How do you verify that a certification card is genuine before recording it in your tracking system?

Why intake is the only cheap moment to verify

Once a certification is in the system with an expiry date, everyone downstream trusts it. Managers schedule against it, auditors sample it, and the employee assumes it is fine. If the underlying card was altered, expired, issued by a provider that does not meet your requirement, or simply belongs to someone else, that mistake now has your company's name on it. Verification at intake takes a few minutes; discovering the problem after an incident takes lawyers. Related: Why do restaurants keep getting caught by expired food handler cards among their busy staff?

Most cases are not fraud. The typical bad card is an honest one that does not fit: an online-only CPR completion when the job requires a hands-on skills check, a forklift certificate from a previous employer that covered a different truck class, or a food handler card from a different state. The verification routine should catch those just as reliably as it catches the rare doctored PDF.

Keep reading: How can a safety manager prepare certification records so a surprise audit becomes a simple export?, What is the best way for a warehouse to track forklift certifications across shifts and many operators?, How does a team keep every staff CPR certification current without one person chasing everyone constantly?. See how CertKeepr helps you employee certification and training expiry tracking.

The four checks that catch nearly everything

First, match identity: the name on the card should match the employee's legal name in your records, and a photo ID should back it up. Second, check the issuer: is this organization one your requirement list accepts for this credential? If the requirement says "accredited provider" or names an approved list, the card has to come from one of those. Third, check the scope: many credentials have levels, classes, or endorsements, and a card in the right category but the wrong level does not satisfy the requirement.

Fourth, confirm with the source when you can. Many issuing organizations offer an online lookup by card number or by name and date of birth, and state licensing boards typically have public license verification pages. When no lookup exists, an email or phone call to the training provider asking them to confirm the completion date is reasonable and usually answered within a day or two. Keep a note of how each card was verified; "checked issuer lookup on this date" is worth more than a stored scan alone. Related: What is the best way for a warehouse to track forklift certifications across shifts and many operators?

Red flags worth a second look

Be alert to a certificate delivered as a screenshot rather than the original file or card, fonts that change mid-document, an issue date that falls on a weekend when the provider only runs weekday classes, or an expiration that is longer than the standard cycle for that credential. Watch for cards carrying a provider name you cannot find anywhere, or a training company whose website is a single page with no contact details. None of these prove a problem, but each one justifies the phone call.

Also look at the trainer, not just the card. For credentials where an authorized instructor signs off, confirm that the instructor is actually authorized by the issuing body for that course. Instructor authorizations lapse too, and a class taught by someone whose authorization expired can leave every student with a card the issuer will not stand behind. This one is uncomfortable to check and almost nobody does it, which is exactly why it causes problems.

Build the verification step into the record itself

Whatever system you use, give each certification record a field or note for the verification method, the date it was verified, and who did it. If the tracking software supports document attachments, store the original file, not a re-saved copy, so the metadata stays intact. When a credential is renewed, verify the renewal the same way rather than assuming continuity; a renewal is a new card and deserves the same four checks. Related: How does a team keep every staff CPR certification current without one person chasing everyone constantly?

Make the policy explicit for employees, too. Tell people at onboarding that cards will be verified with the issuer, that online-only completions are or are not accepted for specific credentials, and that a card in the wrong category will need to be replaced before they start the gated task. Clear expectations up front reduce the number of awkward conversations and, honestly, reduce the number of people who try their luck with a questionable certificate. Related: What certifications should be on the onboarding checklist before a new hire starts working on the floor?