Verifying PLC Part Authenticity Using Serial Numbers and Barcodes

David Krause12 min read
PLC HardwareSiemensTechnical Reference
Licensed PE Working through this on a live machine? A Maine-licensed engineer can take it from here — included with IMD hardware, by the hour for everything else. Book an engineer

1. Overview: Why Part Authentication Matters in Industrial Automation

Counterfeit and refurbished PLC components pose a documented risk to plant safety, production uptime, and regulatory compliance. Field engineers and procurement specialists routinely handle modules removed from service, sourced from secondary markets, or supplied by brokers with limited traceability. In each case, the first technical step is to confirm that the physical part matches its declared provenance.

The most reliable authentication method combines two independent identifiers printed by the manufacturer:

  • A barcode (1D or 2D Data Matrix) applied to the part housing.
  • A serial number (typically 10–12 alphanumeric digits for Siemens) etched on the front face label or printed on the rating plate.

For a genuine, factory-sealed product, the barcode and serial number on the module must match the barcode and serial number printed on the factory box label one-to-one. Any mismatch is a strong indicator that the part has been re-housed, re-labelled, recovered from a different unit, or is a counterfeit reproduction. This reference describes the verification procedure for Siemens S7-1200, S7-1500, ET 200, and SIMATIC HMI components, and generalises the pattern for cross-manufacturer use.

Safety Notice: Counterfeit PLC modules have been documented to fail within hours of commissioning, with failure modes including output contact welding, CPU lock-up under scan load, and undetected firmware downgrades that bypass access protection. Treat any unauthenticated module as unfit for safety-rated applications until proven otherwise.

2. Siemens Serial Number Structure and Encoding

Siemens applies a structured serial number to every SIMATIC product leaving the factory. The format is not a single contiguous number; it is a multi-field block printed on the front-face rating plate and again on the box label.

2.1 Typical Siemens Rating-Plate Layout

Field Example Meaning
MLFB / Order Number 6ES7 515-2AM02-0AB0 Machine-readable product designation; identical on part and box.
Serial Number (S) S C-J9V1234567 10–12 digit unique identifier; identical on part and box.
Production Date 10.2022 Month / year of manufacture.
Hardware Revision (FS) FS: 05 Functional state / hardware release.
Firmware Version (B) B: 2.9.7 Factory-loaded firmware at shipment.
2D Data Matrix Code Encoded block Machine-readable equivalent of the printed fields above.

2.2 Interpreting the Serial Number Block

The line beginning with S on a Siemens label carries the unique serial number. A common observed pattern on S7-1500 CPUs and I/O modules is S C-[Plant Code]-[YY][Week][Sequential], giving 10–12 characters after the prefix. The first character of the body (e.g., J, C, V) encodes the production plant. Always treat the serial number as an opaque string when comparing for equality — do not attempt to decode it manually; rely on the manufacturer's database for interpretation.

If the serial number is missing, smudged, or has been re-printed over a laser-etched original, the part must be considered suspect. Genuine Siemens labels use a single print pass; re-label tampering is usually visible as a slight gloss or texture difference.

3. Required Reference: Siemens Industry Online Support App

Siemens publishes a free Android and iOS application that decodes the Data Matrix code printed on SIMATIC rating plates. The application returns the official product record, including the manufacturing date, the firmware version that was loaded at the factory, and the warranty status attached to that specific serial number.

  • App name: Siemens Industry Online Support (Android package com.siemens.industry.onlinesupport).
  • Function used: barcode / Data Matrix scanner under the "Product Support" tab.
  • Required connectivity: HTTPS access to support.industry.siemens.com.

Install the application from the official app store, then point the device camera at the Data Matrix on the part. The decoded payload is submitted to the Siemens server, which returns a product record page. Compare the record returned by the scan against the printed label — the MLFB, the firmware version (B: field), and the production date must all match. If the application reports that the serial number is unknown to the Siemens database, the module is either counterfeit or was never registered with Siemens (a rare condition that itself requires investigation).

Siemens Industry Online Support portal
Siemens Industry Online Support on Google Play
Siemens Industry Online Support on the Apple App Store
Limitation: The application confirms whether Siemens has a record of the serial number. It does not certify the operational condition of the part. A returned match is necessary but not sufficient for safety-critical deployment.

4. Cross-Reference Procedure: Part vs. Box

The definitive physical check is a one-to-one comparison between the label applied to the module and the label applied to its original Siemens carton. The procedure below is suitable for incoming-inspection desks and field-engineering audits.

4.1 Step-by-Step Comparison

  1. Place the unwrapped module next to its box on a clean, well-lit inspection surface.
  2. Read the MLFB on the front-face rating plate and confirm it matches the MLFB printed on the box label (e.g., 6ES7 216-3AD23-0XB8 on both).
  3. Read the serial number from the part (line beginning with S) and compare character-by-character to the serial number on the box. Mismatches in any single character are a hard fail.
  4. Scan the Data Matrix on the part with the Siemens app and confirm that the decoded MLFB matches the printed MLFB.
  5. Compare the production date. A box date earlier than the part date is acceptable (part manufactured after packaging). A box date later than the part date is a red flag for re-packaging.
  6. Inspect the box seal. Genuine Siemens cartons carry a security sticker across the closure flap with a serial number that must match the part inside. Tampered seals show wrinkling, glue residue, or fibre tear.

4.2 Decision Matrix

Condition Observed Verdict Action
MLFB matches; serial matches; Data Matrix decodes; box seal intact Genuine Accept; record in asset register.
MLFB matches; serial matches; Data Matrix decodes; box seal broken Possibly refurbished Quarantine; request full traceability from supplier.
MLFB matches; serial does not match Re-housed or re-labelled Reject; photograph and report.
MLFB differs between part and box Counterfeit or substituted Reject; escalate to procurement and Siemens.
Data Matrix decodes to a different MLFB than the printed label Counterfeit (label copied, body substituted) Reject; escalate to Siemens anti-counterfeit.
Serial not in Siemens database Counterfeit or grey-market Reject; escalate.

5. Visual and Mechanical Inspection for Counterfeits

The barcode and serial number match is necessary but not sufficient. Counterfeit operations that produce matching labels are rare; the more common failure mode is a low-quality module body, recycled housing, or substandard connector plating. Apply the following checks after the label comparison.

5.1 Housing and Print Quality

  • Plastic colour and grain: Siemens SIMATIC housings are moulded from a specific grey PC/ABS blend. Counterfeit housings frequently show a slightly different shade, visible mould-flow lines, or sharp ejection marks on the rear face.
  • Print resolution: Genuine labels are laser-printed or industrial inkjet. Examine the characters under a 10x loupe. Dot-matrix artefacts, mis-registration, or smeared edges indicate a desktop printer was used.
  • Weight: A genuine S7-1500 CPU weighs within ±5 % of the published value. A significantly lighter unit suggests missing internals (no real ASIC, or a repurposed lower-spec board in a higher-spec housing).

5.2 Connector and PCB Indicators

  • Front connector plating: Siemens uses a specific gold-flash thickness on removable front connectors. Counterfeit plating tarnishes within days of unboxing.
  • Screw torque on terminal blocks: Genuine captive screws turn smoothly with a defined end-stop. Counterfeit screws either bind or spin freely.
  • PCB silk-screen: Open only when authorised. Genuine PCBs carry a Siemens internal part number, a date code in YYWW format, and the Siplace or Siemens SMT line identifier.

5.3 Firmware and Diagnostic Cross-Check

Power up the module on a known-good test rack and read the following through TIA Portal:

  1. Online > Accessible nodes — confirm the part number reported by the firmware matches the printed MLFB.
  2. Online > Diagnostics — read the serial number reported by the module firmware. This must match the printed serial. A mismatch indicates the firmware image was re-flashed onto a different physical board.
  3. Compare the loaded firmware version (B: field) against the version on the rating plate. A firmware that is several revisions newer than the rating plate suggests a re-flash; a firmware several revisions older is normal for stock that has been on a shelf.

6. Cross-Manufacturer Equivalents

The serial-number-vs-box comparison is a generic principle. The following notes extend the procedure to other major PLC families.

6.1 Allen-Bradley / Rockwell Automation

Logix 5000 modules (CompactLogix, ControlLogix) carry a serial number on the front label and a 2D barcode on the rating plate. The Rockwell Product Authentication process and the RA Knowledgebase support the lookup. Mismatched serial and box values are similarly indicative of re-housing.

6.2 Schneider Electric / Modicon

Modicon M340 and M580 modules carry a serial label in the format BBxxxxxxxxxx. The Schneider EcoStruxure portal provides product record lookup. Schneider factory packaging carries a tear-strip security seal that must be intact.

6.3 Mitsubishi Electric

MELSEC iQ-R and Q-series modules carry a serial number on the rating plate and an Mitsubishi FA traceable production code. The body label and box label are printed in matched pairs; mismatches indicate refurbishment.

6.4 Omron

NX/NJ series modules carry a serial number in the format NNNNNNNNN and a Data Matrix. The Omron Industrial Automation site supports product registration and verification.

7. Procurement-Side Controls

Field verification is the last line of defence. The strongest authentication posture is built into the procurement process.

  • Authorised distribution only. Require suppliers to provide a Siemens Certificate of Origin (CoO) for any lot above a defined value threshold.
  • Two-person receipt. Have one engineer open the box and a second compare label to label. Document the comparison with timestamped photographs.
  • Serial capture at goods-in. Scan every part with the Siemens app at the receiving dock and store the decoded payload against the purchase order line.
  • Quarantine shelf. Maintain a physically separated holding area for parts pending verification; do not commingle verified and unverified stock.
  • Return-on-mismatch. Define, contractually, the supplier obligation to accept return of any part whose serial does not match the box, and to refund the lot value plus handling.

8. Reporting a Suspected Counterfeit

If verification fails, document the part before returning it to the supplier or disposing of it.

  1. Photograph the front-face label at a resolution sufficient to read the serial number.
  2. Photograph the box label, the security seal, and the carton date code.
  3. Capture the TIA Portal diagnostics buffer if the module was powered up.
  4. Record the supplier, the purchase order, the invoice, and the date of receipt.
  5. Submit a report to Siemens through the Industry Online Support portal or to the regional Siemens representative. Siemens maintains a brand-protection programme that investigates reported counterfeits and, where appropriate, supports legal action.
Siemens Industry Online Support
Siemens anti-counterfeit information

9. Storage, Handling, and Re-Verification

Once a part has been accepted, the authentication record must be preserved for the operational life of the asset. Siemens recommends the following practices:

  • Store the original carton in a climate-controlled area between 5 °C and 40 °C, < 75 % relative humidity, away from direct sunlight.
  • Retain the carton for the duration of the warranty period; some warranty claims require the original packaging for return shipment.
  • If a module is removed from service and returned to stock, re-verify the label-to-box match before re-issuing.
  • For modules that have been repaired by a Siemens-authorised repair centre, expect a new serial-number label block adjacent to the original. Both labels must be retained in the asset record.

10. Common Field Questions and Edge Cases

10.1 The serial numbers match but the production date is newer on the box

This is acceptable. The part is typically manufactured and labelled before final packaging; the box may carry the packaging date, which is later. The reverse condition (part newer than box) is suspect.

10.2 The part has no box

Match against the supplier's Certificate of Origin and the Siemens app database. A box-less part is not automatically suspect, but the burden of proof shifts to the supplier's documentation.

10.3 The Data Matrix decodes to a different MLFB than the printed label

The label is counterfeit. The module body is genuine but has been re-housed, or the module body is also counterfeit. In either case, reject the part.

10.4 The serial number is registered but the firmware version is older than the latest released

Normal. Factory firmware is frozen at production. Field updates are tracked separately. Always update firmware to the version supported by your project before commissioning.

10.5 The seal is intact but the serial numbers do not match

Indicates a high-quality counterfeit operation. Escalate to Siemens and to your procurement fraud-control function. Do not return the part to the same supplier.

11. Summary Checklist

Step Check Pass Criterion
1 MLFB on part = MLFB on box Exact match including spaces and hyphens.
2 Serial on part = serial on box Character-by-character equality.
3 Data Matrix decodes to MLFB and serial Siemens app returns a product record.
4 Production date on part is ≤ production date on box Part is not newer than its packaging.
5 Box security seal intact, no re-glue Single uninterrupted seal across the flap.
6 Module firmware serial matches printed serial TIA Portal diagnostics reports the same S-number.
7 Housing, connectors, weight within tolerance Matches published datasheet values.
Field Rule: A genuine Siemens module will pass all seven checks. Any single failure is sufficient grounds to reject the part and trigger a supplier investigation.

Should the barcode and serial number on a PLC part match the barcode and serial number on its box?

Yes. For a genuine, factory-sealed Siemens SIMATIC module (and for equivalent modules from Allen-Bradley, Schneider, Mitsubishi, and Omron), the MLFB, the 10–12 digit serial number, and the Data Matrix on the part must match those printed on the factory box one-to-one. A mismatch indicates re-housing, re-labelling, refurbishment, or counterfeiting, and the part should be rejected pending supplier investigation.

What does a mismatched serial number between part and box indicate?

A serial-number mismatch most commonly indicates that the module has been removed from a different housing, recovered from a scrapped assembly, or re-labelled to disguise its origin. In rare cases it indicates a counterfeit reproduction. The part should be quarantined, photographed, and the supplier's traceability documents should be requested. Do not install the part.

Can the Siemens Industry Online Support app confirm a part is genuine?

The Siemens Industry Online Support app decodes the Data Matrix on a SIMATIC rating plate and returns the official product record from the Siemens database. A successful decode with matching MLFB, serial, and production date is strong evidence of authenticity. A failure to decode, or a record mismatch, is grounds for rejection. The app does not certify the operational condition of the part, and an authenticated part must still pass incoming-inspection tests before deployment.

What should I do if the Data Matrix decodes to a different MLFB than the printed label?

Reject the part. This is a confirmed counterfeit indicator: the label has been copied from one module and applied to a different physical module. Photograph the part and the box, retain the original packaging for evidence, and report the incident to Siemens through the Industry Online Support portal and to your procurement fraud-control function.

Is a part without its original box automatically suspect?

No. A box-less part is not automatically suspect, but the burden of authenticity proof shifts to the supplier's documentation. Require a Siemens Certificate of Origin, scan the Data Matrix with the Siemens app, capture the firmware serial through TIA Portal, and compare all three identifiers (MLFB, serial, firmware serial) for equality. If any of the three cannot be verified, treat the part as unverified and quarantine it.

Back to blog