab. This sounds excessive until you’ve done it once. A real third-party lab will confirm that a report number exists and who commissioned it. A vendor who discourages you from calling has told you what you need to know.

What “verified by customers” means

When the promoter in the TitrateLab piece was asked about testing, the answer was that it had been done “by customers.” That phrase should be a full stop. Customer testing is unverifiable by definition: you’re taking a stranger’s word for a stranger’s lab work. It’s the COA equivalent of “trust me.”

The uncomfortable part

I co-own a research-peptide vendor, disclosed on every page of this site. Earlier this year I sourced retatrutide through a contact I’d met and vetted in person, with a clean-looking COA. Two lots failed identity testing at an independent lab. The certificate had looked fine. I hadn’t asked the right questions either.

That’s why the checklist exists. It’s one page, eight questions, and it’s the sequence I now run on every batch before it’s listed anywhere. It won’t stop a determined fraud. It will stop the lazy ones, which is most of them.

[Download the Counterfeit Peptide Red Flag Checklist]

Sources: TitrateLab, “The $150,000 rugpull we warned everybody about,” July 2026. Rick Gold / OHM Peptides, X, August 27, 2026. Research use only; nothing here is advice on use.