Chapter Two: What Is Counterfeiting? Beyond Imitating Appearances

Documented
Back to The Need to Prevent Counterfeiting

Source status: approved edition

Place two passports on a table.

The first was made from scratch in an unauthorized workshop. Its paper, printing, photograph, number, and stamp are imitations. The second was genuinely issued by an official body, but the holder's photograph has been replaced and some of the information altered.

Which one is forged?

Both, but not in the same way. In the first case, the forger has built a false identity from nothing. In the second, they have seized the credibility of a genuine document and changed only the part that stood in the way of misuse. The second document may even be more convincing, because most of its components really are genuine.

Counterfeiting does not always begin with nothing. Sometimes it borrows from the original, removes part of it, substitutes something inside it, or breaks its connection to its true owner and origin.

The packaging may be genuine while the contents have been changed. A serial number may be valid but attached to a product with which it has no connection. A document may be genuine except for an altered date, amount, photograph, or name. Sometimes there is no technical masterpiece at all: with a few confident sentences, the seller accomplishes what the printer and software could not quite finish.

“The export packaging is different.”

“You don't need an invoice; I guarantee it myself.”

“The code hasn't been entered into the system yet.”

“It's cheaper because it came direct.”

The counterfeiter does not always construct an entire false world. A small piece of falsehood placed at precisely the point on which our decision depends is enough.

Counterfeiting Is More Than Making Something That Looks Like the Original

In the public imagination, counterfeiting means making something that resembles the original from a distance: a banknote in the same colors, a part bearing the same mark, a certificate on the same letterhead, or packaging with the same design. This picture is not wrong, but it shows only the outside of the problem.

Behind that appearance lie other forms of deception: altering an original, replacing contents, reusing genuine components, manipulating data, falsifying origin, appropriating authority, imitating security features, and even constructing stories that close off questions and examination.

In some counterfeits, everything is false. In others, the falsehood is hidden among genuine components. Sometimes the product, document, and data are all real, but the relationship between them is not.

That is why counterfeiting cannot be defined by sight alone.

In its Doc 9303 technical series on machine-readable travel documents, the International Civil Aviation Organization, or ICAO, does not limit the threat to manufacturing an entirely forged passport. Developed through an intergovernmental process involving specialist groups in documents, border control, biometrics, and security technologies, the series also treats photograph substitution, data alteration, page substitution, the use of genuine document components, and tampering with electronic components as forms of attack on documents.[1]

The importance of this example extends beyond passports. Its lesson applies across authenticity-related fields: the object may be genuine while the link between object, data, and holder has been falsified.

Before Classification, an Essential Boundary

Not everything uncertain, weak, poor in quality, or unauthorized is counterfeit.

A medicine may fall short of the required quality because of poor manufacturing or improper storage. A product may enter a market without the necessary authorization. A part may be genuine but supplied through a route that provides no official warranty or accountability. These situations can be dangerous, illegal, or harmful, but they are not all necessarily counterfeiting.

For this reason, the World Health Organization distinguishes between substandard, unregistered or unlicensed, and falsified medical products. These definitions developed through a mechanism among member states to protect public health. In the WHO framework, a falsified product is one that deliberately and fraudulently misrepresents its identity, composition, or source.[2]

The decisive word is “deliberately.”

A typing error is not forgery. Accidental damage is not counterfeiting. Weak quality control, however dangerous, is not in itself counterfeiting. Counterfeiting arises when reality is fabricated, altered, or concealed with the intention of influencing someone else's decision.

Precise terminology does not mean taking misconduct lightly. If we call every irregularity counterfeiting, the word eventually stretches so far that it no longer describes anything precisely. An anti-counterfeiting system that cannot distinguish between error, poor quality, violations, fraud, and counterfeiting will likewise generate suspicion rather than identify risk.

This Book's Operational Definition

Legal and specialist definitions are usually written for a particular problem. For example, the definition of “counterfeit trademark goods” in the TRIPS Agreement emerged from government negotiations during the Uruguay Round and forms part of the World Trade Organization's intellectual property framework. It was written primarily for border measures and action against unauthorized use of trademarks.[3]

That definition matters to customs authorities, trademark owners, and intellectual property disputes, but it does not cover every form of counterfeiting. Altering the date of a genuine document, falsifying a product's origin, or manipulating an identifier's data may seriously attack authenticity without trademark imitation being central to the act.

The definition this book needs must be broader than a purely customs-based definition, but not so broad that it calls every error or violation counterfeiting.

Counterfeiting is the deliberate and deceptive creation, alteration, substitution, concealment, or representation of a product, document, identity, data, origin, or authority in a way that leads the recipient to regard it as more authentic, credible, lawful, safe, or trustworthy than it actually is.

Three elements matter in this definition. First, some reality has been created, altered, concealed, or displaced. Second, this has been done deliberately, with intent to deceive. Third, the deception is intended to produce a real decision.

If one of these elements is absent, we may be dealing with an error, quality defect, reconstruction, teaching specimen, or another violation, rather than necessarily with counterfeiting.

A model banknote used in a classroom and clearly distinguishable from real money is a simulation, but it does not seek to appropriate the credibility of currency. A reconstructed historical document, if identified as a reconstruction, is not passing itself off as an original either.

Resemblance alone is not counterfeiting. It enters the realm of counterfeiting when used to appropriate the credibility of something else.

A Classification of Counterfeiting

The classification below is more than a list. Each category represents a different kind of attack and calls for a different response. A tool suited to countering the manufacture of an entirely counterfeit product will not necessarily work against data manipulation or falsification of origin.

1. Complete Counterfeiting: Constructing a False Identity

The most familiar form involves making something that was never genuine but presents itself as genuine: a banknote, certificate, identity card, part, medicine package, or product entering the market under a reputable manufacturer's name.

In this attack, the counterfeiter must reconstruct the original's visual language: colors, dimensions, fonts, logos, packaging, texture, numbers, and sometimes even common defects in the genuine product are imitated. The more recipients rely on appearance, the more the counterfeiter invests in resemblance.

This is the picture that comes to most people's minds when they hear the word counterfeiting. An accurate picture, but an incomplete one.

In complete counterfeiting, almost every component of the identity is false. Countermeasures therefore tend to focus on detecting differences between original and imitation: materials, printing, structure, covert features, technical testing, or comparison with an official reference.

The problem begins when we regard that same response as sufficient for every form of counterfeiting.

2. Counterfeiting by Alteration: Tampering with an Original

Here the product or document was originally genuine, but one of its defining components has been changed.

The photograph on a card is replaced. The amount on a guarantee is increased. An expiry date is extended. Weight, fineness, the holder's name, or a test result is manipulated. A page is removed from a genuine document and another inserted in its place.

Most components remain genuine, which makes detection harder. The forger does not have to create credibility: it already exists. They merely redirect it.

Sometimes a document is ninety-nine percent genuine, yet the remaining one percent of falsehood changes its entire meaning.

Focusing solely on “genuine material or printing” is not enough here. Document integrity, data consistency, change history, and the links between information must be examined. A genuine document may have become an instrument of deception.

3. Counterfeiting by Substitution: Genuine Container, False Contents

Sometimes the packaging is genuine and its contents have been replaced.

A genuine product's bottle, box, sealed packaging, or casing is collected and filled with something else. A diluted product, used part, cheaper item, or different medicine is supplied in a credible wrapper.

For people, packaging is more than a covering: it is part of a product's identity. When the packaging is real, we are less likely to wonder whether its occupant has changed. The counterfeiter exploits precisely this trust. They bypass the hardest part of the job, creating thoroughly convincing packaging, and use something the market already trusts.

In this form of counterfeiting, the original is not necessarily proof of innocence. Sometimes it is an unwitting accomplice to deception.

Countermeasures must therefore examine not only packaging authenticity but also seal integrity, signs of opening, the relationship between packaging and contents, and the storage and distribution route.

4. Composite Counterfeiting: Genuine Components in a False Identity

A label, hologram, chip, serial number, or part of a genuine document is removed and used on another product. Sometimes several genuine items are sacrificed so their components can be attached to a larger number of illegitimate products.

The security feature itself may not be counterfeit. The hologram is real, but it is on the wrong product. The serial number is valid, but has been repeated many times. The chip is genuine, but the data, physical document, or holder has no connection to it.

The right question is no longer “Is this feature genuine?” It is “Does this feature belong to this product, this document, and this transaction?”

Authenticity of a component does not guarantee authenticity of the whole. One genuine brick does not make a genuine house.

This form of counterfeiting shows that a security feature must do more than resist copying. It must have a robust, verifiable connection to the object, the data, and the context of use.

5. Data Falsification: When the Lie Lives in the System

Much of the identity of today's products and documents no longer resides solely on paper, metal, or plastic. It is stored in data. Serial numbers, ownership history, fineness, weight, warranty status, test results, production dates, and the chain of movements may matter more than physical appearance.

In such an environment, the counterfeiter may have little need for a professional printer. A user account, database access, or a page resembling an official portal may be worth more.

A record is created with no real event behind it. A valid number is assigned to a different product. An “unused” status is reactivated. A fake page opens on a phone with all the composure of an administrative office and announces, “Authenticity confirmed.”

Sometimes that green message is more dangerous than a gleaming hologram. At least a hologram is only a signal. A fake page may act as witness and judge, then deliver the final verdict as well.

If the data's origin, the accountable authority, and the identifier's connection to the real product are unclear, being digital adds nothing to credibility. An electronic lie is still a lie. It just has a backlight.

6. Falsifying Origin and Authority: When the Relationship Is False

Sometimes the product itself exists and may not even be of poor quality. What has been falsified is its connection to an origin or a source of credibility.

A product is attributed to a factory, country, mine, or laboratory that played no part in producing or approving it. A seller presents themselves as an official representative. Someone speaks under a title, qualification, or authority they do not possess.

The object is not necessarily an imitation here. The attribution is false: the product to the manufacturer, the document to the issuer, the person to the authority, or the result to the laboratory.

Much of our trust is placed not in things themselves but in the person or institution behind them. The same part means something different when a reputable manufacturer takes responsibility for it. The same sheet of paper carries different weight when an independent laboratory has issued it.

Falsifying origin steals that backing. Falsifying authority makes a person or organization appear more credible and entitled to make decisions than they actually are.

7. Counterfeiting Security Tools: When Deception Dresses as the Referee

The product is suspicious, but it has an authenticity label. The document is doubtful, but it bears an embossed stamp. The seller is unknown, but a verification page shows that everything is official.

In this attack, the detection tool itself is part of the deception. The counterfeiter does not merely produce a false answer: they also build a device that confirms their own answer.

Deception has put on the referee's uniform.

The customer doubts the product, scans the code, and a fake system confidently declares that authenticity has been confirmed. Here the cotton-stuffed champion of anti-counterfeiting returns to the arena: it has thrust out its chest, awarded itself a medal, and written the result of the match.

The irony is bitter. A tool that should prompt questions silences them. The appearance of security makes the customer ask less, and the counterfeiter profits from that silence.

A real solution must examine the signal itself, the verification authority, the data route, and the response to a warning together. Otherwise, the cotton-stuffed champion has merely changed clothes.

8. Fabricating the Story: When Words Take the Place of Evidence

Not every counterfeit requires advanced technical skill. Sometimes the product is unconvincing, and the seller's story rescues it.

Why doesn't the code work? The product is new.

Why is the price so low? It came direct.

Why isn't an invoice issued? That costs extra.

Why is the packaging different? It's an export order.

Any of these explanations might be true in a real situation. The problem begins when a story replaces evidence and closes off examination.

A fabricated story usually explains precisely the defect that, left unanswered, would stop the transaction. Verbal confidence fills the gap between what is visible and what must be proved.

The counterfeiter's most important tool here is an understanding of human behavior: haste, fear of missing an opportunity, respect for a title, trust in familiarity, hope of profit, and sometimes embarrassment about asking questions.

Sometimes a single “Trust me” accomplishes what several layers of printing and packaging cannot.

Why Does This Classification Matter?

Classifying counterfeiting is not just a way to organize words. Each type of attack targets a different weakness.

Complete counterfeiting works through visual resemblance. Counterfeiting by alteration exploits the credibility of an original. Substitution changes the contents. Composite counterfeiting connects genuine components to a false identity. Data falsification targets systems and records. Falsifying origin steals the relationship with a source of credibility. Counterfeiting security tools compromises the detection process itself. Fabricating the story exploits human behavior and psychology.

One solution cannot control all these attacks equally well.

A design that is difficult to copy does not stop data manipulation. Tamper-evident packaging does not resolve a seller's false claim of authority. A verification system also sees only part of the truth if the identifier can be detached from the product.

ISO 22380 starts from this same logic. The standard was developed by the international technical committee ISO/TC 292, with experts participating through the national standards bodies of different countries. ISO is an international, nongovernmental organization with its secretariat in Geneva, and its standards are voluntary unless made binding by law or contract. ISO 22380 is neither criminal law nor a comprehensive definition of counterfeiting. It offers guidance on identifying types of product fraud, potential perpetrators, losses, and countermeasures.[4]

What matters to this book is not the standard's number, but the questions it asks:

Who might attack? Which part is valuable to them? At what stage does the lie enter the chain? Is the damage purely financial, or does it also affect safety and reputation? Which action is proportionate to the actual risk?

These questions draw us away from the temptation to buy a ready-made tool. First we must know what kind of counterfeiting we face; then we can decide on a solution.

Not Every Unclear Transaction Is Counterfeiting

A clear classification has another benefit: it prevents hasty accusations.

An unusual price, incomplete invoice, unidentifiable seller, unverifiable identifier, or contradictory explanation is a warning sign. None, by itself, proves counterfeiting. These are reasons to stop, ask questions, and examine further, not final verdicts.

A product may be genuine yet supplied outside official channels. The transaction may have problems with warranty, tax, storage conditions, or follow-up, but the product itself is not necessarily counterfeit.

In the gold market, too, a disagreement over workmanship charges or buyback conditions may amount to an unfair transaction or a trade violation. Counterfeiting becomes an issue when fineness, weight, origin, identity, documentation, or another characteristic has deliberately been misrepresented.

Responsible prevention must be sensitive to warning signs while distinguishing between error, poor quality, violations, fraud, and counterfeiting. Otherwise, the anti-counterfeiting tool itself becomes a suspicion-generating machine: one that accuses everyone until no one takes it seriously.

What Does the Counterfeiter Ultimately Make?

A counterfeiter may make banknotes, certificates, packages, labels, numbers, or stories. Yet none of these is the final product.

The final product is a wrong decision based on manipulated reality.

Someone buys something they would not have bought had they known the truth. They accept a document they would have rejected had its origin been clear. They take a medicine, install a part, entrust a responsibility, or retain an asset that lacks its claimed credibility.

Counterfeiting attacks the product or document, but its ultimate target is human judgment.

Defining counterfeiting is not wordplay. The definition sets the boundaries of the field. If we treat it solely as imitating appearances, we overlook data manipulation, falsified origin, reuse of genuine components, false authority, and the role of the story. If we call every error and irregularity counterfeiting, we replace analysis with suspicion.

A counterfeit is not always false through and through. Sometimes most of its components are genuine, and the only false part is the very thing on which our trust rests.

That is what makes prevention difficult—and necessary.