You found a THCA flower that looks fire. The price is right. The strain name sounds legit. But before you hand over your cash, there is one thing separating a quality purchase from a sketchy gamble: the COA (Certificate of Analysis).
A COA is a third-party lab report that tells you exactly what is in your THCA product and, just as important, what is not. If a shop cannot produce one, walk out. You have thousands of verified shops to choose from. No lab report, no sale.
This guide breaks down every section of a THCA COA, shows you exactly what the numbers mean, and teaches you to spot red flags that most consumers miss entirely.
Step 1: Check the Lab and Header Info First
Before you even look at cannabinoid percentages, look at who ran the test. The header section of any COA contains the information that establishes whether the report is worth reading at all.
Here is what you need to confirm:
- Lab name and address. A real testing facility lists its full legal name, physical location, and contact info. If the lab name does not appear on the COA, or you cannot find them with a quick search, that is a problem.
- Accreditation number. Look for ISO/IEC 17025 accreditation. This international standard means the lab has demonstrated technical competence, validated testing methods, and proper quality management systems. Many states now require cannabis testing labs to hold this accreditation.
- State license number. Most states that regulate hemp testing require the lab to carry a state-issued license. It should be printed on the COA.
- Date of testing. COAs are time-sensitive. Industry best practice says lab results older than 12 months should raise questions. If the report is dated two years ago, ask for a current one.
- Batch or lot number. This number connects the COA to a specific production run. Write it down. You will need it for the next step.
A COA without clear lab identification is like a restaurant health inspection with no inspector name. It could say anything.
Step 2: Match the Batch Number to Your Product
This step takes five seconds and catches one of the most common tricks in the hemp industry. Look at the batch or lot number printed on the COA, then look at the label on the product you are buying.
They need to match.
A COA only applies to the specific batch it tested. If a shop hands you a lab report for Batch #2024-0412 but the jar in your hand says Batch #2024-0819, that report tells you nothing about what you are holding. Some brands use a single COA to cover their entire product line. That is not how lab testing works. Every batch should have its own test.
If the numbers do not match, ask the shop to produce the correct report. If they cannot, find a shop that can.
Step 3: Read the Cannabinoid Profile
This is the section most people jump to first, and for good reason. The cannabinoid profile tells you the potency of your THCA flower and whether it meets federal hemp compliance.
Here is what you will see:
| Cannabinoid | What It Tells You | What to Look For |
|---|---|---|
| THCA | Raw potency (converts to THC when heated) | 15-30% for quality flower |
| Delta-9 THC | The federally regulated compound | Must be under 0.3% by dry weight |
| Total THC | THCA converted + Delta-9 | Calculated using the 0.877 formula |
| CBD / CBDA | Non-intoxicating cannabinoids | Should be low in THCA flower |
| CBG / CBN | Minor cannabinoids | Varies by strain |
The 0.877 Formula You Need to Know
Labs calculate Total THC using this formula:
Total THC = (THCA x 0.877) + Delta-9 THC
The 0.877 factor accounts for the 12.3% molecular weight lost when THCA sheds its carboxyl group during decarboxylation (heating). So a flower testing at 25% THCA actually delivers roughly 21.9% THC when you smoke or vape it.
Under the 2018 Farm Bill, hemp must contain less than 0.3% Delta-9 THC by dry weight. Most states currently test on this Delta-9-only basis, which is why high-THCA flower can legally ship as hemp.
Important 2026 update: Federal language is shifting toward a “total THC” definition for hemp compliance, with changes expected to take effect in late 2026. This would mean products need to test below 0.3% total THC, not just Delta-9. That shift could reshape the entire THCA flower market. Stay current on your state’s legal status.
Cannabinoid Red Flags
- THCA above 35%. Flower rarely tests this high naturally. Numbers above 35% total cannabinoids should make you skeptical. This could signal “lab shopping,” where brands send samples to labs known for inflating results.
- High THCA plus high CBD. Genuine THCA flower bred for potency typically has low CBD. If you see 25% THCA and 10% CBD on the same report, the flower may have been sprayed with THCA distillate over CBD hemp.
- Perfectly round numbers. A result of “exactly 20.000%” looks suspicious. Real lab results have natural variation, like 19.847% or 21.263%.
Step 4: Look at the Terpene Profile
Not every COA includes terpene testing, but the ones that do give you valuable information about quality and authenticity.
Terpenes are the aromatic compounds that give cannabis its smell, flavor, and influence on effects. A genuine THCA flower grown from high-potency genetics will show a diverse terpene spectrum. You should see multiple terpenes (myrcene, limonene, caryophyllene, pinene, linalool, and others) in measurable quantities, with total terpene content typically landing between 1.5% and 3%.
Why Terpene Data Matters for Spotting Fakes
Sprayed hemp is one of the biggest quality problems in the THCA market right now. Producers take cheap CBD flower, coat it with THCA distillate, and sell it as premium THCA bud. The cannabinoid profile might look convincing, but the terpene profile tells the real story.
Sprayed products typically show minimal or zero terpene content because the distillate coating suppresses or dilutes the flower’s natural terpene expression. If a product tests at 25% THCA but shows barely any terpenes, that is a strong indicator you are looking at sprayed hemp, not naturally grown flower.
A brand that invests in terpene testing is signaling transparency. A brand that skips it might have something to hide.
Step 5: Review the Safety and Contaminant Panels
Potency gets all the attention, but the safety panels are what protect your health. A complete COA should include test results for multiple categories of contaminants. If a report only shows cannabinoid potency and nothing else, it is incomplete.
Pesticides
The pesticide panel screens for dozens of chemical compounds that should not end up in your lungs. Results should show either “ND” (Not Detected) or “Pass” for every compound tested. Any “Fail” result means the product did not meet safety standards.
Heavy Metals
This panel tests for lead, arsenic, cadmium, and mercury. Cannabis plants are bioaccumulators, meaning they absorb heavy metals from soil and water. Results should show levels below the acceptable limits established by the testing state, or simply “Pass.”
Microbial Contaminants
The microbial panel checks for bacteria (E. coli, Salmonella) and fungi (total yeast and mold count). This testing is especially relevant if you have respiratory concerns or a compromised immune system. A clean microbial panel shows ND for pathogens and yeast/mold counts within acceptable limits.
Residual Solvents
This test applies mainly to concentrates and extracts, not raw flower. It screens for chemicals used during extraction (butane, propane, ethanol) that should be purged from the final product.
Mycotoxins
Mycotoxins are toxic compounds produced by certain molds. On a clean COA, mycotoxin results should be ND (Not Detected) across the board. Any detection is a red flag you should take seriously.
What “Full Panel” Actually Means
When brands advertise “full panel testing,” they mean the COA includes cannabinoids, terpenes, pesticides, heavy metals, microbials, residual solvents, and mycotoxins. Not every state requires all of these tests, so “full panel” varies by jurisdiction. But for your purposes as a consumer, more testing is always better.
Step 6: Check Moisture Content and Water Activity
These two readings do not get much attention, but they tell you whether your flower was properly cured and stored.
- Moisture content should fall between 8% and 12% for properly cured flower. Too high and the product is at risk for mold. Too low and it will be harsh and crumbly.
- Water activity (aW) measures free water available for microbial growth. An aW reading below 0.65 is generally considered safe for long-term storage. Anything above 0.70 increases the risk of mold development.
If you are buying flower that will sit in a jar for a while before you use it, these numbers matter more than you might think.
Step 7: Verify You Can Confirm the COA Independently
A legitimate COA should be verifiable. Here is how to check:
- Look up the lab. Search the lab name online. Confirm they are a real, licensed testing facility. Check whether they hold ISO 17025 accreditation through an accreditation body like A2LA or ANAB.
- Contact the lab directly. Most accredited labs allow you to verify results using the batch number or sample ID from the COA. Some labs maintain online portals where you can look up results by entering the report number.
- Compare the document. Visit the lab’s website and look at their sample COA format. The report you received should match that format, including the logo, layout, and signature block. Fraudsters sometimes copy a legitimate lab’s letterhead onto fabricated results.
- Scan QR codes. Many modern COAs include a QR code that links directly to the lab’s results page. Scan it. If it leads to the actual lab report on the lab’s domain, you are in good shape. If it leads nowhere or to a different site, be cautious.
Brands that make COAs easy to find and verify are the ones worth buying from. If you have to fight to see a lab report, that tells you something.
Red Flags Cheat Sheet: When to Walk Away
Not every questionable COA means fraud, but certain patterns should make you think twice. Here is a quick reference:
| Red Flag | What It Might Mean |
|---|---|
| No COA available at all | Shop is not prioritizing transparency |
| Batch number mismatch | The COA does not apply to your product |
| No lab name or accreditation | Report may not be from a real lab |
| THCA above 35% | Possible lab shopping or inflated results |
| High THCA + high CBD | Likely sprayed hemp, not natural flower |
| Missing safety panels | Incomplete testing, unknown contaminants |
| COA older than 12 months | Results may not reflect current product |
| Perfectly round percentages | Possible data manipulation |
| No terpene data + high THCA | Potential sprayed product |
| Cannot verify with the lab | The report might be fabricated |
If you spot two or more of these red flags on the same COA, we recommend finding a different product or shop. Use our directory to find verified retailers in your area that prioritize lab testing and transparency.
The Bottom Line
Reading a THCA COA is not complicated once you know what to look for. Start with the lab credentials, match the batch number, scan the cannabinoid profile for realistic numbers, check for terpene data, and confirm the safety panels are present and passing.
The five-minute habit of checking a COA before every purchase is the single best thing you can do to protect yourself as a THCA consumer. Good shops expect you to ask. Great shops have the COA posted before you even walk in.
Ready to find a shop that takes testing seriously? Browse 5,700+ THCA shops near you and look for retailers that display their lab results.
FAQ
What does COA stand for in THCA products?
COA stands for Certificate of Analysis. It is a document produced by a third-party testing laboratory that reports the cannabinoid potency, terpene content, and safety test results for a specific batch of THCA product. Every THCA product you buy should have a corresponding COA available.
How do I calculate Total THC from a THCA COA?
Use the formula: Total THC = (THCA x 0.877) + Delta-9 THC. The 0.877 conversion factor accounts for the 12.3% molecular weight lost when THCA converts to THC through heating. For example, flower testing at 25% THCA has approximately 21.9% total THC potential.
Can a COA be faked?
Yes. Common manipulation methods include applying a legitimate lab’s letterhead to fabricated results, altering Delta-9 THC numbers, and inflating THCA percentages. Protect yourself by verifying the lab exists, contacting them to confirm the batch number, scanning any QR codes, and comparing the report format to examples on the lab’s website.
What is the difference between Delta-9 THC and THCA on a COA?
Delta-9 THC is the active, psychoactive form of THC that is federally regulated at 0.3% by dry weight in hemp. THCA is the raw, non-psychoactive precursor that converts to Delta-9 THC when heated through smoking, vaping, or cooking. A COA lists both separately because they have different legal and functional significance.
Should I avoid THCA flower if there is no terpene data on the COA?
Missing terpene data alone is not a dealbreaker, since not all labs include terpene testing as standard. However, combined with other red flags (very high THCA, unusually low price, no brand reputation), the absence of terpene data should raise your skepticism. Terpene testing helps confirm the flower is naturally grown rather than sprayed with distillate.