Counterfeit perfume products pose persistent economic and health risks, yet conventional safeguards such as holograms, batch codes, and printed serial numbers offer no cryptographic guarantee of authenticity and remain vulnerable to identifier reuse, whereby a genuine code copied from an authentic product can be applied undetected to a counterfeit. This paper designs, implements, and evaluates a QR-based authentication system that closes this structural gap by cryptographically binding each product’s registration data to a manufacturer-held private key. Product metadata is hashed with SHA-256 and signed using the Elliptic Curve Digital Signature Algorithm (ECDSA) over the SECP256k1 curve; the signed payload is encoded into a QR code affixed to the packaging and verified through a login-free public portal and Android companion application. Black-box security evaluation using Burp Suite confirmed correct rejection of SQL injection and serial-number tampering across four test cases for both a hash-only baseline and the proposed hybrid system, achieving a 100% pass rate. Comparative analysis demonstrates that while both systems resist injection and tampering attacks equally at the ORM layer, only the proposed system prevents data forgery and identifier spoofing through asymmetric cryptographic signing, ensuring that a counterfeit QR code cannot be constructed without access to the manufacturer's private key. For manufacturers, this offers a low-infrastructure, deployable alternative to physical anti-counterfeit markers; for the research community, it provides an applied reference implementation of signature-based consumer product verification in a domain where such protection is not yet standard practice.