Counterfeit electronic components: types, risks and controls

A counterfeit electronic component is a part that is not what its markings and paperwork say it is. It might be a used chip sold as new, a commercial part relabelled as a higher grade, or a copy built from a stolen design. This guide covers the main types, what US defence investigations found, the relevant standards and practical controls for Australian buyers.

Key points

US defence rules define a counterfeit part as an unauthorised reproduction, substitution or alteration passed off as genuine, including used parts sold as new.
Recycled and remarked parts are the most reported types. Cloned, overproduced, out-of-spec, forged-paperwork and tampered parts also turn up.
A 2012 US Senate inquiry found about 1,800 cases involving more than one million suspect parts in the defence supply chain.
SAE AS5553, AS6081, AS6496 and AS6171, plus IDEA-STD-1010, set out avoidance, distribution, inspection and test practices.
Testing alone cannot prove a part is authentic, so buying through the manufacturer's authorised channel comes first.

What counts as a counterfeit electronic component

A clear legal definition comes from US defence contracting. DFARS clause 252.246-7007 defines a counterfeit electronic part as "an unlawful or unauthorized reproduction, substitution, or alteration" knowingly misrepresented as an authentic, unmodified part from the original manufacturer. The definition covers used parts represented as new, and false identification of grade, serial number, lot number, date code or performance characteristics.

The same clause defines a suspect counterfeit part: one where credible evidence, such as visual inspection or testing, "provides reasonable doubt that the electronic part is authentic." Buyers usually face suspect parts long before anyone can prove fraud, so processes need to handle this category.

Researchers sort counterfeits into seven types. A 2014 tutorial in Proceedings of the IEEE by Guin and co-authors lists recycled, remarked, overproduced, out-of-spec or defective, cloned, forged documentation and tampered parts. Citing earlier industry data, the authors report that recycled and remarked parts together make up more than 80% of counterfeit incidents.

Type	What it is	How it is usually caught
Recycled	Pulled from used circuit boards, repackaged, remarked and sold as new	Visual signs such as deformed leads, residue on the leads and scratches; electrical tests can show parameter shifts from prior use
Remarked	Original markings removed and replaced with false ones, sometimes to pass a commercial part off as industrial or defence grade	Ghost markings, surface analysis by electron or acoustic microscopy, and functional tests at the rated speed and temperature
Overproduced	Extra parts made outside the contract by someone at a foundry, assembly or test site with access to the design	Design-side measures such as hardware metering and secure split test, built in by the chip designer
Out-of-spec or defective	Parts that do not meet specification or are defective, knowingly sold on	Parametric and functional testing, and burn-in under stress conditions
Cloned	A copy of the design made by reverse engineering or with stolen intellectual property	Checking the chip's registered ID with the design house, or hardware watermarks, where the designer built them in
Forged documentation	False certificates of compliance or a falsified revision history	Traceability back to the original manufacturer rather than trust in the paperwork
Tampered	Changes at die level (a hardware Trojan), package level, or in software or firmware	Specialist lab analysis; for firmware, comparison with a known-good version

The detection methods above come from the same paper, which notes that standards at the time mainly addressed recycled and remarked parts.

Why it matters for defence and critical infrastructure

Counterfeit parts often pass a first power-up. Guin and co-authors note that even if they work initially, these parts may have a reduced lifetime and pose reliability risks. Tampered parts add a security problem: the paper describes them acting as a "silicon time bomb" or as a backdoor that sends information to an adversary.

The US Senate Armed Services Committee found suspect counterfeit parts on mission computers for the THAAD missile defence system. According to the Missile Defense Agency, if those devices had failed, the missile itself would likely have failed. The US Navy told the committee that failure of counterfeit parts in filters on an SH-60B helicopter would have compromised its night missions and surface warfare missions involving Hellfire missiles.

What the 2012 US Senate investigation found

The committee released its report, Inquiry into Counterfeit Electronic Parts in the Department of Defense Supply Chain (Senate Report 112-167), on 21 May 2012. It identified about 1,800 cases of suspect counterfeit parts, involving more than one million parts supplied by more than 650 companies. The committee's published conclusions show where the controls broke down:

Source: of well over 100 cases traced back through the supply chain, more than 70% of the suspect parts came from China. The US Air Force said one Shenzhen supplier alone put about 84,000 suspect parts into the supply chain.
Long chains: suspect parts used in SH-60B filters changed hands five times before reaching the Raytheon subcontractor that built the filters.
Weak testing: a China-based supplier chose an 18-part sample for testing. Once those passed, it sold L-3 Communications more than ten thousand of the chips.
Under-reporting: most cases appear to have gone unreported, and only 271 reports were filed with the Government-Industry Data Exchange Program (GIDEP) across 2009 and 2010.

The US Government Accountability Office ran its own test purchases. In GAO-12-375, investigators posing as a fictitious company joined two internet platforms selling military-grade parts and bought 16 parts. None were legitimate: all 12 parts sent for lab testing were suspect counterfeit, and four vendors sold parts under part numbers that do not exist. GAO cautioned that its small sample cannot show how widespread the problem is.

How industry standards handle counterfeit avoidance

Most of the standards come from SAE International's G-19 Counterfeit Electronic Parts Committee, each aimed at a different link in the chain.

AS5553: manufacturers and integrators

AS5553E, revised on 13 November 2025, covers avoidance, detection, mitigation and disposition of counterfeit electrical, electronic and electromechanical (EEE) parts. It is for organisations that buy and integrate EEE parts, including manufacturers, contract assemblers and maintenance organisations. Its mitigation is risk based and it sits alongside a quality system such as AS9100 or ISO 9001.

AS6081A and AS6496A: distributors

AS6081A, revised in April 2023, applies to distributors outside the manufacturer's authorised channel. It covers finding reliable sources, assessing risk, controlling suspect parts and reporting incidents. AS6496A, revised in December 2024, sets requirements inside the authorised distribution channel.

AS6171: test methods

AS6171, issued in October 2016 and revised as AS6171A in April 2018, standardises inspection and test procedures, workmanship criteria and inspector training. It applies to parts with an unknown chain of custody or bought from a broker. The original scope is blunt: "No amount of testing can confirm an item as authentic." That needs an unbroken chain of custody back to the original manufacturer.

IDEA-STD-1010: visual inspection

IDEA-STD-1010, Acceptability of Electronic Components Distributed in the Open Market, is published by IDEA, a trade association for electronics distributors. IDEA describes it as a visual inspection standard for detecting substandard and counterfeit components.

US contract rules and GIDEP

On US defence contracts, DFARS 252.246-7007 requires a risk-based detection and avoidance system covering training, inspection and testing, traceability, quarantine, flow-down to subcontractors and reporting to GIDEP. DFARS 252.246-7008 tells contractors to buy first from the original manufacturer or its authorised suppliers. For GIDEP itself, GAO-16-236 counted 526 suspect counterfeit reports in fiscal years 2011 to 2015, mostly from contractors, and found that reporting practices limited its value as an early warning system.

Practical controls for Australian buyers

In September 2022, Australia's Information Security Manual added controls asking buyers to check the integrity and authenticity of ICT equipment as part of acceptance, as iTnews reported. The guidance made a simple point: a counterfeit product delivered securely is still counterfeit. The checklist below draws on the standards and findings above.

Buy from the original manufacturer or its authorised distributors while the part is in production. Treat every other source as higher risk.
Ask for traceability back to the manufacturer, not just a certificate of conformance. Forged documentation is a counterfeit type in its own right.
If you must use brokers for obsolete parts, check the supplier works to AS6081A and budget for AS6171 testing.
Inspect on receipt. Check markings, leads and packaging against manufacturer data, and compare X-ray images with a known genuine part or across the lot.
Choose test samples yourself from across the whole lot. Never let the seller pick them.
Quarantine suspect parts, record what you found and report through your contract channels, including GIDEP on US programs.
Flow these requirements down to subcontractors and contract manufacturers.
Before devices go into service, verify assembled boards against the design and firmware against a known-good version.

Where board-level checks fit

Incoming inspection checks parts before they are fitted. Once a board is built, repaired or returned from a contractor, the question changes: does this board still match its design?

BoardSafe's scanner checks a circuit board against its original design files and flags parts that are fake, swapped or not in the design, such as an extra chip. It also checks firmware against a known good version and takes under 60 seconds per board. It runs on site, so your design files stay with you. See the BoardSafe overview for tamper-evident seals and yearly audits.

Related reading: our guides to hardware supply chain security in Australia and firmware integrity verification.

Questions people ask

What is a counterfeit electronic component?

Under US defence contracting rules (DFARS 252.246-7007), a counterfeit electronic part is an unlawful or unauthorised reproduction, substitution or alteration knowingly misrepresented as an authentic, unmodified part from the original manufacturer. That includes used parts sold as new and false grade, lot number, date code or performance markings. A suspect counterfeit is one where credible evidence gives reasonable doubt that the part is authentic.

What are the main types of counterfeit chips?

A 2014 Proceedings of the IEEE tutorial by Guin and co-authors lists seven types: recycled, remarked, overproduced, out-of-spec or defective, cloned, forged documentation and tampered. Citing earlier industry data, the authors report that recycled and remarked parts together account for more than 80% of counterfeit incidents.

Can testing prove an electronic part is genuine?

No. The scope of SAE AS6171, the test methods standard for suspect counterfeit parts, states that no amount of testing can confirm an item as authentic. That needs an unbroken chain of custody back to the original manufacturer or an authorised manufacturer. Testing reduces risk when parts come from brokers or have an unknown history.

Which standards cover counterfeit electronic parts?

SAE AS5553 covers avoidance, detection, mitigation and disposition for organisations that buy and integrate parts; revision E was published in November 2025. AS6081A covers distributors outside the authorised channel, AS6496A covers authorised distribution, and AS6171 sets test methods. IDEA-STD-1010 is a visual inspection standard for components sold on the open market.

What did the 2012 US Senate counterfeit parts investigation find?

The Senate Armed Services Committee identified about 1,800 cases of suspect counterfeit electronic parts in the US defence supply chain, involving more than one million parts supplied by more than 650 companies. More than 70% of the suspect parts it traced came from China, and most cases appear to have gone unreported.

Counterfeit electronic components: types, risks and how to avoid them