Federated anti-counterfeit infrastructure

Every unit provable. Every scan answerable. Your data, on your instance.

Veritak lets brands issue cryptographically signed codes for every product they ship. Anyone in the chain — consumers, retailers, customs, warranty desks — verifies with a phone camera. No app. No account. And the verification data stays with the brand, not with us.

Verification vrtk://c/8F2A-11D4
Result
GENUINE
BatchLOT-2026-0348
SignatureHMAC OK · verified
Retail stageStaged · authorized retailer

Signature verifies against the batch key and the unit was staged by an authorized retailer before sale.

01 — The problem

Counterfeiting is a ~$2 trillion-a-year trade.1 Most of it isn't handbags.

It's medicine that doesn't work, brake pads that fail at speed, cosmetics laced with mercury, and fake seed that ruins a smallholder's season. In many developing-market categories, 10–30% of what's on the shelf is fake — and today, nobody in the chain can prove otherwise.

Pharma

1 in 10 medical products in low- and middle-income countries is substandard or falsified.2

Spirits

An estimated 25% of alcohol consumed globally is illicit or counterfeit — and counterfeit alcohol kills.3

Auto parts

Safety-critical fakes — brake pads, airbags, fluids — enter through gray channels no warranty desk can screen by eye.

Agriculture

Fake pesticides and seed are catastrophic for smallholder farmers across Africa and Southeast Asia.

02 — How it works

From mint to scan, six steps. No app anywhere in the chain.

01

Brand onboards

You get your own Client App instance on your own subdomain — your database, your verification API, your data.

02

Batch is minted

Core generates cryptographically signed code-pairs: a public QR plus a hidden secret, protected by a per-batch HMAC key sealed under a master KMS key. Plaintext secrets are never stored.

03

Manufacturer prints

Your printer applies the codes to stickers, labels, or packaging from an artwork bundle Core produces. We generate the payload; you keep your print chain.

04

Retailer stages

If your staging policy requires it, the retailer scans each unit at receipt — unlocking the code for consumer verification and attesting the unit arrived through the legitimate chain.

05

Consumer scans

Any phone camera, any smartphone browser. The result comes back GENUINE, FAKE, or SUSPICIOUS — with an explanation in plain language.

06

Audit trail grows

Every scan is logged into a Merkle-rooted audit chain. You can independently prove to auditors, regulators, or insurers that no record was altered after the fact.

No app to install · No account required to scan · Works in any smartphone browser

03 — Three answers

Every scan resolves to one of three states — with proof, not a "trust us" lookup.

A fake sticker can't be cloned into a genuine one: each code is cryptographically bound to its batch key. Copying the print doesn't copy the proof.

GENUINE

The code's signature verifies against the batch key, and the unit passed every stage the brand's policy requires. This unit is what it claims to be, sold through the channel it was meant for.

FAKE

The signature doesn't verify — the code was never minted by the brand, or it's a forgery that can't reproduce the cryptographic binding. The consumer sees it plainly, before the purchase or the pill.

SUSPICIOUS

The code is real, but something is off: it was never staged by an authorized retailer, it's being scanned far from its intended market, or it's a replay of a code already verified elsewhere.

04 — Why Veritak

Federated by design. Your supply-chain data never becomes someone else's asset.

Federated — data stays with the brand

Not centralized SaaS masquerading as trust infrastructure. Your scans, your supply-chain intelligence, your customer signal — on your instance. For competitors sharing a category, and for regulated markets, that's non-negotiable.

Cryptographically signed, not database-lookup

A fake sticker can't be cloned into validity. Each code's binding to its batch key is unforgeable without breaking HMAC — the proof travels with the code, not with a lookup table.

The retailer staging gate

The only way to catch counterfeits that never touched the legitimate distribution chain. A unit no authorized retailer ever scanned is flagged the moment a consumer verifies it.

Merkle-rooted audit trail

Prove to auditors, regulators, or insurers that scan history was never retroactively edited. A standard cryptographic data structure — auditable math, not a buzzword.

No consumer app

QR → browser → answer. Zero install friction is the difference between a verification system used at 5% and one used at 60%.

Embed or API

Put verification inside your own website, customer portal, or warranty flow. Veritak doesn't force your consumers through a Veritak-branded page.

05 — Who it's for

Anywhere chain-of-custody matters and the current answer is a certificate nobody trusts.

Pharma

Manufacturers & distributors

DSCSA and FMD already force serialization. Veritak layers consumer-verifiable, retailer-attestable trust on top of the mandate you have to meet anyway.

Spirits & wine

Premium beverage brands

Counterfeit alcohol kills, and premium fakes are a multi-billion market. Batch-level identity plus the retailer staging gate addresses both.

Cosmetics

Beauty & personal care

Heavy counterfeiting across Asian and MENA markets. A consumer scan converts brand promise into brand proof at the shelf.

Auto parts

Aftermarket & OEM

Brake pads, airbags, fluids — safety-critical fakes. Warranty desks distinguish genuine parts in one scan, before honoring the claim.

Agriculture

Seed & input suppliers

Cheap-to-mint QRs let cooperatives verify pesticides and seed at purchase — before a fake ruins the season.

Luxury

Luxury goods houses

The traditional counterfeit vertical — with a difference: you own the customer-verification signal, not a marketplace platform.

Also built for the other side of the counter: customs, regulators, and insurers can verify authenticity independently, without relying on the brand's assertion.

Our Partners
06 — For the technical buyer

Trust infrastructure you can audit, not marketing you have to believe.

Veritak Core handles only the shared cryptographic primitives — minting signed code-pairs and coordinating federation between brand instances. Everything sensitive lives on your instance: your subdomain, your database, your verification API.

Ask us how the crypto works →
HMAC signing

Each batch is protected by a per-batch HMAC key, sealed under a master KMS key. Plaintext secrets are never stored — a database breach yields nothing forgeable.

Merkle audit

Every verification event is committed to a Merkle-rooted audit chain the brand can attest independently. Tampering with history is detectable by construction.

Data residency

Per-instance isolation: each brand's Client App runs on its own subdomain with its own database. No shared tenancy for verification data. Ever.

Staging policy

Brands define which chain steps must attest a unit before it verifies GENUINE — configurable per product line, enforceable per batch.

07 — Questions

The ones every buyer asks first.

No. The consumer scans the QR with their phone camera, the verification runs in the browser, and the answer comes back in seconds. No install, no account. Zero friction is the difference between a system used at 5% and one used at 60%.

On your instance. Each brand runs its own Client App — your subdomain, your database, your verification API. Veritak Core only handles the shared crypto primitives: minting signed code-pairs and coordinating federation. Consumer scans, verification data, and business intelligence never leave your infrastructure.

The code is cryptographically bound to its batch key, so a forged code fails verification outright. A photocopied real code is caught by the staging gate and replay detection: a unit that was never scanned by an authorized retailer, or a code already verified elsewhere, resolves to SUSPICIOUS.

Serialization gives every unit a number; it doesn't tell anyone whether the number is trustworthy. Veritak is the trust layer on top of serialization — cryptographic proof of authenticity, retailer attestation, and a tamper-evident audit trail — not a replacement for it.

Whoever prints yours today. Veritak generates the cryptographic payload and an artwork bundle; your manufacturer or label printer applies it to stickers, labels, or packaging. We don't ship physical stickers.

Get in touch

See a batch minted, staged, and verified — live.

A demo takes thirty minutes: we mint a batch for one of your SKUs, walk the code through the retail staging gate, and you scan the result yourself. Bring your head of supply chain.