Given servsafe without taking the actual test. bad on company's behalf?

my buddy works in a fast food restaurant and just a week or two ago his manager or whatever gave him a servsafe certificate but he never took the test. i told him he should look into it because that seems a bit shady especially if the test is something you have to sign and have a valid ID for. to me it seems the company has taken part in something a bit fraudulent. im wondering for his sake and also my own curiousity if it really is something the company could get in trouble for. i dont want to see my friend get into trouble though because they kinda just sprung it on him. can someone please shine some light on this.