Packaging Standards Explained for Anti-Counterfeiting & Security Finishing

Why the Standard You Cite in a Brief Determines What You Actually Receive #

Security and anti-counterfeiting finishes sit at the intersection of print quality, substrate performance, and regulatory compliance — which means three different standard families apply simultaneously, and they don’t always agree on methodology.

When a buyer writes “must comply with relevant standards” in a packaging brief, that instruction is operationally useless. A holographic foil stamped folding carton for a pharmaceutical product shipping into the EU, the US, and China needs standards cited from at least four separate bodies: ISO for print characterisation, ASTM or GB/T for substrate mechanical testing, a regional food-contact or product-contact migration framework (EU 10/2011 or FDA 21 CFR §175–§178), and an authentication/security feature specification that is almost never covered by any public standard at all.

The parameter that governs whether your security packaging survives the supply chain isn’t the hologram specification — it’s the base substrate performance under ISO 2758 (Mullen burst, kPa) and ISO 3037 (edge crush resistance, kN/m). We have received briefs specifying elaborate overt security features on a substrate that couldn’t survive a 600mm drop from a standard e-commerce poly mailer. The holograms were intact. The carton was destroyed.

This matters more than most brief-writers expect: surface finishing and authentication features are applied after the substrate is cut, scored, and possibly coated. If the substrate caliper or stiffness spec isn’t locked first, the foil stamping registration drifts, the void-on-open label adhesive fails the peel test, and the UV-fluorescent ink layer shows inconsistent fluorescence intensity across the sheet because ink lay-down varies with surface roughness.

Supplier Qualification — What to Request and What the Response Tells You #

Ask any prospective security packaging supplier for their ISO/IEC 12931:2012 compliance position before asking about specific feature capabilities. ISO/IEC 12931 defines performance criteria for authentication solutions used to combat counterfeiting — it is the one standard that directly governs overt and covert feature effectiveness. A supplier who responds with a blank look or redirects immediately to their hologram catalogue has likely never been asked by a buyer who knows the standard exists.

Then ask for substrate test data per ISO 2758 and ISO 3037. Request actual lot-level test results, not a generic mill certificate. The response time tells you something real: a supplier with systematic incoming inspection will have recent data on file and can share it within 24 hours. A supplier who needs a week to “check with the mill” is likely relying on pass-through certificates they haven’t verified internally.

For migration compliance on any food-adjacent or cosmetic packaging, ask specifically whether the substrate and any coatings have been tested under EU 10/2011 on plastic materials and articles in contact with food, or FDA 21 CFR Part 175 (adhesives) and Part 176 (paper and paperboard components) as applicable to your market. These are not interchangeable. EU 10/2011 uses a positive list of authorised substances with specific migration limits (typically 0.01 mg/kg for non-listed substances under the generic limit), while FDA 21 CFR uses a different category structure. A supplier certified for one does not automatically qualify under the other.

One gap we see repeatedly in incoming briefs: buyers specify “FSC certified” without stating whether they require FSC 100%, FSC Mix Credit, or FSC Mix X% — each carries different chain-of-custody audit requirements per FSC-STD-40-004. For security packaging specifically, FSC Mix Credit is usually achievable; FSC 100% adds lead time because sourcing options narrow.

Cost-Performance Trade-offs Across Standard Tiers #

Security finishing standards don’t have a single cost curve — the relationship between standard tier and unit cost depends heavily on verification infrastructure.

A holographic hot stamp foil applied to a 350gsm SBS carton at our facility adds roughly USD 0.08–0.18 per unit at 50,000-unit runs, depending on foil coverage area and die complexity. That range is for overt-only features. Adding a covert UV layer (requiring ISO 12647-2 colour-managed press qualification and a calibrated UV verification device at the receiving end) adds another USD 0.03–0.06 per unit. Adding a serialised QR or DataMatrix code with database back-end integration is a separate cost tier entirely — the per-unit print cost is small, but the system integration and GB/T 33993 (China’s traceability standard for product QR codes) compliance audit is a fixed project cost that only amortises at volumes above roughly 100,000 units per SKU.

The counterargument to specifying the highest standard tier: for domestic China distribution with no regulatory mandate, GB/T 17347 (holographic products — general technical requirements) combined with our internal QC-AF14 audit checklist gives adequate authentication performance at lower verification infrastructure cost than ISO/IEC 12931 full compliance. If your market is a single geography with known enforcement patterns, over-specifying to a global multi-tier standard framework adds cost without proportionate protection uplift.

Cross-Reference: Equivalent Standards by Market and Parameter #

The table below maps the most commonly specified parameters in security packaging briefs across four major markets. “Equivalent” means broadly comparable scope — the test methods and pass/fail thresholds differ, so confirming which standard governs your shipment destination is essential before sampling.

A few clarifications on common confusions we see in briefs:

ISO 12647-2 governs the press condition (ink density, dot gain, substrate whiteness). ISO 12647-7 governs contract proofing. Specifying 12647-7 for press approval tells your supplier their press needs to match a proofer — not that the proofer should match the press. This reversal causes systematic colour shift that neither party identifies until the production run is complete.

GRACoL 2013 (formalised under CGATS.21) is the US market equivalent for offset print characterisation, aligned to ISO 12647-2 but using US-specific substrate and ink categories. If your brand has both US and EU distribution, specify both, and confirm your supplier is G7 Master Qualified — G7 methodology provides the calibration bridge between GRACoL and ISO 12647-2 print conditions.

GB/T 16288 (recycling labels for plastic products) and the EU PPWR (Packaging and Packaging Waste Regulation, 2024 revision) are not interchangeable and cannot be treated as equivalent despite both governing on-pack recyclability labelling. For security packaging exported to EU from 2025 onward, PPWR mandates recyclability labelling under harmonised labelling schemes that GB/T 16288 does not cover.

Specification Notes for Brand Partners #

When you brief us on security finishing packaging, the single most useful document you can share — beyond artwork — is your market distribution list and whether any SKU touches food, cosmetics, or pharmaceutical adjacency. That one input determines whether we’re working under EU 10/2011, FDA 21 CFR, GB 9685, or multiple frameworks simultaneously.

The brief gap that adds the most sample iterations: specifying “holographic foil” without defining verification method. Overt holograms visible to the naked eye and covert machine-readable features require different substrates, different foil constructions, and in some cases different press sequences. Without knowing how your end-user or inspector will authenticate the feature (naked eye, UV lamp at 365nm, smartphone app, or dedicated reader at 850nm), we cannot confirm the correct foil specification for your security tier.

Our standard sampling timeline for security finishing cartons is 18–22 working days from approved dieline and confirmed substrate. Projects requiring FSC chain-of-custody documentation or migration test certificates from an accredited third-party lab (necessary for EU or US food-adjacent claims) extend that to 28–35 working days. Serialisation with database integration is scoped separately and typically runs parallel to physical sampling.

FAQ

Which standard should I cite for print quality in a packaging brief — ISO 12647-2 or G7?
Cite both if your brand has North American and European distribution. ISO 12647-2 is the international press condition standard; G7 is a calibration methodology (formalised under CGATS.21) that allows presses in different facilities to match each other’s grey balance and tonality. A supplier who is G7 Master Qualified can produce consistent colour across offset presses regardless of which regional standard characterises the target press condition.

Does EU 10/2011 apply to my packaging if the product inside is not food?
It depends on direct-contact risk. EU 10/2011 applies to plastic materials and articles intended to contact food. If your product is a cosmetic or pharmaceutical, you may be under EU Regulation 1223/2009 (cosmetics) or Directive 2001/83/EC (medicinal products) instead — both have migration and extractables requirements that overlap with but are not identical to 10/2011. We flag this during our QC-AF14 compliance pre-check for any brief involving skin-contact or ingestible products.

Can I require FSC 100% certification on security packaging substrates?
FSC 100% is achievable but constrains substrate sourcing. For security packaging that requires specific caliper, stiffness, and surface roughness to support foil stamping registration within ±0.15mm, FSC 100% sometimes limits us to a narrower set of mills. FSC Mix Credit typically gives equivalent environmental claims with broader substrate availability. We recommend FSC Mix Credit at 70% recycled content minimum for most security carton applications unless FSC 100% is a specific tender requirement.

What is ISO/IEC 12931 and when do I need to cite it?
ISO/IEC 12931:2012 defines performance criteria for authentication solutions used to combat counterfeiting. You need to cite it when your brief requires a supplier to demonstrate that a security feature (hologram, UV covert print, taggant, etc.) actually authenticates effectively — not just that the feature was applied. Without this standard reference, there is no agreed benchmark for what “works” as an authentication feature, and your supplier’s QC approval and your brand’s verification needs may not align.

The EU PPWR — does it affect my packaging specification today?
The EU PPWR (Packaging and Packaging Waste Regulation) was formally adopted in 2024 with a transition period running to 2030 for most requirements. Recyclability labelling requirements under harmonised EU schemes are expected to become mandatory from 2027 onward. For security packaging sold in the EU, this means on-pack recycling labels must eventually comply with the PPWR harmonised labelling scheme — GB/T 16288 or generic recycling symbols are not sufficient. If your product has EU shelf life extending into 2027 or beyond, the specification should be written now to accommodate PPWR-compliant label placement and substrate recyclability claims.

---

Planning a packaging project? Contact our team to request a complimentary specification review and sample quote.