A BIR Certificate of Registration is one of the first documents people ask for when checking whether a Philippine business, freelancer, online seller, or supplier is properly registered with the Bureau of Internal Revenue. The problem is that many people do not know what a real BIR Certificate of Registration should show, whether an old certificate without a QR code is still valid, or how to confirm that the document was not edited. This guide explains how to verify a BIR Certificate of Registration in the Philippines, what details to check, when to use the QR code, what to do if there is no QR code, and what red flags to watch for before paying, contracting, or transacting with a business.

What Is a BIR Certificate of Registration?

A BIR Certificate of Registration, commonly called BIR Form 2303, COR, or eCOR if issued electronically, is the BIR document showing that a taxpayer is registered for tax purposes.

For a business, professional, freelancer, corporation, branch, or facility, the COR normally identifies:

Detail on the COR	Why it matters
Registered taxpayer name	Shows the legal person registered with BIR
Trade name or business name	Helps connect the tax registration to the store, brand, clinic, shop, or online page
TIN and branch code	Identifies the taxpayer and specific head office or branch
Registered address	Shows where the business or branch is registered
Registered activity or line of business	Helps confirm whether the declared activity matches what the seller is actually doing
Tax types	Shows whether the taxpayer is registered for income tax, VAT or percentage tax, withholding tax, and other applicable tax types
RDO	Shows the Revenue District Office handling the registration
Registration date	Helps determine when the taxpayer registered the business
QR code, if available	Allows online verification of the COR/eCOR or BIR Registration Seal Badge

A COR is not the same as a DTI certificate, SEC certificate, mayor’s permit, barangay clearance, FDA license, business permit, or tax clearance. It proves BIR registration. It does not automatically prove that the business is fully compliant with all taxes, allowed to operate in every industry, or free from unpaid liabilities.

Legal Basis for BIR Registration in the Philippines

The main legal basis is Section 236 of the National Internal Revenue Code of 1997, as amended by Republic Act No. 11976, the Ease of Paying Taxes Act. It requires every person subject to internal revenue tax to register once with the appropriate Revenue District Office, either electronically or manually, within the required period, such as before starting business or before paying any tax due. (Lawphil)

RA 11976 also pushed the BIR toward digitalization, including automated systems for registration, TIN issuance and validation, filing, submission of documents, payment of taxes, and taxpayer services. (Lawphil)

Under Revenue Regulations No. 7-2024, business taxpayers must register and secure a BIR COR, comply with invoicing requirements, register books of accounts, secure the required authority or notice relating to invoices, and attend the taxpayer’s initial briefing when required by the RDO. RR 7-2024 also states that the old ₱500 Annual Registration Fee has been repealed and is no longer applicable effective January 22, 2024.

RR 7-2024 further provides that each head office, branch, and facility must be issued a COR or eCOR within the period prescribed in the BIR Citizen’s Charter after complete requirements are submitted. It also requires the COR/eCOR to be posted or exhibited at the place of business in a way clearly visible to the public.

The New QR Code System for BIR COR and Registration Seal Badge

In 2026, the BIR issued Revenue Memorandum Circular No. 38-2026, announcing the availability of a Quick Response or QR Code in the BIR COR/eCOR and prescribing the BIR Registration Seal Badge for online businesses, e-commerce sellers, marketplace merchants, content creators, influencers, professionals, and other persons earning through digital or electronic means.

The QR code is important because it allows banks, customers, government agencies, platforms, and other relying parties to verify the authenticity of the BIR COR/eCOR or BIR Registration Seal Badge online. RMC No. 38-2026 specifically says the QR code may be scanned using any mobile application or QR code scanner, and the relying party must make sure the URL is the official BIR verification domain or BIR link before relying on the result.

A key practical point: existing BIR COR/eCOR documents without a QR code are not automatically invalid. RMC No. 38-2026 says taxpayers are not required to replace existing COR/eCOR documents that do not contain a QR code, although they are encouraged to update or replace them if they need to secure the BIR Registration Seal Badge.

How to Verify a BIR Certificate of Registration Using the QR Code

If the COR/eCOR or BIR Registration Seal Badge has a QR code, this is the fastest verification method.

Ask for a clear copy of the COR/eCOR or BIR Registration Seal Badge. The QR code must be readable. Do not rely on a blurry screenshot, cropped image, or document where the QR code is covered.
Scan the QR code using your phone camera or a QR scanner. Most smartphones can read QR codes through the camera. A third-party QR scanner is also acceptable, but avoid apps that force you to log in or enter personal information unnecessarily.
Check the destination URL before opening or relying on it. The BIR specifically reminds relying parties to ensure that the displayed URL is the official BIR verification domain or BIR link. A suspicious shortened link, misspelled domain, or private file-sharing link is a red flag.
Compare the verification result with the document. The name, TIN or identifying registration details, business name, registration status, and other visible details should match the COR/eCOR or seal badge.
Compare the BIR details with the seller’s other public documents. For a sole proprietor, compare with the DTI business name record. For a corporation or partnership, compare with the SEC record. For a physical store, compare with the mayor’s permit and invoice details.
Save evidence of the verification. If this is for procurement, onboarding, due diligence, leasing, marketplace accreditation, or a significant payment, save the scanned result, date of verification, copy of the COR/eCOR, invoice sample, and the seller’s official business profile.

How to Verify a BIR COR Without a QR Code

Older CORs may not have a QR code. That does not automatically mean the certificate is fake, but it means verification requires more cross-checking.

1. Check the document details manually

Look for inconsistencies such as:

Wrong or missing TIN format
Business name not matching the seller’s page, store, invoice, DTI certificate, or SEC record
Address that does not match the store, lease, office, or delivery address
Tax types that do not match the business activity
Edited fonts, uneven spacing, altered dates, or obviously pasted text
A branch operating under a head office COR only, when the branch should have its own COR/eCOR
A COR showing an old address even though the business has moved

A common real-world issue is a seller using the owner’s personal TIN or an old business registration while operating under a new store name. Under RR 7-2024, each business name used, including a store name used in an online store or e-commerce platform, must be registered with BIR and reflected in the COR if also registered with DTI or SEC.

2. Ask the taxpayer to provide a current eCOR or updated COR

If the person is really registered, they should be able to access or request updated registration documents through the BIR’s official registration channels, including ORUS where available. The BIR describes the Online Registration and Update System or ORUS as a web-based system for end-to-end taxpayer registration and updating of taxpayer information. (Bureau of Internal Revenue)

For businesses that transact online, asking for the newer QR-enabled COR/eCOR or BIR Registration Seal Badge is reasonable, especially if you are a bank, buyer, platform, landlord, or corporate client doing compliance checks.

3. Verify with the appropriate RDO when the transaction is important

For high-value transactions, supplier onboarding, lease approval, loan processing, platform accreditation, or fraud concerns, the safer route is to verify with the taxpayer’s Revenue District Office. The RDO is the local BIR office that has jurisdiction over the taxpayer’s registered address or head office.

In practice, you may need:

Information to prepare	Why it helps
Copy of the COR/eCOR	Lets the RDO see the exact document being verified
Taxpayer name and trade name	Helps match the record
TIN and branch code, if visible	Helps identify the taxpayer
RDO shown on the COR	Helps route the inquiry
Reason for verification	Helps explain whether this is procurement, banking, leasing, marketplace accreditation, or fraud concern
Your authority or relationship to the taxpayer	Important because BIR records include confidential taxpayer information

The BIR may be cautious about releasing taxpayer information because tax records and personal data are protected. For individual TIN validation, the BIR’s official TIN validation page states that information submitted is treated with confidentiality under Republic Act No. 10173, the Data Privacy Act of 2012. (Bureau of Internal Revenue)

What to Verify Besides the BIR COR

A BIR COR is only one part of business verification. Depending on the transaction, you may need to check other records.

Situation	What else to check
Sole proprietor	DTI Business Name Search
Corporation or partnership	SEC registration documents or SEC Express records
Cooperative	CDA registration
Physical store	Mayor’s permit, barangay clearance, lease address, posted COR
Online seller or marketplace merchant	BIR Registration Seal Badge, platform profile, invoices, registered store name
Professional or freelancer	COR/eCOR, invoices, PTR if applicable, service contract details
Regulated goods or services	Industry license, such as FDA, DOH, SEC, BSP, PCAB, LTFRB, or other agency permits

The DTI Business Name Search allows verification of a specific business name through exact name search, while the SEC Express System allows searches using a company’s registered name or SEC registration number for available SEC documents. (BNRS)

Special Rules for Online Sellers, Freelancers, Influencers, and Digital Businesses

Online businesses have stricter posting rules because customers often cannot inspect a physical store.

RR 15-2024 defines online business broadly to include commercial activity over the internet, including e-commerce platforms, e-marketplaces, online sellers or merchants, e-retailers, social commerce, online freelance services, transport and delivery services, online advertising services, online travel services, and other digital channels.

Under RR 15-2024, covered persons operating through a website, social media page, application, platform, or other digital means must conspicuously display the electronic copy of the BIR COR/eCOR so that it is easily accessible and visible to buyers or customers. The same regulations allow the BIR to issue closure or takedown orders for covered persons doing business in the Philippines but failing to register as required.

RMC No. 38-2026 later introduced the BIR Registration Seal Badge to address concerns about posting sensitive information in the full COR/eCOR. For online businesses, the seal badge may be displayed in lieu of posting the entire COR/eCOR, and the badge itself should remain clear, readable, and unaltered.

Common Red Flags When Checking a BIR Certificate of Registration

Be cautious if you see any of these:

The QR code opens a non-BIR website, shortened URL, file drive, messaging app, or private landing page.
The seller refuses to provide a clear copy of the COR/eCOR or BIR Registration Seal Badge.
The name on the COR is different from the invoice, bank account, DTI name, SEC name, or marketplace profile.
The COR shows a business activity unrelated to what the seller is actually offering.
The certificate is for a head office only, but the transaction is with a branch or separate store.
The COR is visibly edited, pixelated, cropped, or inconsistent in layout.
The seller claims “BIR registered” but issues no invoice.
The seller says the COR must be renewed yearly and asks for extra payment for “annual registration renewal.” The old annual registration fee has already been repealed under RR 7-2024.
The seller uses a DTI or SEC registration as if it were a BIR COR.
The business is online but has no visible COR/eCOR, seal badge, or accessible proof of BIR registration.

What If the BIR COR Appears Fake or Cannot Be Verified?

If the certificate cannot be verified, do not immediately assume fraud. There may be innocent reasons, such as an old COR without QR code, recent registration update, wrong branch code, system downtime, or a mismatch between legal name and trade name.

A practical sequence is:

Ask for a clearer copy or QR-enabled eCOR.
Ask for the BIR Registration Seal Badge if the business operates online.
Ask for a sample BIR-registered invoice.
Compare the COR with DTI, SEC, mayor’s permit, invoice, and platform details.
Ask the taxpayer to have the RDO confirm or update the registration.
For serious transactions, require confirmation before releasing payment or onboarding the supplier.
For suspected falsification, preserve screenshots, documents, chats, receipts, payment records, and delivery records.

Using or presenting a falsified public or official document can have criminal consequences under the Revised Penal Code, particularly the provisions on falsification of public, official, or commercial documents under Articles 171 and 172. (Lawphil)

Separately, under RR 15-2024, failure to register, failure to post COR/eCOR, failure to register store names, and allowing unregistered sellers or merchants to use a premises or digital platform may result in administrative consequences and compromise penalties depending on the violation.

Practical Examples

Example 1: You are buying from an online seller

The seller posts a “BIR registered” badge on its profile. Scan the QR code. Check that it opens the official BIR verification page and that the business name or registered taxpayer details match the store name. If the seller only sends a cropped image without a QR code, ask for the full seal badge or current eCOR.

Example 2: You are onboarding a supplier for your company

Ask for the COR/eCOR, latest invoice sample, DTI or SEC registration, mayor’s permit if applicable, and contact details. Compare the legal name, TIN, address, and invoice details. If the supplier is a branch, make sure the branch registration is reflected.

Example 3: You are a landlord leasing to a business

A valid COR helps show that the tenant is BIR-registered, but it does not replace the lease, mayor’s permit, zoning, or building requirements. If the tenant is a corporation, also check SEC documents and authorized signatories.

Example 4: You are a foreign client hiring a Philippine freelancer

Ask for the freelancer’s COR/eCOR if the freelancer claims to be self-employed or professionally registered. Check whether the registered activity matches the services offered. For cross-border documentation, an apostille may authenticate a Philippine public document for use abroad, but it does not prove that the taxpayer is currently compliant or free from tax liabilities.

Example 5: The seller’s COR has no QR code

Do not treat the missing QR code as automatic proof of fraud. Existing COR/eCOR documents without QR code are not required to be replaced. But if the transaction is important, ask for an updated eCOR or RDO confirmation, especially if the business operates online or uses an e-commerce platform.

Frequently Asked Questions

Can I verify a BIR Certificate of Registration online?

Yes, if the COR/eCOR or BIR Registration Seal Badge has a QR code. Scan the QR code and make sure it opens the official BIR verification domain or BIR link. Then compare the displayed information with the document and the business’s other records.

Is a BIR COR without a QR code still valid?

It can still be valid. RMC No. 38-2026 says taxpayers are not required to replace existing COR/eCOR documents that do not contain a QR code, although they are encouraged to update or replace them if they need a BIR Registration Seal Badge.

Is BIR Form 2303 the same as the Certificate of Registration?

Yes. BIR Form 2303 is commonly referred to as the BIR Certificate of Registration or COR. For electronically issued documents, people often use the term eCOR.

Does a BIR COR prove that the business is legitimate?

It proves BIR registration, but not everything else. A business may still need DTI or SEC registration, a mayor’s permit, sector-specific licenses, proper invoices, and compliance with tax filing and payment obligations.

Can I verify someone’s TIN through BIR?

The BIR has official channels for TIN validation and inquiry, but access to taxpayer information is limited by confidentiality and data privacy rules. The public should not expect unrestricted access to another person’s full tax records. (Bureau of Internal Revenue)

What should online sellers display: the full COR or the BIR Registration Seal Badge?

Under RR 15-2024, online businesses must display proof of registration that is easily visible and accessible to customers. RMC No. 38-2026 introduced the BIR Registration Seal Badge, which online sellers and digital businesses may display in lieu of posting the full COR/eCOR.

Does a BIR COR expire every year?

A COR is not renewed yearly in the same way as many local business permits. The old ₱500 Annual Registration Fee was repealed and is no longer applicable effective January 22, 2024. However, the taxpayer must update BIR registration details when there are changes, such as address, business name, tax type, branch, or closure.

What if the name on the COR is different from the store name?

It may be normal if the COR shows the legal taxpayer name and the store uses a registered trade name. But the store name or business name should be properly registered and reflected where required. A mismatch with no explanation is a red flag.

Can a foreigner rely on a Philippine BIR COR?

A foreigner may use the COR as proof that a Philippine taxpayer is registered with BIR, but should still check the legal identity of the contracting party, SEC or DTI registration, authority of signatories, invoices, and any industry-specific licenses. A COR does not by itself prove authority to engage in a regulated business or compliance with foreign investment, immigration, or licensing rules.

What is the safest way to verify a BIR COR for a high-value transaction?

Use the QR code if available, compare all details with DTI or SEC records and invoices, request an updated eCOR or BIR Registration Seal Badge, and require confirmation from the taxpayer’s RDO or authorized representative if the transaction involves significant money, credit, lease exposure, procurement risk, or regulatory compliance.

Key Takeaways

A BIR Certificate of Registration, also called BIR Form 2303 or COR, proves BIR registration but does not prove full legal or tax compliance.
The fastest way to verify a newer COR/eCOR or BIR Registration Seal Badge is to scan its QR code and confirm that it opens the official BIR verification link.
An older COR without a QR code is not automatically fake, but it requires more manual checking.
Always compare the COR with invoices, DTI or SEC records, mayor’s permit, registered address, business name, and actual business activity.
Online sellers, freelancers, influencers, digital businesses, and marketplace merchants are expected to display accessible proof of BIR registration.
The BIR Registration Seal Badge may be used by online businesses instead of exposing the full COR/eCOR.
Be careful with edited screenshots, mismatched names, unofficial QR links, and sellers who refuse to issue invoices.
For serious transactions, verification should include QR checking, document comparison, and RDO confirmation when necessary.