How to Verify a Chinese Supplier's Certifications (ISO, BSCI, CE and More)
A certificate is only as good as the body that issued it. How to tell a real ISO, CCC or BSCI credential from a photoshopped scan — and which registries actually let you check.
A supplier that shows you a wall of certificates can still be a shell company. Most of the scans you receive are easy to fake, and many buyers never check whether a single one is real. This guide covers the certifications you will actually see when sourcing from China, which ones can be verified and where, and the tell-tale signs of a fake.
Why certificates matter — and why they are easy to fake
Certificates are a proxy for two things: capability and compliance. A factory with a genuine ISO 9001 certificate has had its quality-management system audited by an independent body. A buyer who asks for these documents is trying to confirm, at arm's length, that the supplier is who it says it is. The problem is that a scanned PDF takes minutes to fabricate, and a certificate has no value unless you can check it against an independent registry.
ISO 9001: check the number, not the logo
ISO does not issue certificates itself. An ISO 9001 certificate is issued by a certification body that is itself accredited — in China, typically accredited by CNAS (the China National Accreditation Service for Conformity Assessment) or a foreign equivalent. That makes verification a two-step check: confirm the certificate number exists, and confirm the body that issued it is genuinely accredited.
- Collect the certificate number, the issuing body and the scope — ISO certificates are scoped to specific activities, not to a whole company.
- Look the certificate up in the issuing body's public database, and check the body's accreditation status on the CNAS website.
- Check the validity dates; certificates are usually issued on a three-year cycle with surveillance audits in between.
- Treat 'we are certified by' and 'we are accredited' as different claims — a supplier is certified; the certification body is accredited.
CCC: the mandatory China Compulsory Certification
CCC (China Compulsory Certification) is a mandatory, product-specific mark for certain categories of products sold in China — electrical goods, some vehicle and safety products, fire-protection equipment and others. It is administered under SAMR and CNCA, and certificates are issued by designated bodies such as CQC. A CCC certificate is tied to a specific product and model, so a supplier that hands you a CCC certificate that does not match your product category is waving a red flag.
- Ask for the CCC certificate number and the exact product and model it covers.
- Verify the number on the CNCA or CQC public certificate-query system.
- Confirm the certificate is still valid — CCC certificates can be suspended or revoked.
- Remember CCC applies to products sold in China; it is not an export requirement or an EU mark.
A CCC certificate for the wrong product category is meaningless. Match the certificate's product and model against the exact goods you are ordering.
CE marking is European, not Chinese
CE is a European requirement, not a Chinese one. A Chinese supplier that says a product is 'CE certified' may be self-declaring conformity under a low-risk EU directive, or relying on a notified body for higher-risk products. What you actually need is the EU Declaration of Conformity and, where the directive requires it, the notified-body number — which you can check on the EU's NANDO database. If you are not selling into the EU, a CE mark on your China order may be irrelevant.
Social and ethical audits: BSCI, Sedex/SMETA, SA8000
BSCI (now part of amfori), Sedex/SMETA and SA8000 are social-compliance audit frameworks, often run at the request of Western buyers who need to show their supply chain meets labour standards. These are audit reports rather than product certifications. Ask for the audit report itself, the auditor that conducted it and the validity dates, and cross-check on the amfori or Sedex platform where your access allows.
A practical verification checklist
- Collect the certificate number, issuing body, scope and validity dates for every certificate the supplier claims.
- Verify each one against the issuing body's registry — never accept the certificate alone as proof.
- Confirm the product, model and activity actually match your order.
- For social audits, request the full audit report, not just the cover page.
- Treat any certificate that cannot be verified anywhere as decoration, not evidence.
- For high-value or first orders, commission an independent factory audit before you pay.
This content is general information to help you verify a supplier before you pay. It is not legal advice, and certification requirements vary by product and destination market — always confirm the current requirements for your specific goods with the relevant authorities.
Related guides
Verify a supplier now
Run due diligence on a Chinese supplier before you pay.