You must be 21+ to enter.

How to Tell if a THC Cart Is Real

September 2026
•
Matt Martinez
•
8 min read

A real cart can be traced. The code printed on your package appears on a lab report from a licensed laboratory, and checking that takes about a minute.

Heavy Hitters has been family-owned in California since 1996, and counterfeits of legitimate brands are a problem we live with rather than one we read about. So this page is written as a procedure you can run on any cart, ours included, in the order that actually tells you something.

Most advice on this starts with packaging. That turns out to be close to the least useful place to start.

‍

Key Takeaways

  • A licensed retailer is the strongest single signal, because the whole chain behind it is tracked.
  • A genuine production run leaves a laboratory record created by someone other than the seller.
  • Packaging tells are real but easy to copy, so treat them as supporting evidence.
  • How the oil looks and moves is the weakest signal of the four.
  • Counterfeits are unregulated and untested, and that is the whole of the risk.

The Short Version

Run these five checks in order. The ranking runs by how hard each one is to fake, which is the ranking worth having.

The five checks, strongest first

  1. The seller. Does this shop appear on the state's list of licensed retailers?
  2. The chain. Are a licensed manufacturer and distributor named on the carton?
  3. The paperwork. Does a laboratory report exist for this particular run of product?
  4. The carton. Warning label present, printing clean, identifier legible.
  5. The product. Does it behave like the thing the label says it is?

Start with where you bought it

Buy from a licensed retailer and most of this article stops mattering. California requires every cannabis retailer to hold a license from the Department of Cannabis Control, and licensed stores operate under rules that require products to be tested and labels to be accurate.

That single fact does more work than every visual tell combined. A counterfeit reaches you because something in the chain was unlicensed, so buying inside the licensed chain removes the problem at its source instead of asking you to detect it afterward.

The wrinkle is that unlicensed stores do not look unlicensed. The state warns plainly that some shops which appear legitimate are not, and shops without a license may sell untested product. Signage, a menu and a card reader are all easy enough to arrange, and none of them proves anything at all.

The check is free and takes seconds: the DCC publishes a lookup of licensed retailers, and a store either appears in it or does not. Do that once for wherever you shop and you rarely need to do it again.

What should the batch code match?

A genuine run of product leaves a trail outside its own packaging, and a counterfeit cannot manufacture that part. Somewhere there is a laboratory record of this particular production run, created by a business that is not the one selling it to you.

That independence is the whole mechanism. Testing in licensed cannabis happens per production run, commissioned from a laboratory that holds its own state license and puts its name on what it issues. The lab has a license to lose, so its record is worth more than anything printed on a carton.

Think about the direction of the effort. Reproducing artwork is cheap and gets cheaper every year. Standing up an independent, state-licensed testing relationship in order to sell counterfeits would cost more than the counterfeiting earns, which is why it is rare. A fake can imitate a carton perfectly and still have nothing standing behind it.

Two limits belong on this one. Plenty of legitimate brands do not publish their records openly, so paperwork you cannot reach is not evidence of anything, and treating it as evidence would condemn a lot of legitimate product. And a record covering a different production run describes somebody else's cart. Specificity is what makes it worth checking at all.

Packaging tells, and their limits

Everyone reaches for packaging first, and it is the weakest strong signal you have. Misspellings, blurry printing, a missing state warning label, no batch code anywhere on the box: all of these are real, and all of them point the right way when you find them.

The trouble is what happens when you do not find them. Counterfeit packaging has improved to the point where a good fake is visually indistinguishable from the real carton, printed on the same stock, with the same finish and the same warning text. Clean packaging is not evidence of anything. It only means whoever made it spent money.

So packaging works in one direction. A flaw is informative and its absence is not. Most guidance presents this backwards. Use it to rule things out, never to rule them in.

One tell survives better than the visual ones: the batch code should be physically present on the box and legible, because it is the thing the rest of the check depends on. A carton with no identifier anywhere cannot be verified even in principle. You can see how our own cartons are marked across the THC vape carts range.

Can you tell from the oil itself?

Partly, and less than you would hope. Appearance is the last check on the list because it is the one most easily explained away by things that have nothing to do with authenticity.

Color varies legitimately by extraction method and by age, so a darker cart is not automatically suspect. Viscosity varies by what is in it, which means a thick oil and a mobile one can both be entirely genuine. Even the classic advice about bubble movement runs into the same wall, because temperature changes it and a cold cart behaves differently from one that has been in a pocket. Two carts from the same batch can fail that test against each other.

What is worth noticing is a mismatch between what the label claims and what the product does. A cart sold as a solventless product that behaves nothing like one, or a package promising a specific cultivar that carries no particular aroma, is telling you something the printing did not. That is a comparison, not an observation, and comparisons are harder to fake.

Treat this section as a tiebreaker. If the first four checks passed, the oil is not going to overturn them, and if the first four failed, the oil does not need to. Our all-in-one vapes are built to behave consistently, which is what makes a mismatch noticeable in the first place.

What a licensed product carries

A legal cart arrives with a paper trail attached to it. Knowing what that trail looks like makes a gap in it obvious, which is more useful than memorizing the appearance of any particular fake.

On the carton you should find an identifier for the production run, the state warning, and the names of the licensed businesses that made and moved it. Those business licenses are public records, which means every name in that sequence is something a stranger can look up without asking anyone's permission.

The chain matters more than any single link. A licensed manufacturer, a licensed distributor and a licensed retailer each have something to lose, and each is recorded. Counterfeits exist precisely because they sit outside that structure, which is also why they carry no testing: there is no lab in the chain because there is no chain.

That is the real shape of the risk. A counterfeit carries danger because nobody checked it and nobody is accountable for it, not because of any single ingredient anyone can name. Every Heavy Hitters carton carries that full sequence, including the Ultra 2g all-in-one, for exactly this reason.

Frequently Asked Questions

Can a fake cart have real cannabis oil in it?

Yes, and this is why appearance-based checks disappoint people. A counterfeit can contain genuine extract and still be untested, which means nobody has confirmed what else is in it or how it was made. The problem with a fake is that the contents are unverified and no licensed party is accountable for them, whether or not the extract itself is genuine.

Does a QR code mean a cart is real?

Not on its own. A QR code is printed artwork and can point anywhere, including a page a counterfeiter controls. What matters is where it lands and whether the report it reaches carries a batch identifier matching your package and a named licensed laboratory. A code that opens a generic brand page, or one whose report covers a different batch, has told you nothing.

What does a batch number actually do?

It ties one specific production run to one specific laboratory report. Testing in licensed cannabis happens per batch, not per product line, so the number is what makes any test result mean something about the item in your hand. Without it, a report describes some product made at some point, which is not the same as describing yours.

Are dispensary carts always tested?

Products sold through licensed California retailers are required to be tested before sale, and licensed retailers operate under rules requiring accurate labeling. Buying inside the licensed chain is what buys you those rules. Shops operating without a license sit outside those requirements entirely, exactly the situation the testing rules exist to prevent.

What should I do with a cart I think is fake?

Stop using it and go back to where you bought it, if that was a licensed retailer, since they have a supply chain to trace and an incentive to trace it. If it came from an unlicensed source there is no chain to follow and no recourse. Reporting unlicensed sellers to the state is the route that actually changes anything.

Where to Go From Here

Run the five checks in order the next time you buy, and notice how quickly the first two settle it. Verify the shop once, match a code once, and the habit costs you almost nothing afterward. The store locator will point you at a licensed shop, and a budtender there can walk you through both in the time it takes to pay.

References

  1. What’s legal, California Department of Cannabis Control. Accessed August 19, 2026.
  2. Cannabis Unified License Search, California Department of Cannabis Control. Accessed August 21, 2026.

Related Articles

‍