How to Spot a Fake CAC Certificate in 30 Seconds

Here is the honest answer first: you cannot tell whether a CAC certificate is genuine just by looking at the PDF. The way to confirm it's real is to check the RC number, the exact company name, and the incorporation date against the official CAC register, which you can do free on Fylings in seconds. A certificate is a printout. The register is the proof. When they don't match, you have your answer.

Anyone with a design tool can copy a CAC layout, paste a logo, type a believable RC number and export a convincing PDF. The document itself carries no security you can verify by eye. So instead of studying the paper, you look up the record behind it. If a company is real, its details are sitting on the public register right now. If they aren't, no certificate in the world changes that.

Why CAC certificates get forged in the first place

A CAC certificate is a powerful prop. It signals "we are a registered, legitimate business," and most people accept it at face value because it looks official. That trust is exactly what makes it worth faking. A forged certificate can be used to open conversations with suppliers, pose as a contractor bidding for work, convince a landlord or partner, collect deposits and "registration fees," or lend credibility to an investment pitch that has no company behind it.

The forger is betting on one thing: that you'll glance at the PDF, see the seal and the RC number, and never check further. The entire scam depends on you not spending 30 seconds on the register. So spend them.

Why the paper isn't proof of anything

A certificate is a static snapshot from the day it was issued, at best. Even a 100% genuine certificate doesn't tell you the company is still active today. Companies get dissolved, struck off, or go dormant after incorporation, and the old certificate keeps looking exactly the same. So a real certificate can be misleading, and a fake certificate can look flawless. Neither tells you what you actually need to know.

What you need is the live status of the company on the register: does this RC number exist, does it belong to this name, and what is its current standing? That information lives on the official record, not on the printout someone emailed you.

What to cross-check (the three things that matter)

You don't need to verify everything on the certificate. Three fields decide it:

• RC or BN number, the registration number is the unique key. It should exist on the register and resolve to a real company. If you're unsure which prefix you're looking at, see RC vs BN number.
• Exact company name, the name on the certificate must match the name attached to that number on the register, character for character. Scammers often use a name that's almost identical to a well-known real company.
• Incorporation date, the date on the certificate should match the registration date on the official record. A mismatch here is a strong tell that the document was fabricated.

If all three line up against the live register, the company is real. If any one of them disagrees, treat the certificate as fake until proven otherwise.

The 30-second method: verify a CAC certificate online

1. Read the RC/BN number and exact name off the certificate. Copy them as written, including the spelling and any "LTD", "PLC" or "Enterprises".
2. Search the company on Fylings. Go to verify free on Fylings and search the name (fylings.com/?q=NAME) or look up the registration number directly.
3. Match the name. Confirm the company name on the register matches the certificate exactly, not just "close enough".
4. Match the RC/BN number. Confirm the registration number on the certificate is the same number attached to that company on the official record.
5. Match the incorporation date. Check the registration/incorporation date on Fylings against the date printed on the certificate.
6. Check the live status and confidence. Fylings shows status (active, dissolved, dormant), company type and TIN, along with the source, the last-verified date and a confidence indicator. A genuine certificate from a dissolved company is a red flag of its own.

That's it. Three matches and a status check. If they all agree, you're dealing with a real, traceable company. For a fuller walkthrough of looking up a business from scratch, see how to check CAC registration.

Red flags of a forged CAC certificate

Some of these you can notice on the document itself; the decisive ones only show up when you check the register. Treat any of these as a reason to slow down:

• The RC number isn't on the register at all, the single biggest tell. A real number always resolves to a real company.
• The RC number belongs to a different company, the number exists, but it's registered to a name that isn't on the certificate.
• The name is slightly off, a missing word, an added "Global" or "International", a swapped letter that mimics a known, legitimate company.
• The incorporation date doesn't match the registration date on the official record.
• The certificate claims "active" but the register says otherwise, dissolved, struck off or dormant on the live record.
• No verifiable RC/BN number, blank, blurred, cropped out, or "available on request".
• Wrong date format or inconsistent layout, odd fonts, misaligned fields, a date written in a format that doesn't match official records.
• Pressure to skip verification, "the certificate is enough", "don't worry about checking", or urgency to pay before you can confirm anything.

What to do if it doesn't match

If the RC number, name or date doesn't line up with the register, stop the transaction. Don't pay, don't sign and don't share documents of your own. A mismatch isn't always proof of fraud, occasionally it's a typo or an outdated certificate, so it's fair to ask the other party to confirm their exact registered name and RC number, then look that up directly.

But the burden is on them to be verifiable, not on you to give them the benefit of the doubt. If they can't produce a registration number that resolves to their company name on the official register, that is the end of the conversation. Real businesses are happy to be checked; only fake ones resist it.

The limits of a certificate (even a real one)

Verifying a certificate confirms one thing: a company by this name and number exists, or existed, on the register. It does not confirm the person you're dealing with owns or represents that company, that the company is solvent, or that it will deliver on a deal. Verification is the floor, not the ceiling. A clean register check means you're not talking to a phantom, after that, normal due diligence still applies: references, contracts, escrow where money is involved.

What it does buy you is certainty on the most basic question, the one most scams rely on you skipping: is there a real company here at all?

Verify before you trust

A certificate proves nothing on its own, the register proves everything. The next time someone sends you a CAC certificate, don't admire the seal. Copy the RC number, search it on verify free on Fylings and confirm the name, number and date in under a minute. It's free, it's instant, and it's the difference between trusting a company and trusting a printout. Start with the Nigeria hub or run your first check now.