Three Things Have to Be True for Your Medication to Be Counterfeited. You Control One.
Here is an uncomfortable way to think about your anti-counterfeiting program. Every hologram, every security ink, every tamper-evident seal, every printed code you have ever added to a pack is, from the counterfeiter’s side of the table, a specification document. It tells them precisely what they need to reproduce in order to be believed. You wrote the acceptance criteria and then published them on every carton you shipped.
That is not an argument for doing nothing. It is an argument that the pharmaceutical industry has spent forty years and an enormous amount of money playing a game whose rules guarantee it will keep losing ground, and that the way out is not a better feature. It is a different model entirely.
The numbers say the losing is real. The Pharmaceutical Security Institute recorded 2,857 distinct medicines counterfeited, diverted, or stolen in 2025, an eighteen percent increase on the previous year, with criminal groups targeting 756 medicines across sixteen therapeutic areas. In May 2026, an INTERPOL-coordinated operation across ninety countries seized 6.42 million doses of unapproved and counterfeit pharmaceuticals worth USD 15.5 million and shut down roughly 5,700 websites and social media channels selling them. Europol’s Operation SHIELD VI produced 3,354 prosecutions and EUR 33 million in seizures across thirty countries. Enforcement is working harder than it ever has, and the problem is still growing.
So the question worth asking is not how counterfeiters are getting better. It is why the defenses keep failing in the same way.
Why pharmaceutical crime happens at all
In 1979, criminologists Lawrence Cohen and Marcus Felson published an argument that changed how crime prevention is understood. Crime, they said, does not require an increase in criminality. It requires three conditions to converge in the same place at the same time: a motivated offender, a suitable target, and the absence of a capable guardian. Remove any one and the crime does not happen, no matter how motivated the offender is.
Applied to pharmaceutical brand protection, the framework is unusually clarifying, because it sorts your options into things you can change and things you cannot.
The motivated offender is fixed. Counterfeit pharmaceutical operations are organized, financed, and technologically capable. In July 2026 alone, Indian enforcement agencies raided a licensed-looking facility in Bazpur that was manufacturing counterfeit medicines under the names of Sun Pharma, Macleods, Intas, and Steadmed, and recovered packaging machinery, wrappers, and government-issued excise holograms on the premises. Days later, another operation in Dehradun turned up an Alu-Alu packing machine, a strip machine, an inkjet belt printer, and printed aluminum foil and master cartons for major brands. These are not people scraping labels off bottles in a garage. They are production lines. No brand owner is going to reduce the global supply of them.
The suitable target is also fixed, and this is where it gets genuinely awkward. A suitable target is something valuable, portable, in demand, and accessible. Every medicine you sell qualifies, and the better it sells the more qualified it becomes. GLP-1 therapies are the clearest illustration in living memory: a category so commercially successful that it created its own counterfeit industry within a couple of years. You cannot make your product less valuable to fix this. Commercial success and counterfeit exposure are the same curve.
Which leaves one condition. Guardianship. The presence of something that makes the crime harder to complete or more likely to be caught. It is the only side of the triangle a pharmaceutical company actually controls, which means every budget line and every hour your brand protection function spends is, in effect, spent there. That makes it worth being brutally honest about how well it has been spent.
The specification problem
Physical security features share a structural flaw that no amount of engineering fixes. They work by adding something to the package that is supposedly hard to reproduce. Hard is not impossible, and the history of the category is a history of features being replicated within months of launch. The Bazpur raid makes the point more bluntly than any vendor slide could: official excise holograms, the kind meant to signal government verification, were sitting in a counterfeit manufacturing facility alongside the packaging machinery.
When a security feature is replicated, it does not simply stop working. It starts working for the other side. A pharmacist trained to check for a hologram, who finds a hologram, concludes the product is genuine. The guardian has not gone missing. It has been impersonated, and the impersonation is more dangerous than the absence would have been, because it converts scrutiny into false confidence.
There is an economic version of the same trap. Added features are priced per unit. Every hologram, every security label, every microtext printed, every serialized code is a cost that scales with volume, forever, on every pack you ship, in every market you enter. The counterfeiter’s cost of copying that feature does not scale the same way. They pay once to solve it and then reproduce it as cheaply as you do. You are buying protection on a per-unit meter against an adversary who bought the answer outright.
What a serial number actually proves
Serialization deserves a more careful hearing than it usually gets from anti-counterfeiting vendors, ourselves included. Track and trace infrastructure has genuinely improved supply chain visibility, and DSCSA and the EU Falsified Medicines Directive have made diversion meaningfully harder to conceal. Serialization is not a failure and it is not going away.
But it is worth being precise about what a serial number proves. A code proves that a code exists in a database. It does not prove that the physical object carrying it came out of your plant. Codes can be duplicated, harvested from discarded packaging, or printed onto a repackaged pack holding something else entirely.
In April 2025, the FDA seized counterfeit Ozempic that had reached the legitimate United States supply chain carrying an authentic lot number, PAR0362, paired with a counterfeit serial number. In December 2025, the agency seized more counterfeit Ozempic, again inside the legitimate supply chain, this time labeled with lot number PAR1229, which was itself an entirely authentic lot number. The way to tell the fake from the real product was not the code. It was the position of the EXP/LOT text on the pen label, which sat to the left of the expiry date on the counterfeit and above it on the genuine article.
Read that again, because it is the whole argument in one case study. The most heavily serialized, most tightly regulated pharmaceutical supply chain in the world, running a product from one of the most sophisticated manufacturers in the industry, and the distinguishing feature was print layout. Millimeters of typography. Not the code. The printing.
Laboratory testing catches these things, but slowly. Samples are collected, shipped, queued, and analyzed while the rest of the consignment keeps moving. Guardianship that arrives three weeks late is not guardianship. It is documentation of a failure that already happened.
What capable guardianship actually requires
If guardianship is the only variable you control, it is worth defining what a capable one looks like. Three properties do most of the work.
It has to be present where the product is. A capability that exists only in a central laboratory is, by definition, absent everywhere else, and absent guardianship is the precondition for the crime. Verification has to function in a distributor’s warehouse in Lagos, at a customs desk in Rotterdam, in a pharmacy in São Paulo, and in a patient’s kitchen. That means it cannot depend on specialist hardware, controlled lighting, or a trained analyst being in the room.
It has to be fast enough to change an outcome. There is a hard line between knowing before the product is dispensed and knowing afterward. One prevents harm. The other records it.
And it cannot be something the counterfeiter can reproduce. This is the property almost every legacy approach fails, and it is why the distinction between additive and non-additive authentication is a difference in kind rather than degree.
Non-additive authentication: verifying what was never added
If what you verify is something you added, it can be copied. If what you verify is the product’s own inherent characteristics, there is no added feature to replicate.
That is the design principle behind TrueMed. The platform adds nothing to the product, the pack, or the process. It authenticates by analyzing what is already there: exact dimensions and shape, precise color values in both CMYK and RGB, typography and character placement, gradients, graphics, logos and vector artwork, and print quality measured at a resolution the human eye cannot resolve. It reads full secondary packaging, blister packs, and it identifies sophisticated counterfeits, diverted stock, and repackaged or relabeled product.
To defeat that, a counterfeiter would have to reproduce your actual manufacturing process rather than your security feature, at which point the economics that made the crime attractive have already collapsed.
The three properties above are engineering requirements, and they shape what the platform looks like in practice:
- Present where the product is. Verification runs from a standard smartphone camera, a tabletop scanner, an upload portal, or any other digital image source, which covers the overwhelming majority of real-world conditions. Investigators use the Digital Field app, patients use the consumer app, and partners can submit images by emailed link. Every capture routes to the same place.
- Fast enough to matter. Analysis is automated and returns a result while the product is still in front of the person holding it, not weeks later in a report.
- Nothing added, so nothing to copy. No holograms, no inks, no substrate changes, no new artwork, no line modification. Which also means no per-unit cost, and no gap between the markets where you deployed the feature and the markets where you did not.
The Ozempic case is the accidental proof. Investigators caught the counterfeit on a print characteristic. TrueMed makes that kind of analysis systematic and automated instead of depending on a trained specialist noticing a millimeter under good light on a good day.
From detection to protective intelligence
There is a final consequence of taking the triangle seriously, and it is the one that matters commercially.
Detection treats every counterfeit as an isolated incident to be caught. It produces a pile of individually resolved cases and no cumulative advantage. Intelligence treats each one as a data point about an operation.
Every scan, wherever it happens in the world, sends its result back to the Digital Forensic Lab. Cases are assigned a TrueMed ID and every step is logged, so what comes out is timestamped, scan-level visual evidence with an intact chain of custody, the kind of file a customs officer or a prosecutor can actually act on. Across thousands of scans, that same data becomes a picture rather than a pile: strain analysis linking a new seizure to previous ones, decoded 2D matrix codes and GTIN, LOT and expiry data, geographic mapping of where fakes surface and where genuine stock is turning up outside its intended market, and price analysis that flags diversion before it looks like counterfeiting.
That is the difference between knowing you have a counterfeit problem and knowing whose it is, where it originates, and which route it travels.
And it changes the offender’s arithmetic, which detection alone never does. Counterfeiting is a business, run by people making rational calculations about cost, risk, and return, and rational operators respond when those inputs move. When a brand can verify product anywhere in the world, produce court-ready evidence in minutes rather than weeks, connect a new case to prior ones, and hand enforcement a file strong enough to prosecute, targeting that brand becomes slower, more expensive, and considerably more likely to end in an arrest.
Counterfeiters have finite capacity and an effectively unlimited choice of targets. Applied consistently, capable guardianship does not just catch more fakes. It makes your products the option they skip.
Becoming an unsuitable target
That is what it means to become an unsuitable target. Not that your medicine got less valuable, and not that the criminals went away, but that the third condition their business model depends on is no longer available wherever your products are. The triangle stops closing. There is no opportunity left to act on.
You cannot out-engineer a counterfeiter on features, because features are instructions. You can make yourself the target that is not worth the trouble.
How suitable a target are you right now?
The Counterfeit Risk Profiler takes about three minutes. Eleven questions, scored across the three dimensions that determine exposure: how attractive your product is to counterfeiters, how vulnerable your supply chain is, and how severe the patient impact would be if a fake reached a patient.
Or see how non-additive authentication works on your product and packaging, and what the Digital Forensic Lab produces when a case needs to stand up in court.
Sources
- Cohen, L. E. and Felson, M. (1979). Social Change and Crime Rate Trends: A Routine Activity Approach. American Sociological Review, 44(4), 588–608. https://www.ojp.gov/ncjrs/virtual-library/abstracts/social-change-and-crime-rate-trends-routine-activity-approach
- Pharmaceutical Security Institute data, cited in Pfizer, Combating Counterfeit Medicine. https://www.pfizer.com/products/medicine-safety/counterfeiting
- INTERPOL (May 2026). Global crackdown on illicit pharmaceuticals sees USD 15.5 million in seizures. https://www.interpol.int/en/News-and-Events/News/2026/Global-crackdown-on-illicit-pharmaceuticals-sees-USD-15.5-million-in-seizures
- U.S. Food and Drug Administration. FDA warns consumers not to use counterfeit Ozempic (semaglutide) found in U.S. drug supply chain, updates of 14 April 2025 and 5 December 2025. https://www.fda.gov/drugs/drug-safety-and-availability/fda-warns-consumers-not-use-counterfeit-ozempic-semaglutide-found-us-drug-supply-chain
- Medical Dialogues (20 July 2026). Bogus medicine factory using reputed pharma brands busted in Uttarakhand. https://medicaldialogues.in/news/industry/pharma/bogus-medicine-factory-using-reputed-pharma-brands-busted-in-uttarakhand-175394
- TrueMed. June–July 2026 Counterfeit Drug News Roundup. https://truemedinc.com/blogs/
- Partnership for Safe Medicines (May 2026). Safety risks in the GLP-1 market. https://www.safemedicines.org/2026/05/glp-1-safety-risks-may-2026.html
World Health Organization. Substandard and falsified medical products. https://www.who.int/news-room/fact-sheets/detail/substandard-and-falsified-medical-products
