Run these five checks in order. The ranking runs by how hard each one is to fake, which is the ranking worth having.
The five checks, strongest first
- The seller. Does this shop appear on the state's list of licensed retailers?
- The chain. Are a licensed manufacturer and distributor named on the carton?
- The paperwork. Does a laboratory report exist for this particular run of product?
- The carton. Warning label present, printing clean, identifier legible.
- The product. Does it behave like the thing the label says it is?
Start with where you bought it
Buy from a licensed retailer and most of this article stops mattering. California requires every cannabis retailer to hold a license from the Department of Cannabis Control, and licensed stores operate under rules that require products to be tested and labels to be accurate.
That single fact does more work than every visual tell combined. A counterfeit reaches you because something in the chain was unlicensed, so buying inside the licensed chain removes the problem at its source instead of asking you to detect it afterward.
The wrinkle is that unlicensed stores do not look unlicensed. The state warns plainly that some shops which appear legitimate are not, and shops without a license may sell untested product. Signage, a menu and a card reader are all easy enough to arrange, and none of them proves anything at all.
The check is free and takes seconds: the DCC publishes a lookup of licensed retailers, and a store either appears in it or does not. Do that once for wherever you shop and you rarely need to do it again.
What should the batch code match?
A genuine run of product leaves a trail outside its own packaging, and a counterfeit cannot manufacture that part. Somewhere there is a laboratory record of this particular production run, created by a business that is not the one selling it to you.
That independence is the whole mechanism. Testing in licensed cannabis happens per production run, commissioned from a laboratory that holds its own state license and puts its name on what it issues. The lab has a license to lose, so its record is worth more than anything printed on a carton.
Think about the direction of the effort. Reproducing artwork is cheap and gets cheaper every year. Standing up an independent, state-licensed testing relationship in order to sell counterfeits would cost more than the counterfeiting earns, which is why it is rare. A fake can imitate a carton perfectly and still have nothing standing behind it.
Two limits belong on this one. Plenty of legitimate brands do not publish their records openly, so paperwork you cannot reach is not evidence of anything, and treating it as evidence would condemn a lot of legitimate product. And a record covering a different production run describes somebody else's cart. Specificity is what makes it worth checking at all.
Packaging tells, and their limits
Everyone reaches for packaging first, and it is the weakest strong signal you have. Misspellings, blurry printing, a missing state warning label, no batch code anywhere on the box: all of these are real, and all of them point the right way when you find them.
The trouble is what happens when you do not find them. Counterfeit packaging has improved to the point where a good fake is visually indistinguishable from the real carton, printed on the same stock, with the same finish and the same warning text. Clean packaging is not evidence of anything. It only means whoever made it spent money.
So packaging works in one direction. A flaw is informative and its absence is not. Most guidance presents this backwards. Use it to rule things out, never to rule them in.
One tell survives better than the visual ones: the batch code should be physically present on the box and legible, because it is the thing the rest of the check depends on. A carton with no identifier anywhere cannot be verified even in principle. You can see how our own cartons are marked across the THC vape carts range.
Can you tell from the oil itself?
Partly, and less than you would hope. Appearance is the last check on the list because it is the one most easily explained away by things that have nothing to do with authenticity.
Color varies legitimately by extraction method and by age, so a darker cart is not automatically suspect. Viscosity varies by what is in it, which means a thick oil and a mobile one can both be entirely genuine. Even the classic advice about bubble movement runs into the same wall, because temperature changes it and a cold cart behaves differently from one that has been in a pocket. Two carts from the same batch can fail that test against each other.
What is worth noticing is a mismatch between what the label claims and what the product does. A cart sold as a solventless product that behaves nothing like one, or a package promising a specific cultivar that carries no particular aroma, is telling you something the printing did not. That is a comparison, not an observation, and comparisons are harder to fake.
Treat this section as a tiebreaker. If the first four checks passed, the oil is not going to overturn them, and if the first four failed, the oil does not need to. Our all-in-one vapes are built to behave consistently, which is what makes a mismatch noticeable in the first place.
What a licensed product carries
A legal cart arrives with a paper trail attached to it. Knowing what that trail looks like makes a gap in it obvious, which is more useful than memorizing the appearance of any particular fake.
On the carton you should find an identifier for the production run, the state warning, and the names of the licensed businesses that made and moved it. Those business licenses are public records, which means every name in that sequence is something a stranger can look up without asking anyone's permission.
The chain matters more than any single link. A licensed manufacturer, a licensed distributor and a licensed retailer each have something to lose, and each is recorded. Counterfeits exist precisely because they sit outside that structure, which is also why they carry no testing: there is no lab in the chain because there is no chain.
That is the real shape of the risk. A counterfeit carries danger because nobody checked it and nobody is accountable for it, not because of any single ingredient anyone can name. Every Heavy Hitters carton carries that full sequence, including the Ultra 2g all-in-one, for exactly this reason.