Identification is not authentication
A barcode can identify a product record. That does not, on its own, establish that the physical object carrying it is genuine. GS1’s guidance explains that a counterfeiter may copy a QR code, even when the linked data is digitally signed.
What a digital signature adds
Digital signatures can help verify the origin and integrity of data. The remaining challenge is connecting those verified data to the specific physical product. Item-level identifiers and controls against copying can play a part, but their value depends on the complete system.
Where does the scan take you?
GS1 cautions against relying solely on verification software or a page recommended by the barcode itself. A convincing-looking destination can be part of the deception. Start from an independently verified brand website when looking for the correct authentication method.
A better question for brands
Instead of asking only whether a product has a code, ask what happens when that code is copied. The answer reveals more about the protection offered than the presence of the code alone.