How to verify an internship certificate: what colleges and employers check

Is there one site for internship certificate verification online?

The National Internship Portal of the All India Council for Technical Education (AICTE) runs a public certificate verification page that takes a certificate ID or a scanned QR code, and says "Verification is free and needs no login." It covers only certificates issued through that portal. Any other certificate is confirmed through the records of the host that wrote it.

That follows from the rules colleges work under. Step 6 of the AICTE Internship Policy says the training certificate is "to be obtained from industry". UGC's internship guidelines for undergraduates name the internship supervisor, whom each college appoints, as the person who "will ensure issuing of completion certificates". The host writes it; the college collects it.

The PM Internship Scheme of the Ministry of Corporate Affairs follows the host pattern. Its FAQs for candidates and companies say interns who successfully complete the internship receive "a certificate of completion under the PM Internship Scheme from the Partner companies", and that companies must ensure "the certificate is only disbursed by the partner company". The company named on a scheme certificate is the one to confirm it.

The AICTE page has one safeguard worth copying elsewhere. A verifier can enter the student's email with the certificate ID, and the result is shown only when the two match, so a genuine certificate belonging to someone else does not pass. Certificates from other hosts go through the five checks that follow.

Check 1: Does the organisation that issued it exist?

Look the issuer up on the register for its legal form: the Ministry of Corporate Affairs register for companies and LLPs, NITI Aayog's NPO Darpan for non-profits, or the Udyam portal of the Ministry of Micro, Small and Medium Enterprises for small businesses. A match shows the organisation is on record, and nothing about any internship.

The MCA's Master Data Services page searches companies and LLPs, and separately their directors and designated partners, after a captcha. Its results list the name, the CIN (or FCRN, LLPIN or FLLPIN), the state and the status. Compare the name letter by letter with the letterhead, and note whether the status is active.

For non-profits, NPO Darpan, the NITI Aayog portal, has an NPO Directory and a separate list of blacklisted NPOs. The portal's front page states that NITI Aayog hands out no physical Darpan certificate, only a registration ID resting on a "self-declared affidavit". A Darpan ID therefore tells you an organisation signed up and declared its own details. For how to judge a non-profit beyond that, see the steps for checking that an NGO is genuine.

The Udyam Registration portal has a "Verify Udyam Registration" option. Registration there is "based on self-declaration", and the portal says no documents or proof are required to be uploaded to register. A real registration number can also be printed on a fake letterhead, which is why this check only opens the way to the next four.

Check 2: Does the QR code or link open the issuer's own record?

Scan the code and read the web address it opens before you read the page. It should open a verification page on the issuer's own domain, or on the government portal that issued the certificate, showing the same name, role and dates as the paper. A page on an unrelated or lookalike domain proves nothing about the certificate.

The National Internship Portal shows what a sound version looks like. Its home page says a certificate it issues carries a QR code, and scanning it opens "this portal's own verification page", showing which ministry issued it, the host and the dates, straight from the record. The address you should see is on internship.aicte-india.org.

Some codes on a certificate are about something else. Udyam certificates carry "a dynamic QR Code" that opens a page on the Udyam portal with "details about the enterprise". If a host puts that code on an internship certificate, scanning it confirms the business and says nothing about the intern.

A missing QR proves nothing either way. The AICTE policy does not mention QR codes, and a small host may send a signed PDF and nothing else. In that case type the organisation's web address yourself, instead of following a link printed on the certificate, and look for a verification contact there.

Some internship platforms and training companies run their own lookup instead of a QR. HeyInterns asks for the internship ID printed on its certificate, and Interns of Industry for a certificate ID in the form IOI/CODE/NUMBER. Such a lookup shows what the issuer's own database holds, so it counts only when you reached it by typing the issuer's address yourself.

A PDF certificate may also carry a digital signature. Section 5 of the Information Technology Act, 2000 lets an electronic signature meet a legal requirement for a signature, provided it is affixed as the Central Government prescribes. Open the signature panel in a PDF reader: the signer should be the named signatory, and the certificate behind the signature should come from a Certifying Authority.

The Controller of Certifying Authorities, under the Ministry of Electronics and Information Technology, issues certificates only to Certifying Authorities, and those authorities issue Digital Signature Certificates to end users. The Controller publishes the list of licensed authorities, so the issuer named in the signature panel can be looked up there. If the panel shows no digital signature at all, this check cannot be run and Check 3 carries the weight.

Check 3: Will the person who signed it confirm it?

Write to the signatory at an address you found yourself, on the organisation's own website or through its main office, and ask one closed question: whether this student worked there, in this role, between these dates. A phone number or email printed only on the certificate may belong to whoever made the certificate, so use it only as a lead.

On an AICTE-pattern course, the forms put a named, reachable person behind each internship. Each day's entry in the Format 5 daily diary has a line for the name of the head of department or supervisor "With e-mail id". The Format 10 attendance sheet ends with the company internship supervisor's signature "with company stamp/ seal", their name and a "Contact No.".

The Format 4 letter to the host asks for the student's performance report to go to the college's placement officer "in sealed envelope" when the training ends.

Colleges add their own terms. St Joseph's College of Commerce, Bangalore, in its internship report guidelines written for its 2016 to 2018 M.Com batch, wants the certificate on company letterhead, signed by whoever supervised the intern "or someone senior", then stamped and dated. That is one college's rule. Read your own college's before judging a certificate by it.

The details to confirm are the ones on the certificate itself; the guide to the fields a genuine certificate carries lists them. A verification request can be as short as the specimen below. Names in it are bracketed placeholders, and the SPECIMEN label marks it as a pattern to adapt.

Part	SPECIMEN verification request (placeholders only)
Top line	SPECIMEN. NOT A REAL EMAIL. NO PERSON OR ORGANISATION IS DESCRIBED.
To	[Signatory's email, taken from the organisation's own website]
Subject	SPECIMEN: Please confirm internship certificate Ref. [Certificate reference number]
Body	Dear [Signatory's name], [Student's full name] has submitted the attached certificate, which states that they worked as [Role title] at [Organisation name] from [Start date] to [End date]. Could you confirm whether these details match your records? A yes or no is enough. If any detail differs, please say which.
Sign-off	[Verifier's name], [Designation], [College or company name], [Official phone number]
Bottom line	SPECIMEN ONLY. Not for sending as written.

Send it from an official address and file the reply with the student's papers.

Check 4: Do the dates, role and hours match the rest of the file?

Put the certificate beside every other paper that mentions the internship and compare the dates, the role title and any hours. On an AICTE-pattern course those papers include a daily diary with a dated entry for each day, an attendance sheet and the supervisor's evaluation. A certificate for eight weeks beside a diary with three weeks of entries needs explaining.

The AICTE policy wants the daily training diary "signed after every day by the supervisor" and handed in with the attendance record and a signed, host-stamped evaluation sheet. Format 6, the supervisor's evaluation, records the "Dates of Internship: From" and "To", and Format 10 the dates of commencement and completion, with the student's initials against each day. Format 5, the diary page, records each day's date with the time of arrival and time of departure, which is where any hours on the certificate can be tested.

UGC's guidelines leave evaluation to each college's own method, and list as "suggestive aspects" for the college's expert committee the activity logbook, the supervisor's evaluation report and the intern's attendance. An employer without that file can compare the certificate with the resume, the offer letter and what the student says in the interview. The role title should read the same in all of them.

Check which document you are holding, too. Internshala's help centre says it issues a Certificate of Selection "after 7 days of getting hired" on the platform. That paper records a selection. Completion is recorded by the host at the end, and the guide to the completion certificate and how you get one sets out that difference.

Check 5: Can the student explain the work behind it?

Ask the student to walk through one task in detail: what they were given, what they produced, who reviewed it, and what changed after the feedback. A student who did the work should be able to name the output, the reviewer and the change. A certificate is worth only the work behind it, and this check is the one that tests the work.

Colleges that follow the AICTE policy verify an internship this way. The policy ends the internship with a seminar or viva before an expert committee, with "Depth of knowledge and skills" among its marking criteria and the attendance record and daily diary examined alongside the report. UGC's suggested aspects for its committee, with "One Internal and One external" member, include "Acquisition of skill sets by the intern". Neither list scores the certificate.

An employer can do the same in a short interview. Ask for one output with anything confidential removed: a report, a spreadsheet, a published post, a slide deck. What a certificate can carry in a hiring decision, and what it cannot, is set out in what an employer can and cannot read into a certificate. For a student, the drafts, the diary and the feedback emails kept while the internship runs answer this check better than the certificate does.

What are the signs of a fake internship certificate?

To identify a fake internship certificate, look for the five checks failing: an issuer missing from any register, a QR that opens a stranger's domain, a signatory who cannot be reached or does not recognise the student, dates that clash with the diary, and a student who cannot describe the work. One failure is a reason to ask more questions before accepting the certificate.

Money is another sign. The National Internship Portal puts the cost to a student, from registration through to the completion certificate, at ₹0, and tells students that anyone charging them to apply through it is running a scam. Internshala's safety page counts demands for application fees, security deposits or training charges among its red flags, and says that when an employer delays or refuses a promised certificate, it "could indicate unfair practices".

Search the contact details, too. The National Cyber Crime Reporting Portal carries the Suspect Repository of the Indian Cyber Crime Coordination Centre (I4C), where citizens can search mobile numbers, email IDs, account numbers and URLs for links with cyber criminals. A match on a certificate's phone number or web address is a reason to stop. No match proves nothing.

Smaller signs worth a second look:

• The organisation's name is spelt slightly differently from its register entry, or the registration number returns another organisation.
• A non-profit's certificate carries the NITI Aayog name or logo. NPO Darpan's advisory says use of that name or logo by NPOs "in any manner, is strictly prohibited", and that a Darpan ID confers no endorsement.
• The certificate claims to come from the National Internship Portal, but its ID returns no record on the portal's verification page. The portal lists [email protected] as its helpdesk address for questions.
• The only contact is a mobile number or a personal email, and the organisation's own website lists nobody of that name.
• The role is so general it could describe anyone, and the dates give a month but no day.

A fake certificate can begin as a fake offer. The checks for an offer letter before you accept it apply at that earlier stage, and the guide to internship fee scams covers requests for money.

What happens if a certificate turns out to be forged?

A forged certificate can lead to action under the criminal law and under the institution's own rules. Section 336(2) of the Bharatiya Nyaya Sanhita, 2023 makes forgery punishable with "imprisonment of either description for a term which may extend to two years", a fine, or both. Where the forger intends the document to be used for cheating, section 336(3) raises the maximum to seven years, with a fine as well.

The Sanhita reaches the person who uses the document as well as the one who made it. Section 340(2) says a person who fraudulently or dishonestly uses as genuine a document they know or have reason to believe is forged "shall be punished in the same manner as if he had forged" it. Section 336(1) covers a false electronic record as well as a false document, made with intents that include supporting "any claim or title".

Where someone uses another person's electronic signature, section 66C of the Information Technology Act, 2000 provides imprisonment "which may extend to three years" and a fine "which may extend to rupees one lakh".

A certificate or verification page that quotes Indian Penal Code sections for forgery is quoting the old Code. Section 358(1) of the Sanhita says "The Indian Penal Code is hereby repealed", and section 358(2) keeps the old Code for what was done or incurred under it before the repeal.

The National Internship Portal sets rules for the certificates it carries. Its terms and conditions, last updated on 15 September 2026, forbid submitting "fake certificates or offer letters", tell organisations to issue certificates "only for internships that were actually offered and completed", and let AICTE "withdraw a certificate that breaches these terms or was obtained using false information".

Institutions have their own rules as well. The placement rules for IISc students, revised in September 2025, say the placement office verifies what students submit and that "Any form of misrepresentation or falsification will lead to strict disciplinary actions, including suspension of the student's placement account." Your own college's rules set its penalties.

A verifier who finds a problem should note what was checked and what the issuer said, and give the student a chance to explain in writing. A wrong date on a genuine certificate is for the issuer to correct on a fresh copy.

A student charged money for an internship that never happened can report it. The National Cyber Crime Reporting Portal takes reports of suspect websites, phone numbers and email IDs, and a Ministry of Home Affairs written reply in the Lok Sabha, released by PIB on 5 December 2023, says the toll-free helpline 1930 "has been operationalized to get assistance in lodging online cyber complaints".