How to Vet a New Supplier Before You Send the First Payment

The price looked good. The samples checked out. The company has a working website and a sales rep who answers emails quickly. Every signal you can see from a browser says this is a real business.

None of that tells you whether it actually is one.

Why a Google search isn't due diligence

A basic search shows you what a company wants you to see. A working website, a few directory listings, maybe a LinkedIn page with employee photos, none of it is hard to fabricate, and none of it answers the questions that actually matter before money moves:

• Is the company legally registered where it claims to be, and is that registration still active?
• Who actually owns and controls it?
• Has it, or anyone connected to it, been named in litigation, sanctioned, or flagged for financial crime?
• Does it have a documented history of doing business, or did the website appear a few months ago?

A five-minute search won't surface any of that. Getting real answers means checking primary sources, not marketing pages.

What proper vendor due diligence actually checks

Registration status. Confirm the company exists as a legal entity in the jurisdiction it claims, that the registration is current (not dissolved or in liquidation), and that the registered address is a real place of business rather than a mail-forwarding service.

Ownership. Who's actually behind the company matters more than the company name itself. A supplier can dissolve and reappear under a new name while the same people keep operating. Named officers and beneficial owners are what you're actually doing business with.

Sanctions and watchlist exposure. Screening the company and its named officers against global sanctions lists (OFAC, the UN Consolidated List, the EU Consolidated List) isn't optional if you're paying internationally. A sanctions violation doesn't require you to have known; it requires you to have paid the wrong party.

Litigation and financial history. Judgments, liens, and unresolved litigation are public record in most jurisdictions and often the clearest signal that a business is in worse shape than its website suggests.

Offshore structure. A supplier operating through a chain of shell entities in secrecy jurisdictions isn't automatically fraudulent, but it's a pattern worth understanding before you commit, especially if the entity you're paying isn't the one doing the actual manufacturing or shipping.

Adverse media. News coverage, regulatory actions, or public complaints that wouldn't show up in a sanctions database or company registry but would show up in a proper search of press and public records.

Red flags worth taking seriously

None of these confirm fraud on their own. Together, or even one in combination with pressure to move fast, they're worth a real check before you pay:

• A price meaningfully below every competitor's, with no clear reason why
• Pressure to wire a deposit quickly, before you've had time to verify anything
• A company that's only a few months old claiming years of track record
• Refusal or reluctance to provide a registration number or verifiable business address
• Payment instructions that don't match the company's own name

What this actually costs, compared to what a bad deal costs

A proper check on a new supplier costs a fraction of what a single bad payment does. The math isn't close: a deposit lost to a company that never delivers, or that turns out not to legally exist, routinely runs into five or six figures. A verification check runs a small fraction of that, takes a few days, and gives you something concrete to act on either way.

What to do with what you find

A clean result doesn't guarantee a good business relationship, and a flag doesn't automatically mean walk away. What it does is turn a decision made on trust into one made on information: the registration is active or it isn't, the sanctions screen is clean or it isn't, the litigation history exists or it doesn't. From there, the decision is yours, made with facts instead of a hunch.

Scrutinex builds exactly this kind of report, one at a time, without a retainer or a compliance platform: entity verification, sanctions and offshore screening, litigation, and adverse media, with every source cited so you can check it yourself. See a sample report or get started with an Entity report.