Keep Your Own Proof Records for Signed Football Shirts

Most of the proof behind a signed football shirt does not live in your house. It lives on a server belonging to the company that issued the certificate, and you are borrowing access to it. This is how to stop borrowing.

A certificate number is only as useful as the database it resolves against, and databases are owned by people.

Nothing here is a criticism of any authenticator. It is a description of how third-party records behave over long periods, which is the timescale a collection actually runs on.

Why an Issuer's Database Is a Convenience, Not a Guarantee

When you check a certificate number online, you are asking a company to confirm its own record. That works beautifully right up until the company cannot answer, and the reasons it might not are more varied than collectors usually assume.

A collection is held for decades. Companies are not. Over the life of a serious collection, the odds that every issuing body behind it is still trading, still solvent, still running the same lookup, and still holding the same archive are not as good as the market behaves as though they are.

You did not buy access to a database. You bought an opinion, and somebody else volunteered to store the receipt.

The Four Ways a Record Stops Being Reachable

These are not hypotheticals. All four have happened, and only the first one repairs itself.

• The platform goes down temporarily. Heritage Auctions was hit by ransomware in 2019 that took its website offline through a weekend, with auctions rescheduled and some bids lost. The company refused to pay and restored service itself. Ordinary, survivable, and the version everyone imagines.
• The archive is partly lost while the company trades on. Upper Deck no longer supports online verification for items authenticated before 2002. Those hologram numbers do not resolve on the site, and verification depends on contacting the company directly, which does not always produce an answer. The business is still there. That slice of the record is not.
• The data escapes rather than vanishes. A breach does not remove your record, it copies it. For a collector base known to own valuable objects, a leaked file of names, addresses and account details is a targeting list, and that risk outlives the incident by years.
• The authority stops existing. Global Authentication Inc closed in 2009. Its legacy certificate data remains checkable today only because a different, unaffiliated company hosts it as a courtesy to the closed firm's former customers. That is a generous arrangement. It is not a guarantee, and it could end on any given morning.

What the Art Market Already Learned

If the fourth case sounds remote, it is close to standard practice at the top of the fine art market, and the collectibles trade has not caught up with the implications.

The Andy Warhol Art Authentication Board reviewed roughly 6,000 works between 1995 and 2011 and dissolved in 2012, after litigation costs reported at around ten million dollars against an annual running cost of four to five hundred thousand. The Basquiat authentication committee, formed in 1993, reviewed over 2,000 works and dissolved in September 2012. The Keith Haring foundation disbanded its board the same year. Foundations connected to Calder, Krasner, Lichtenstein, Pollock, Noguchi and Picasso are reported to have done the same, all under litigation exposure.

Tens of thousands of opinions now exist with no issuing body standing behind them. For Warhol there is no single gatekeeper for attribution at all, and the art literature describes the Basquiat disbandment as having left more room for forgeries and works of doubtful provenance to enter the market.

The owners who came through that intact were the ones holding a complete file, not the ones holding a phone number.

What to Capture, and in What Form

The principle is simple. Anything that proves what you own should exist in a copy you control, in a format that does not need anyone else to be online. Five things, and none of them take long.

• The certificate number as an image, not as typed text. Photograph the label, sticker or hologram unobstructed and in focus, close enough to read the number. A number typed into a note has lost the thing that makes it evidence, which is that it appears on the object.
• A dated capture of the lookup result, taken while the lookup exists. A full-page screenshot with the address bar and the date visible. If the issuer offers a PDF, save that too. This is the single item that becomes impossible to obtain later, and it is the one most collectors skip.
• The physical letter, kept flat and unlaminated. A Letter of Authenticity carries the certification number and an image of the certified item, and it needs no server, no account and no company. Photograph it as well, so a copy survives a flood as well as an outage.
• The item itself, properly documented. The signature in raking light so the ink behaves visibly, the placement against the crest or competition patch, the neck label and internal codes, the nameset and any patches. This is what ties the certificate to the object rather than to a number.
• The paperwork around the purchase. The listing as it was written, the invoice, the correspondence. What an item was described as is often the decisive fact later, and listings disappear faster than certificates do.

For the detail of what each document type actually proves, the difference between a COA, an LOA and an NFC record is worth reading before you start filing, because it changes what you bother to keep.

Where to Keep It

One folder per item, named for the item, holding everything above. Two copies in two places, one of which is not in your house. Open formats, so JPEG and PDF rather than whatever an app wants to store it in.

Avoid making the archive itself a dependency. A collection-management service that holds your only copy has reproduced the exact problem this article is about, one layer further from the object.

When a Lookup Is Unavailable

If you need to verify something today and the issuer's database is not answering, work in this order.

• Check your own file first. If you captured the result when the lookup worked, you already have the answer.
• Contact the issuer directly. Authentication teams frequently continue operating when the website does not, and a certificate number plus a clear photograph is usually enough for a human to confirm.
• Fall back on the object. The label, the letter and the item should agree with each other and with the description you were given. The serial and hologram checks you can do by hand do not require anybody's server.
• Wait, if you can. An unverifiable certificate is a reason to delay a purchase, not a reason to assume the worst about an item. An issuer being offline is usually exactly what it says it is, as the September 2026 Beckett outage illustrates.

What a Third-Party Lookup Service Does and Does Not Solve

Aggregator sites now offer certificate checks across many authenticators in one place, including fraud flagging against reported fake or reused numbers. They are genuinely useful, particularly for spotting a number that has been cloned onto a second item.

They do not remove the dependency. They move it. An aggregator that mirrors an issuer's data is a second company whose servers, business model and continued existence you are now relying on, and it has no contractual relationship with the body that formed the opinion. Use one as a convenience, exactly as you used the issuer's own lookup, and keep your own file regardless.

If You Are Buying or Selling

As a buyer, ask for the file rather than the link. A seller who can produce clear photographs of the label, the letter and the item within a few minutes is telling you something about how they work. One who can only offer a URL is relying on the same borrowed access you are.

As a seller, keeping the file is not defensive paperwork, it is part of the value. Proof has limits either way, and a complete, self-contained record is what lets a careful buyer accept those limits instead of walking away.

Your own copies are the only part of the chain that cannot be switched off by somebody else.

By Paul de Metter, founder of Walkouts. Researched from published sources and our own records. AI did the writing up. Paul did the checking and the sign-off.