The strongest control is prevention. Buy through the original component manufacturer or an authorized source whenever possible. When a shortage forces another route, increase the evidence and inspection requirements before issuing the purchase order. A CoC, lot and date-code records, X-Ray, XRF, decapsulation, and electrical testing can support the decision, but SAE AS6171 explains the limits of testing: no test sequence replaces a known chain of custody.
Why Does IC Sourcing Create PCBA Supply Risk?
IC sourcing creates disproportionate PCBA risk because the entire production schedule may depend on a small number of critical line items. Passive components may be available, the bare PCB may be ready, and SMT capacity may be reserved, yet the work order still cannot be released if one required IC has no approved supply.
The critical IC controls the material release date
A quoted PCBA lead time is only stable when the critical parts have been checked against the correct manufacturer part number, required quantity, approved channel, lifecycle status, packaging, lot rules, and delivery date. A website quantity or broker quotation is an availability signal, not proof that usable stock has been reserved.
For example, displayed stock may be allocated, mixed by date code, restricted by region, or incompatible with the AVL. Purchasing must also cover panel demand, production loss, test samples, and spares. Otherwise, the apparent stock may not cover the production requirement.
This is why GNS begins its component management process with the BOM, approved manufacturers, preferred sourcing route, and project requirements rather than treating component purchasing as a separate transaction.
Shortage pressure increases counterfeit exposure
Shortages compress decision time and widen the sourcing route. Buyers may be asked to approve an independent distributor, broker, excess inventory, or customer-owned lot because the normal channel cannot meet the schedule. That does not mean every non-authorized lot is counterfeit. It means the chain of custody is weaker and the control plan must reflect the added uncertainty.
The U.S. Department of Defense electronic-parts policy gives useful risk logic even for non-defense buyers: it prioritizes original manufacturers and authorized suppliers, while non-standard sources require established prevention processes that include inspection, testing, and authentication. The DFARS electronic-parts sourcing policy is not a universal requirement for commercial PCBA projects, but it demonstrates an important purchasing principle: source pedigree should determine the level of additional control.
Which Sourcing Controls Reduce Counterfeit Exposure?
The most effective controls are channel verification, document consistency, and purchase-order requirements defined before the lot ships. Incoming inspection is important, but it should confirm a controlled purchase rather than compensate for a sourcing decision that has no owner, no evidence, and no acceptance criteria.
Authorized sourcing should remain the default
An authorized distributor operates under a manufacturer relationship for the product line. That status should be verified for the manufacturer and region involved, not assumed from a familiar company name or a logo on a quotation. Buyers should retain the supplier quotation, manufacturer authorization evidence where required, purchase record, packing list, and available conformance documentation.
The purchase order should state the manufacturer, MPN, quantity, packaging, compliance requirement, acceptable date-code range, lot rule, handling requirement, and substitution policy. This prevents a supplier from changing a technical requirement to solve an availability problem.
The table below shows how the required control changes with the sourcing route.
| Sourcing route | Typical project use | Evidence to confirm | Recommended release decision |
|---|
| Original component manufacturer | Strategic or volume purchase | Manufacturer order and shipping records | Release after document and receiving checks |
| Authorized distributor | Normal production purchasing | Authorization status, CoC where applicable, packing and lot records | Preferred route when stock and schedule fit |
| Customer-approved independent source | Shortage or obsolete part | Supplier approval, chain-of-custody evidence, photos, lot data, inspection plan | Release only after written risk acceptance |
| Broker or excess inventory | Last-resort schedule recovery | Seller history, ownership records, detailed lot evidence, test samples | Hold until enhanced inspection is accepted |
| Customer-supplied material | Allocated or proprietary supply | Ownership, quantity, condition, storage history, lot and date codes | Receive under an agreed consigned-material plan |
The decision should therefore be based on the lowest controlled project risk, not automatically on the lowest unit price.
CoC and traceability records must agree
A CoC is valuable when it identifies the supplier, customer or order, manufacturer, MPN, quantity, lot or date code where applicable, and a clear statement of conformity. It becomes weaker when the document is generic, cannot be tied to the shipped labels, or conflicts with the physical parts.
Buyers should compare the CoC with the quotation, purchase order, packing list, reel or tray labels, manufacturer markings, and receiving quantity. Date codes should be plausible and consistent with the component lifecycle. Mixed lots should be disclosed. Relabeling, damaged seals, inconsistent fonts, resurfacing, oxidation, reworked leads, or unexplained label layers are reasons to quarantine the material and escalate the review.
For a practical overview of common fraud patterns, GNS’s explanation of counterfeit electronic component types can help purchasing and quality teams recognize why paperwork and physical inspection must be evaluated together.
How Should High-Risk IC Lots Be Inspected?
High-risk lots should be inspected with a test sequence selected for the component, sourcing route, application risk, available comparison data, and suspected failure mode. More tests do not automatically produce certainty. The goal is to collect enough relevant evidence to approve, reject, or escalate the lot under the customer’s defined risk level.
Start with non-destructive evidence
The initial review normally includes document verification, packaging and label inspection, external visual inspection, marking comparison, dimensions, lead or ball condition, and sample selection. Standalone IC X-Ray can then reveal internal construction differences such as die size, die position, lead-frame geometry, bond-wire pattern, missing connections, or signs of prior damage.
The SAE radiological inspection method covers film and digital radiography, real-time radiography, and computed tomography for suspect-part inspection. The commercial lesson is straightforward: X-Ray findings must be interpreted against an appropriate reference and the package type. A different internal image may justify further investigation, but it is not automatically proof of counterfeiting because legitimate manufacturing revisions can also change internal construction.
XRF analysis can examine elemental composition in leads, finishes, or package-related materials. It may help identify an unexpected finish or material inconsistency, but it cannot by itself prove the die identity or complete electrical performance. Its value depends on the suspected anomaly and the comparison baseline.
The following matrix connects each method to the decision it can support.
| Method | What it can help evaluate | Important limitation | Typical decision value |
|---|
| Document and label review | Order consistency, lot identity, stated pedigree | Documents can be incomplete or falsified | Establishes whether the lot matches the purchase |
| External visual inspection | Marking, resurfacing, leads, package damage | Sophisticated alteration may not be visible | Screens samples and directs deeper testing |
| Standalone IC X-Ray | Die, lead frame, bond wires, internal anomalies | Requires suitable reference and interpretation | Non-destructive comparison before assembly |
| XRF analysis | Elemental composition and finish differences | Does not verify die function or full identity | Supports material-consistency assessment |
| Decapsulation | Die markings, internal structure, bond condition | Destructive and sample-based | Strong escalation method for suspect active devices |
| Electrical testing | Pin behavior and selected performance parameters | Coverage depends on test program and conditions | Checks whether samples behave as specified |
No row in the matrix should be used as a universal pass certificate. The methods answer different questions.
Escalate with destructive and electrical tests
Decapsulation exposes the die and internal construction so the laboratory can compare die markings, topology, bond layout, and other features. Because the method destroys the tested sample, the buyer must define sample quantity, disposition, and replacement cost before the lot is purchased. The SAE decapsulation method describes its use for examining internal structure and determining whether a part is suspect counterfeit.
Electrical testing can range from basic pin and functional checks to parameter testing, burn-in, temperature cycling, or other conditions selected for the device and application. The SAE electrical test method emphasizes that users define test levels and that laboratories need appropriate technical capability, equipment, procedures, and protocols.
The test plan should therefore identify the exact device, datasheet revision, parameters, test conditions, sample size, acceptance criteria, reference samples, reporting format, and authority for disposition. A vague requirement such as “test for authenticity” is not an adequate procurement specification.
What Should Buyers Approve During an IC Shortage?
Buyers should approve a shortage purchase only after comparing schedule recovery with technical, quality, commercial, and lifecycle consequences. The correct decision may be to buy the lot, qualify an alternative, reschedule the build, use customer-supplied inventory, or redesign the affected circuit.
Separate stock recovery from part substitution
A shortage lot of the original MPN and an alternative IC are different decisions. The first asks whether the supply route and physical lot are acceptable. The second asks whether another part will perform correctly in the design and remain acceptable for manufacturing, firmware, compliance, and field support.
For the original MPN from a higher-risk source, review pedigree, lot condition, inspection coverage, test cost, sample destruction, warranty, return rights, and the residual risk after testing. For an alternative MPN, engineering should compare package, footprint, pinout, voltage, current, timing, memory, temperature grade, MSL, firmware behavior, programming, safety impact, and regulatory consequences. Quality and the end customer may also need to approve the change.
Do not let the purchasing team make an electrical-equivalence decision from a distributor cross-reference alone. Likewise, do not let engineering approve a technically compatible substitute without checking actual stock, lifecycle, MOQ, and repeat-order availability.
Use a written risk and approval record
The approval record should state why the standard route is unavailable, which options were evaluated, what evidence and tests support the selected source, who accepts the remaining risk, and whether approval applies to one lot or a recurring route.
A temporary shortage approval should not silently change the AVL or master BOM. Link it to the BOM revision, purchase order, work order, lot quantity, production quantity, and expiry condition. If the project later moves to mass production, the team should return to the preferred source or complete a formal supplier and part-qualification process.
This control prevents repeated debates, clarifies responsibility for testing or rejected material, and supports a realistic schedule. Inspection samples, laboratory turnaround, customer review, replacement purchasing, and possible redesign all require time.
How Does GNS Connect IC Sourcing to PCBA Production?
GNS connects sourcing to production by reviewing the BOM before purchase, controlling received materials, and linking accepted components to the relevant project and manufacturing records. This is important because a good purchasing document has limited value if the material is later mixed, misidentified, stored incorrectly, or issued against the wrong BOM revision.
Risk review begins before the purchase order
For critical ICs, the sourcing review can cover the exact MPN, manufacturer, lifecycle status, required quantity, target delivery, preferred channels, AVL restrictions, acceptable alternatives, date-code rules, CoC needs, and inspection requirements. GNS supports authorized-channel procurement, CoC, lot and date-code traceability, standalone IC X-Ray, XRF, decapsulation, and electrical testing according to project risk and requirements.
These capabilities should be specified rather than assumed. Not every authorized lot needs destructive analysis, and not every independent lot can be made acceptable by adding tests. GNS and the customer should agree on the sourcing route, test scope, acceptance criteria, reporting, and approval owner before material release.
The company’s published quality assurance controls describe supplier vetting, incoming-material specifications, process records, and MES-supported traceability. For the buyer, the relevant evidence is the project-specific output: approved source, receiving record, lot identity, inspection result, nonconformance disposition, and the link to the production order.
Traceability must continue through storage and issue
Accepted ICs should retain their manufacturer, MPN, quantity, lot, date code, packaging, MSL status where applicable, receiving date, storage location, and project ownership. Customer-supplied and restricted materials should be identified and segregated. Material issue should be checked against the released BOM and work order.
GNS’s smart warehouse traceability process describes component identification, BOM-linked handling, scanning, storage records, and traceability reporting. These controls help answer practical questions after production: which lot was used, which work order received it, what quantity remains, whether another lot was mixed, and what records can be supplied for an audit or investigation.
Traceability does not prevent every defect. It reduces uncertainty and improves containment. If an incoming or field issue appears, the team can identify affected stock and builds more efficiently instead of treating every finished unit as equally exposed.
What Information Is Needed for an IC Risk Review?
An effective review needs enough information to make a purchasing and manufacturing decision, not only a list of part numbers. The buyer should provide the commercial target, technical restrictions, traceability expectations, and approval route together.
Submit complete component and project data
Start with the current BOM revision in Excel or CSV format. Include internal part number, manufacturer, exact MPN, description, package, quantity per assembly, number of assemblies, approved manufacturers, approved alternatives, DNP status, and do-not-substitute lines.
For each critical IC, add:
- Required quantity including prototypes, production loss, test samples, and spares
- Current supplier or nominated source
- Preferred and prohibited sourcing channels
- Target material-ready and finished-goods dates
- Acceptable lot and date-code range
- Lot-consistency or single-lot requirement
- CoC and traceability-document requirements
- RoHS, REACH, country-of-origin, or sector-specific restrictions
- Packaging, MSL, dry-pack, and storage requirements
- Programming, firmware, or security-key requirements
- Inspection and authentication expectations
- Approved laboratory or reporting format where required
- Alternative-part approval owner and response deadline
This gives sourcing, engineering, quality, and production the same release conditions.
Define the pass condition before buying
The review should end with a clear disposition for every critical line: approved source, conditional source, alternative required, customer-supplied, redesign review, schedule risk, or no-buy. Conditional approval must list the missing evidence or tests and name the person authorized to release the lot.
Buyers should also define the commercial consequences of failure. Confirm who owns test samples, whether destructive samples are included in the purchased quantity, who pays for inspection, what happens after a failed test, whether the material can be returned, and how replacement lead time affects the PCBA schedule.
This turns IC sourcing from an emergency purchasing activity into a controlled project decision. It also gives the manufacturer a defensible basis for quotation validity, material reservation, incoming inspection, and production scheduling.
Conclusion
Submit critical ICs before material release
IC sourcing for PCBA is safest when the team prevents risk through authorized channels and then applies additional evidence and testing only where the sourcing route, application, or lot justifies it. Channel status, CoC, lot and date-code traceability, X-Ray, XRF, decapsulation, and electrical testing each answer different questions; none should be presented as a universal guarantee.
Before approving a shortage purchase, align procurement, engineering, quality, and manufacturing on the exact MPN, quantity, source, documentation, test scope, acceptance criteria, residual risk, and approval owner. To obtain a project-specific review, submit your critical IC list to GNS with the current BOM revision, target build quantity, delivery date, AVL rules, date-code requirements, preferred channels, and any proposed alternatives.
Frequently Asked Questions
Practical IC sourcing decisions
Q1.Can a CoC prove that an IC is authentic?
A CoC supports traceability when tied to the shipped lot. Check it against the purchase order, labels, MPN, quantity, lot, and date code. It does not replace source verification.
Q2.When should a buyer require standalone IC X-Ray?
Consider it when custody is incomplete, the source is outside the preferred channel, or application risk justifies internal comparison. Use reference data and acceptance criteria because legitimate revisions can change images.
Q3.Are decapsulation and electrical testing required for every shortage lot?
No. Select them by component type, source risk, criticality, evidence, suspected anomaly, cost, and schedule. Decapsulation is destructive; electrical-test coverage depends on defined conditions.
Q4.Can GNS source through an independent distributor?
A non-authorized route may be considered when authorized stock is unavailable and the customer accepts a documented control plan. Approve its evidence, inspection, cost, schedule, and residual risk before purchase.
Q5.What should be sent for the fastest IC risk review?
Send the current BOM, exact MPNs, build quantity, delivery date, AVL, preferred channels, proposed sources, date-code and lot rules, CoC and test requirements, do-not-substitute items, and the alternative-approval contact.
