Quick answer: check a vape only through the manufacturer’s exact official domain. Find the security label on the package, type or scan the code there, compare the result with the exact model and packaging in front of you, and keep the receipt and photos. A valid result is useful evidence, but it does not prove that the product is safe, FDA-authorized, correctly notified for every market, or unchanged after it left the factory.
If the code is invalid, has already been checked unexpectedly, opens a look-alike website, or conflicts with the product and seller details, stop and contact the retailer and manufacturer before use. Do not open, puncture, charge, or dismantle a suspicious device to investigate it.
How to check whether a vape is real
- Identify the exact product. Record the brand, model, flavour or variant, nicotine label, market version, batch or lot markings, seller and purchase date. A code result is hard to interpret when the product identity is incomplete.
- Find the manufacturer’s official domain yourself. Use the domain printed in an official manual or reached from the brand’s established homepage. Avoid sponsored search ads, retailer-hosted checkers and domains that add words, hyphens or unusual endings to the brand name.
- Inspect the security label before scratching. Look for damage, replacement adhesive, mismatched print, a missing scratch layer or a code area that appears copied. Packaging appearance is only a warning signal, not a verdict.
- Check the destination before entering a code. A QR code can open any URL. Read the destination domain before submitting a serial number or other information. Leave the page if it is not the manufacturer’s exact official domain.
- Submit the code and record the result. Save the date, official URL, screenshot, code type, batch details, seller and receipt. Do not publish the full security code because another person may reuse it.
- Compare the result with the physical product. A successful lookup should still make sense alongside the exact model, package version, label position and seller documentation. A copied genuine code can be placed on another box.
- Escalate inconsistencies. Keep the product unused, retain the packaging and purchase record, and contact the seller and the manufacturer’s official support channel. Follow the manufacturer’s reporting instructions rather than relying on comments, marketplaces or social accounts.
| Check | Useful evidence | What it cannot prove |
|---|---|---|
| Official-domain code result | The submitted code exists in the brand’s system and the returned status can be recorded | Safety, FDA authorization, UK notification, or that the code was not copied |
| Package and label match | The box, model, variant, warnings and security-label format are internally consistent | What is inside the device or whether every component is original |
| Receipt and seller record | Where and when the product entered the buyer’s or retailer’s chain | That the seller is authorized unless the manufacturer confirms it |
| Batch or lot identifier | A route for support, recall matching and supplier follow-up | Product-wide performance or compliance across other lots and markets |
| Manufacturer support response | A first-party escalation record tied to the code and product photos | Independent laboratory findings or legal advice |
Official verification examples
Brands use different labels and code systems. The examples below show why a universal “vape checker” is less reliable than starting from the manufacturer’s own domain.
| Brand example | Official workflow reviewed | Reader caution |
|---|---|---|
| GEEK BAR | geekbar.com security-code page instructs users to locate and scratch the authentication label, then enter the code. Its current page says each code can be verified once. | An unexpected “already queried” or invalid result needs support follow-up. Confirm the domain is exactly geekbar.com. |
| Vaporesso | Vaporesso’s official product-authenticity page documents multiple security-label generations, 12- and 14-digit codes, visual label checks and QR verification. | Code length and label design depend on the generation. Read the destination domain before submitting a code. |
These examples are not endorsements or a complete brand directory. Verification systems can change, and a brand may use different labels by product family, date or market. Re-enter through the brand homepage when a saved verification link looks outdated.
How to interpret common results
- Valid or successful: useful supporting evidence. Still match the exact product, label, batch, seller and market version because codes can be copied.
- Invalid: recheck transcription and the official domain once. If it remains invalid, keep the product unused and contact the retailer and brand.
- Already queried: this may be normal if you or the retailer checked it earlier, but an unexpected prior check can also indicate code reuse. Record the message and ask the manufacturer to interpret it.
- Page not found or checker unavailable: return to the brand homepage or official support page. Do not move to a third-party checker simply because it ranks in search.
- QR opens another domain: do not enter information. Navigate to the official site manually and locate its verification route.
Authenticity, authorization and notification are different checks
An authenticity check asks whether the physical product and its code appear connected to the manufacturer. It does not answer whether that exact product is authorized for sale in the United States or notified for a UK market. For the US regulatory task, use VapeRisk’s FDA-authorized vapes verification guide. For packaging and product identifiers, see How to Read a Vape Product Label.
A genuine manufacturer product can still be the wrong variant for a market, sold through an unsupported channel, damaged, recalled or unsupported by the legal record a retailer needs. Keep authenticity as one evidence layer rather than a universal quality badge.
Retailer evidence to keep
- Supplier legal name, contact details and invoice.
- Exact brand, model, variant, nicotine label and market version.
- Batch, lot, serial or security-label type without exposing the full public code.
- Photos of all package faces, warnings, seals and product identifiers.
- The official verification URL, date, screenshot and returned status.
- Authorization or notification evidence kept separately from authenticity.
- Manufacturer and supplier correspondence about any mismatch.
- A recheck date and a route for complaints, recalls or counterfeit reports.
Use the full Vape Retailer Intake File to keep these records together. Operators reviewing age assurance, product evidence and related service categories can use VapeRisk’s Compliance & Market owner. Neither page certifies a supplier or replaces jurisdiction-specific professional advice.
When the product itself looks unsafe
Do not charge or use a product that is swollen, leaking, unusually hot, visibly damaged or missing important package information while authenticity is being resolved. Keep it away from heat and from children, do not puncture or dismantle it, and follow the retailer, manufacturer and local disposal guidance. The Vape Battery Safety checklist covers basic warning signs; it cannot diagnose an internal defect.
Frequently asked questions
How do I check if my vape is real online?
Navigate to the manufacturer’s exact official domain, find its product-verification page, enter the package security code there, and compare the result with the exact model, label and seller record. Do not use a retailer or generic third-party checker.
Does a valid security code prove a vape is genuine?
It is useful evidence, but not complete proof. A genuine code can be copied onto another package, so also compare the model, label format, batch, seller, receipt and manufacturer guidance.
What does “code already checked” mean?
It may mean you or someone in the supply chain checked the code earlier, or that the code was copied and reused. Record the exact message and ask the manufacturer to interpret it; do not treat the message alone as a final verdict.
Is it safe to scan the QR code on a vape box?
Read the destination URL before opening it or entering information. A QR code can point to a look-alike or unrelated domain. When in doubt, type the manufacturer’s official domain manually and find its verification page there.
Does genuine mean FDA-authorized or legal in the UK?
No. Authenticity, FDA authorization and UK notification are different questions. Check the exact product against the relevant official regulatory source for the market instead of treating a security code as a compliance badge.
What should I do with a suspected counterfeit vape?
Keep it unused, retain the box, receipt and seller details, photograph the identifiers without publishing the full code, and contact the retailer and manufacturer’s official support or counterfeit-reporting channel. Do not dismantle the device to investigate it.
Sources and evidence boundary
- GEEK BAR official product verification
- GEEK BAR official support FAQ
- Vaporesso official product-authenticity page
Source review: 15 July 2026. This guide explains an evidence workflow; it does not authenticate a reader’s product, certify a seller, provide medical or legal advice, or claim that a successful code lookup proves safety, authorization, notification or market compliance. For broader evidence limits, see How to Read a Vape Lab Report.