How to Verify a Certificate of Insurance (and Spot a Fake)

To verify a certificate of insurance, confirm the document is a genuine ACORD 25, check that the policy dates are still in force, match the coverage types and limits against what you require, confirm your business is named as an additional insured by endorsement, and contact the issuing agent or insurer if anything looks off. The fakes easiest to catch show mismatched fonts, a missing ACORD label, or contact details that point to the insured instead of a licensed agent or broker.

A certificate of insurance (COI) is the document a vendor, contractor or tenant gives you as proof they carry the coverage your contract requires. The problem is that a COI is easy to fake and even an honest one is only accurate on the day it was issued. Verifying it properly is how you make sure the coverage you are relying on actually exists when a claim hits. This guide walks through how to do that by hand and where it makes sense to let software do the checking.

What does it mean to verify a certificate of insurance?

Verifying a certificate of insurance means confirming that the document is authentic, that the policies it lists are active and current, that the coverage types and limits meet your requirements, and that any additional insured or endorsement language you require is actually in place. It is a check of both the paper and the coverage behind it, not just a glance at the form. Proper certificate of insurance verification answers one question: if something goes wrong, will this policy pay.

How to verify a certificate of insurance, step by step

Work through the certificate in the same order every time so nothing gets skipped. A consistent process is what catches the gaps that a quick visual scan misses.

1. Confirm the form is a real ACORD 25. A standard US liability certificate is the ACORD 25. Look for the ACORD logo in the upper right and the words ACORD 25 in the lower left. A missing label or a form that does not match the standard layout is the first red flag.
2. Check the named insured. The insured box should hold the vendor business name and address, not an individual person. If a person filled in their own name, the certificate was likely self-prepared rather than issued by an agent.
3. Read the policy dates. Every policy line shows an effective and expiration date. Confirm the coverage is in force today and will stay in force for the period you need it.
4. Match coverage and limits to your requirement. Compare each coverage type and limit against what your contract demands. Watch for a policy that is present but short on limits, or a coverage you require that is simply missing.
5. Confirm additional insured and other endorsements. If your contract requires additional insured status, a waiver of subrogation, or primary and noncontributory wording, confirm it is on the certificate and backed by an endorsement, not just a checked box.
6. Verify the producer and contact details. The producer box should name a licensed agent or broker, and the contact email should use that agency domain. If the contact details belong to the insured, treat the certificate with caution.
7. Confirm directly with the source when anything looks off. When the form, dates or contacts raise a question, contact the issuing agent or insurer to confirm the policy is real and active.

How do you know if a certificate of insurance is real?

You confirm a certificate is real by checking the form against the ACORD 25 standard, looking for formatting that does not match, and confirming the issuing agent exists and issued it. Most fakes are altered copies of a real certificate, so the tells are small inconsistencies in fonts, alignment and contact details rather than an obviously bad document. The table below lists the warning signs that should trigger a closer look.

If you do not recognize the insurer in the upper right of the certificate, you can check its rating on AM Best to confirm it is a real, rated carrier before you rely on the coverage.

How do you check that a certificate of insurance is current?

Check that a certificate is current by reading the expiration date on each policy line and confirming it has not passed. A certificate proves coverage existed on the day it was issued, so an old certificate tells you nothing about coverage today. Track each vendor expiration date and request a renewed certificate before the policy lapses. Keep in mind a policy can also be canceled mid-term, so for high-risk vendors a current-dated certificate is a starting point, not a guarantee, which is why ongoing monitoring beats a one-time check.

Should you call the insurance company to verify a COI?

Yes, call the issuing agent or insurer whenever the certificate raises any doubt. A quick call confirms the policy exists, is active, and carries the limits and endorsements shown. If the agent is hard to reach, will not confirm the policy, or seems hesitant, treat that as a warning sign. For routine, low-risk vendors a careful read of the form is usually enough, but for anyone doing high-risk work on your property, confirming with the source is worth the few minutes it takes.

How do you verify additional insured status on a certificate?

Verify additional insured status by confirming your business is named as an additional insured and that the coverage is backed by an endorsement on the vendor policy, not just listed in the certificate holder box. The certificate holder only receives notice. An additional insured is added to the policy and gains real coverage under it. When the wording matters, request a copy of the endorsement. We cover this distinction in depth in additional insured vs certificate holder, which is the single most common verification mistake we see.

Can certificate of insurance verification be automated?

Yes. Software now reads the ACORD 25 with AI, pulls every field, and checks the coverage types, limits and dates against the rules you set, then flags anything short, expired or missing. That removes the manual re-keying and the human misses that come with verifying certificates by hand. Certificate of insurance management software stores every certificate, monitors expiration dates, and chases renewals automatically, while vendor insurance compliance software applies your requirements across an entire vendor base. For operators verifying dozens of vendors at a time, such as a restaurant group running COI tracking for restaurants and multi-location retail, automated verification is the only way to keep every site covered without a full-time clerk.

You can try it on a real document right now: upload a certificate at the top of this page and watch COISoftware read and check it in seconds.

Build verification into your vendor onboarding

Verifying the COI is one step in bringing on a vendor. The contract that requires that coverage usually needs a signature too, which you can collect with an online document e-signing tool. The same vendors hand over W-9s, licenses and other paperwork, and an AI document data extraction tool pulls the structured data out of those documents the same way COISoftware reads a certificate. Once a vendor is approved and working, their bills start arriving, and invoice OCR software turns those PDFs into clean data for your accounting system. Verifying insurance is where the relationship starts, and getting it right protects everything that follows.