Build or Buy Counterfeit Product Authentication on Shopify?
Counterfeit product authentication technology is a CUSTOMIZE: buy the scanner or the tag program, build the binding to Shopify. No authentication app exists on the App Store, where 50 Social Trust and Security listings were checked. Entrupy runs $139 to $1,049 per month by token volume (verified Sep 2026) and Certilogo publishes no price. Native Shopify inventory has no serial field, so the unit-to-order link is yours.
Your profile — see how the verdict shifts
- Confidence
- High — Checked the App Store's Social Trust and Security categories, 50 listings between them, and found nothing that verifies a physical item is genuine. Entrupy's Shopify handle returns a 404, so its device-plus-app workflow sits entirely off-platform. Entrupy is unusual in publishing self-serve tiers at all, from Petit through Grand with an Enterprise quote above. Certilogo's site is JavaScript-rendered and published no figures, and it deploys as a QR or NFC tag program at the manufacturing stage rather than as an install. Native Shopify inventory has no serial, lot or expiry fields, so nothing in the platform holds a per-unit identity either. The technology is genuinely worth buying; the link between a verified unit and a Shopify order does not exist anywhere and has to be built.
- Reference scenario
- $20M–$100M GMV · average unit price above $300 (illustrative) · active resale market · goods made to your own spec
- As of
- September 2026
Decision at a Glance
| Your profile | Verdict | Why |
|---|---|---|
| Average unit price under about $150 (illustrative) | WAIT | Per-unit authentication economics do not work at this price, whether the cost is a token or a tag. Spend the money on listing monitoring and takedowns, and revisit if a premium line launches. |
| Units of about $150–$1,000, made to your own spec (illustrative) | CUSTOMIZE | A tag applied at production is cheap per unit and useless without a record of which unit went to which order. The tag program is the purchase; the binding is the build. |
| Units above about $1,000 with an active resale market (illustrative) | CUSTOMIZE | Both lanes earn their keep here: tags going out at manufacture, and device authentication coming back in on returns and trade-ins. Resale value is the asset being defended, and it is worth real money. |
| You resell or accept trade-ins of goods you did not make | BUY | There is nothing to tag at a production stage you never controlled. Entrupy's device workflow is the whole answer, and the only build worth doing is recording its verdict against the item record. |
What Counterfeit product authentication technology Actually Drives
| Outcome | Impact | How it works |
|---|---|---|
| Revenue — indirect | High | A unit a resale buyer can verify holds its secondary-market price, and that resale value is part of what a customer pays a premium for at first purchase. |
| Customer experience | High | A buyer who can verify an item in seconds stops sending photographs to your support team and waiting days for a human judgment call. |
| Operational efficiency | Medium | An authentication step at intake replaces a judgment made by whoever happened to open the box, which is how inconsistent decisions reach customers. |
| Data & insight | Medium | Per-unit identity turns a scattering of fake reports into a traceable batch, supplier and channel, which is the difference between an anecdote and an action. |
Spend ceiling: Size the spend against unit price and resale exposure. Entrupy's entry tier works out near $5.56 per authentication on 25 monthly tokens (verified Sep 2026), which is trivial on a $1,200 handbag and absurd on a $60 shirt. A tag program prices per unit at manufacture, so the same arithmetic settles it.
What buying enables (top apps)
- + AI image-based authentication through a physical device, with tokens spending across bags and leather goods, footwear and apparel in any mix
- + Published self-serve pricing from $139/month, which is unusual in a category that normally quotes everything (verified Sep 2026)
- + Entrupy's own published claims of 99.86% accuracy and a five-minute turnaround per item
- + A connected-product tag program from Certilogo, applied at manufacture, for brands that control their own production
What building additionally unlocks
- + A per-unit identifier held in Shopify at all, since native inventory has no serial, lot or expiry fields
- + The binding between a unit and the order that shipped it, which is what makes a warranty or resale claim checkable
- + A verification page on your own domain rather than a vendor's, which is where a resale buyer will actually look
- + Fake reports traced to a batch, a supplier and a channel instead of accumulating as anecdotes in a support inbox
Find Your Verdict in 3 Questions
Do you manufacture the goods yourself, or to your own specification?
Yes: Go to question 2.
No: Your verdict: BUY. Entrupy's device workflow authenticates units you did not make, and there is nothing to tag at a production stage you never controlled.
Does a per-unit token or tag cost round to nothing against your unit price?
Yes: Go to question 3.
No: Your verdict: WAIT. Per-unit authentication economics do not work at this price; put the money into listing monitoring and takedowns instead.
Does an active resale market exist for your products?
Yes: Your verdict: CUSTOMIZE. Run a tag program at manufacture and build the unit-to-order binding at $15,000–$45,000 (Deploi estimate, illustrative).
No: Your verdict: CUSTOMIZE. Tags still protect warranty and returns, and the Shopify-side binding is the same build whether or not resale matters.
The TCC Scorecard — 12 Dimensions
TCC — Total Cost of Capability: what it actually costs to have this capability over three years, whichever way you get it. Each dimension is scored 0–5 for both paths. How we score →
| Dimension | Buy | Build | Why |
|---|---|---|---|
| Cost | |||
| Acquisition & implementation | A scanning device and a subscription start authenticating within days, while per-unit identity and the fulfillment binding run an estimated 6–10 weeks (Deploi estimate, illustrative). | ||
| Recurring fees | Tokens are consumed per authentication and tags cost per unit forever, while the built binding costs upkeep that does not scale with volume. | ||
| Maintenance & upgrades | Vendors maintain the models and the tag chemistry as counterfeits improve, which is genuinely not something a merchant should attempt. | ||
| Switching & exit | Authentication history sits in the vendor's system and tags already in the field are unchangeable, while a unit registry inside your own data survives a vendor change. | ||
| Risk | |||
| Vendor risk | Both vendors are established, though neither is on the App Store and one publishes no price at all, which limits how well you can compare them. | ||
| Security & compliance surface | A public verification endpoint is the new attack surface: an identifier format that validates predictably teaches a counterfeiter what to print. | ||
| Platform-deprecation exposure | Nothing here rests on a Shopify surface likely to sunset, and the binding uses metafields, metaobjects and fulfillment objects that are stable primitives. | ||
| Value | |||
| Fit to requirement | The vendor answers whether an item is genuine and never answers which order it shipped on, which is the question a warranty or resale claim actually asks. | ||
| Time to market | An intake authentication workflow runs this month, while a tag program has to wait for the next production run before a single unit carries one. | ||
| Performance & scale | Token and per-unit tag costs rise with every unit sold, while a unit registry costs the same at 5,000 units as at 500,000. | ||
| Data ownership & AI-readiness | A per-unit identity bound to orders turns fake reports into traceable batches, suppliers and channels rather than anecdotes in a support inbox. | ||
| Focus & opportunity cost | Authentication physics is exactly the work to buy, and the binding between a unit and an order is exactly the work nobody else can do for you. | ||
The App Landscape
| App | Status | Pricing | Best for |
|---|---|---|---|
| Entrupy | Live — Platform integration; no App Store listing. The Shopify handle for Entrupy returns a 404, so this is a device-plus-app workflow rather than a storefront install. AI image-based authentication through a physical scanning device, priced in tokens that spend across bags and leather goods, footwear and apparel in any mix. The published 99.86% accuracy and five-minute turnaround are Entrupy's own claims. | Petit $139/month or $1,499/year for 25 monthly or 300 yearly tokens; Moyen $599/month or $6,469/year for 125 monthly or 1,500 yearly tokens; Grand $1,049/month or $11,329/year for 250 monthly or 3,000 yearly tokens; Enterprise quote-based, with yearly plans saving 10% (verified Sep 2026) | Authenticating units you did not manufacture, at intake, resale or trade-in |
| Certilogo | Live — Platform integration; no App Store listing. Self-described as the leading connected product and authentication platform for fashion and luxury, deployed as a QR or NFC tag program at the manufacturing stage rather than as a Shopify install. Its site is JavaScript-rendered and published no figures, so a tag program has to be budgeted from a quote. | Pricing not listed; quote-based | Brands that manufacture their own goods and can add a tag during production |
| Serialization and product-tracking apps | Category — The nearest App Store category, and it is not this one. Serialization listings assign and track unit identifiers inside Shopify; none of them authenticates a physical item. A check across the Social Trust and Security categories covered 50 listings and found nothing that verifies an item is genuine. Useful for holding an identifier, useless for proving the object is real. | Ranges by listing (illustrative); most price by SKU or order volume | Holding a per-unit identifier once an authentication vendor has issued one |
| Unit identity binding and verification page (custom) | Build lane — The Shopify half nobody sells: native inventory has no serial, lot or expiry fields, so a per-unit identifier has to be modeled, bound to the order at fulfillment, and exposed on a verification page a customer or a resale buyer can check. | $15,000–$45,000 one-time plus upkeep (Deploi estimate, illustrative) | Any brand whose authentication vendor can prove an item is genuine but cannot say which order it shipped on |
The Build Path
- Model per-unit identity, because Shopify has none: Native inventory tracks quantity at a location and carries no serial, lot or expiry field. A unit registry as metaobjects, keyed by the tag or token identifier and referencing the variant, is the missing primitive. Decide early whether an identifier is public, since anything printed on a tag will be photographed and shared.
- Bind the unit to the order at fulfillment: The binding happens at the pick face, with a scan that attaches the identifier to the fulfillment line before the box closes. Warehouse process is the hard part, not the code: an unscanned unit is an unverifiable unit forever, and retrofitting the link after shipping is guesswork.
- Publish verification on your own domain: A verification page under your own URL, returning what the identifier is bound to rather than a bare genuine or fake, is what a resale buyer actually trusts. Rate-limit it, avoid sequential identifiers, and log every lookup, because the lookup pattern itself tells you where copies are circulating.
- Effort band
- $15,000–$45,000 for per-unit identity, the fulfillment binding and a verification page — Deploi estimate (illustrative); lands in the $25–75K contact-form band once warehouse scanning and a resale-facing surface are in scope
- Typical timeline
- 6–10 weeks, plus a production cycle before tagged units exist (Deploi estimate, illustrative)
- Maintenance, honestly
- ~15–20% of build cost per year (Deploi estimate): roughly $2,250–$9,000/yr (Deploi estimate, illustrative), mostly keeping the fulfillment scan reliable, rotating identifier formats, and watching the verification endpoint for scraping.
- What you own — and what you take on
- You own: the unit registry, the order binding, the verification surface and the lookup data that shows where copies circulate. You take on: a warehouse process change, and the discipline that an unscanned unit stays unverifiable for the rest of its life.
3-Year Total Cost of Capability
| Buy (app path) | Build (custom path) | |
|---|---|---|
| Year 0 (setup) | $8,000–$25,000 (device workflow setup and tag onboarding) | $15,000–$45,000 |
| Years 1–3 (recurring) | $21,600–$60,000 (subscription plus per-unit tag cost) | $6,750–$27,000 (upkeep) |
| 3-year total | ≈$29,600–$85,000 | ≈$21,750–$72,000 |
- † All figures illustrative samples for the reference scenario — not quotes, not verified pricing.
- † Buy column assumes Entrupy's mid tier for intake authentication plus an unquoted tag program, since Certilogo publishes no figures.
- † Build column covers per-unit identity modeling, the fulfillment-time binding and a customer verification page, plus annual upkeep; three-year horizon.
What the Sticker Price Hides
On the buy path
- — Tokens are consumed per authentication, so the real bill tracks volume rather than the headline monthly tier
- — Certilogo publishes no price at all, which means budgeting a tag program requires a sales cycle first
- — Neither vendor has an App Store listing, so every hour of Shopify-side integration is scope you write yourself
- — A tag added at manufacture does nothing for stock already in circulation, which is usually the stock being copied
On the build path
- — Native Shopify inventory has no serial, lot or expiry fields, so per-unit identity is modeling work before any binding exists
- — The binding depends on a scan at the pick face, and changing a warehouse process is harder than writing the code that consumes it
- — A verification endpoint that validates any well-formed identifier teaches counterfeiters exactly what to print
- — ~$2,250–$9,000/yr in upkeep (Deploi estimate, illustrative)
What Merchants Say
Brand teams describe the same unboxing moment: a genuine unit and a copy side by side, and nobody in the room able to name the difference with confidence.
The second recurring pattern lands in support: customers send photos of a suspected fake and expect a verdict, turning an authentication question into a service backlog nobody staffed for.
If You Change Your Mind Later
If you bought and outgrow it
Authentication history lives in the vendor's system, so ask what an export contains before volume builds up rather than at renewal. Tags already applied to units in the field cannot be changed at all, which makes a tag vendor a longer commitment than a subscription term suggests.
If you built and want out
Nothing strands. The unit registry, the order bindings and the verification page are your data on your domain, and they keep working through a change of authentication vendor. A new vendor's identifiers slot into the same registry, and the history of everything already shipped stays intact.
When This Answer Changes
We're watching for:
- ▸ Any authentication vendor shipping an actual Shopify app rather than an API and a device
- ▸ Shopify adding serial or lot fields to native inventory, which would remove most of the build
- ▸ A resale platform in your category requiring a verifiable tag, which turns this from optional into table stakes
Verdict change log:
No changes since first publication (September 2026).
Common Questions
Is there a Shopify app for product authentication?
No Shopify app authenticates physical products. A check across the Social Trust and Security categories covered 50 listings and turned up nothing that verifies an item is genuine (verified Sep 2026). Entrupy's Shopify handle returns a 404. Authentication is device, tag and API technology applied long before an order exists, so the App Store is the wrong place to look for it.
What does counterfeit authentication cost?
Entrupy publishes self-serve pricing across three tiers. Petit is $139/month or $1,499/year for 25 monthly tokens, Moyen is $599/month or $6,469/year for 125, and Grand is $1,049/month or $11,329/year for 250 (verified Sep 2026). Yearly plans save 10%, and tokens spend across bags, footwear and apparel in any mix. Certilogo publishes no pricing at all.
Can Shopify store a serial number for each unit?
Native Shopify inventory has no serial, lot or expiry fields. Holding a per-unit identifier takes modeling it yourself, usually as metaobjects, then binding that identifier to the order at fulfillment with a scan at the pick face. Budget $15,000 to $45,000 for the binding and a customer verification page (Deploi estimate, illustrative).
Your Next Steps
If you're going with CUSTOMIZE(matches your selected profile)
- Separate the two jobs before talking to anyone: proving goods you send out are real, and checking goods coming back in
- Price a tag program per unit against your actual gross margin, not against the vendor's monthly headline
- Model per-unit identity as metaobjects first, since Shopify has no serial field and everything else depends on that record
- Pilot the fulfillment scan on one product line before committing the warehouse, because process is the real constraint
- Publish verification on your own domain, rate-limited and logged, and watch the lookup pattern for where copies circulate
If you're going with BUY
- Match token volume to your real intake rate, since tokens are consumed per authentication rather than per month
- Confirm which categories the tokens cover before committing, because the mix across bags, footwear and apparel matters
- Record every verdict against the item record in your own system, so the authentication history is not only the vendor's
- Set an annual review, since accuracy claims and token pricing both move faster than a procurement cycle
Official Docs & Sources
- Metafields — Shopify Help Center
- Metaobjects — Shopify Help Center
- Add and update products — Shopify Help Center
Official documentation linked for verification — our verdicts and estimates are our own.
Related Decisions
Build or Buy Accessibility Regression Monitoring on Shopify?
AudioEye's Shopify listing is delisted and UserWay sits at 2.6★ on 10 reviews, so catching a theme-update regression is a pipeline job.
Build or Buy ADA Litigation Exposure Management on Shopify?
Shopify tests Dawn, Checkout and Admin, not your storefront. A widget is not the answer to a demand letter; a code-level audit, remediation and a dated log are.
Build or Buy a Checkout Terms Consent Checkbox on Shopify?
Shopify ships no native terms-of-service consent checkbox at checkout, so this is one of the few decisions here that is a clean, cheap buy.
Build or Buy Counterfeit and Impersonation Monitoring on Shopify?
One Shopify app scans for copycat stores (StoreLock, 9 reviews); Red Points is quote-only. Neither enforces. Build the evidence ledger, intake and seller directory.
Shopify Theme Sections: Buy Premium or Build a Section Library?
A custom theme section library wins at mid-market campaign tempo; below the floor, a premium theme is the right call.
Ready to connect a verified unit to the order it shipped on?
Buy the scanner or the tag program. What no vendor gives you is the Shopify side: a per-unit identity Shopify has no field for, bound to the order at fulfillment, and a verification page on your own domain that a resale buyer will actually trust. That part is what we build.
Contact us todayVerdict scored for the reference scenario above. Estimates are not quotes; app pricing carries its verification date and gets re-verified quarterly. Full scoring anchors: see the TCC methodology.
Read how we score these decisions (the TCC Framework). No affiliate links, no paid placement — no app vendor pays to appear here.