An organization can self-proclaim certification or compliance to any standard.
While "self-certifying" or "self-declaring" compliance to a standard doesn't carry the same weight as third-party certification (e.g. SCC or CSA), organizations that do this are not actually doing anything wrong or illegal.
However, if you are concerned that a business is falsely claiming third-party certification, it is up to you to do your due diligence and verify the certification. For instance, if the organization says it is UL certified for ISO 9001, then UL would be able to verify that this is accurate.
To report such a situation, notify the owner of the logo or certification body. The certifying organization would then be responsible for ensuring the validity of the claim and for any next steps should the company be falsely claiming certification.