Fake and expired ISO certificates are a real risk in supplier selection and tenders. Checking a certificate takes a few minutes.
1. Check the details on the certificate
- Organisation name and address match the supplier
- The scope covers the products or services you are buying
- Standard and edition are current (for example ISO 9001:2015)
- Issue and expiry dates – certificates are normally valid for three years
- Certificate number and the certification body’s name
- Accreditation mark, if the certificate is accredited
2. Confirm with the certification body
Every certification body should be able to confirm a certificate it issued. For certificates issued by CIB MARS, use our certificate verification page and enter the number exactly as printed.
3. Check the accreditation
If the certificate carries an accreditation mark, the accreditation body’s directory shows whether the certification body is accredited for that standard and scope. IAF CertSearch (iafcertsearch.org) also lists many accredited certificates worldwide.
What the status means
| Status | Meaning |
|---|---|
| Valid / active | The certificate is current and surveillance audits are up to date. |
| Suspended | Temporarily not valid, usually because an audit is overdue or serious nonconformities are open. |
| Withdrawn | Cancelled by the certification body; the organisation may not claim certification. |
| Expired | The three-year cycle ended without recertification. |
Warning signs
- No certificate number, or one the issuer cannot confirm
- Scope wording that does not match the supplier’s business
- Outdated editions (for example ISO 9001:2008) presented as current
- Validity longer than three years
If a CIB MARS certificate does not verify or the details differ, contact info@cibmars.com before relying on it. See also the ISO certification process.