Supplier company verification is the evidence-based process of confirming who you are dealing with before you pay, ship, share sensitive information, or enter a commercial contract. It answers a narrow but essential set of questions: does the legal entity exist, is the supplier using the identity it claims, and do its registration, tax, address, bank, and certificate records support that story? A verification report can organize identity, trust signals, and warning indicators, but it is not a general guarantee of product quality or financial strength [1].
Overview: what supplier company verification must answer
For a business buyer, verification is not an exercise in collecting documents. It is a decision-support process. The objective is to establish whether the party on the quotation, proforma invoice, contract, purchase order, and bank account is the same legal entity that appears in official records. If those details do not align, the buyer needs to understand why before proceeding.
This guide is written for small business owners, purchasing staff, ecommerce brands, and other business buyers who need to research suppliers without assuming that every supplier is a factory, that every quotation reflects the contracting party, or that every certificate applies to the relevant facility. It focuses on company information. It does not replace product specification work, a full financial investigation, legal advice, or a factory audit. Those are adjacent checks with different evidence and limitations.
It helps to separate four practical questions. First, does the legal entity exist in an official registry? Second, is the supplier the entity it says it is? Third, do tax or trade identifiers, address, bank account, signatory, and certificates align with that entity? Fourth, are there warning signals such as sanctions matches, inconsistent names, or unresolved complaints? The answers do not prove that an order will succeed, but they allow the buyer to make a documented decision to proceed, hold, or stop.
Why a website, catalogue, or quotation is not company verification
A website, brochure, catalogue, quotation, or social media profile is supplier-controlled information. It may be accurate, but it is still a claim. Verification relies on records and responses from parties other than the supplier, such as a company registry, tax authority, sanctions list, certificate issuer, bank, or independent reference. The supplied source describes the core principle clearly: confirm independently that the company legally exists, that it is who it says it is, and that nothing on record contradicts its story [1].
This distinction matters in packaging and printing because the sales channel can obscure the manufacturer. A broker or trading company may present factory photographs, a catalogue of cartons, labels, or flexible packaging, and a quotation that looks like a manufacturer’s offer. If the quotation, bank account, registry record, and certificate holder belong to different entities, the buyer may have no direct contractual relationship with the factory that will make the goods. For printed packaging, artwork files, print plates, dies, or colour approvals may be sent to an entity that is not the one named on the invoice. Identify the contracting party first, then verify the manufacturing relationship separately.
The core company records and terms buyers need
Legal name and legal entity
The legal name is the name under which a business is registered, such as a private limited company, limited liability company, partnership, or sole proprietorship. A trading name or brand can differ from the legal name. Ask the supplier to state its exact legal name as it appears in its official registry and as it appears on its bank account. Record the country of registration and the entity type. A quotation in the name of a brand or division is not enough if the contract and payment will be with another legal entity.
Registration number and status
A company registration number is the identifier assigned by the official company registry. The registry record may also show incorporation date, registered address, current status, and filing history. Status matters: an entity may be active, dormant, struck off, dissolved, or subject to proceedings. Examples of official registries include Companies House in the United Kingdom, state Secretary of State records in the United States, the MCA portal in India, and GSXT in China [1]. The exact registry depends on the supplier’s jurisdiction, so the buyer should confirm the correct official source for that country.
Tax and trade identifiers
Tax and trade identifiers help match a legal entity to its tax or customs registrations. Examples include a VAT number in the European Union, a GSTIN in India, and an EORI number where customs are involved. The source recommends validating these through the relevant official tool rather than relying only on a supplier-provided copy. It cites the EU VIES tool for VAT numbers, GSTIN checks in India, and EORI where customs are involved [1]. A validation result may confirm that an identifier is active and associated with a name, but it does not by itself confirm product capability, financial health, or ownership.
Directors, ownership, and beneficial ownership
Public filings may show directors, shareholders, or persons with significant control, depending on the jurisdiction. Beneficial ownership means the natural persons who ultimately own or control the company. Availability varies widely, and some jurisdictions disclose less than others. For a buyer, the practical need is to know who can sign for the entity and whether the company or its directors appear on relevant sanctions lists. The source recommends screening the company and its directors against OFAC, EU, and UN sanctions lists [1]. A sanctions match is a serious warning signal that requires specialist review; a lack of public ownership data is an evidence gap, not proof of wrongdoing.
Address, domain, and contact footprint
A registered address is not always the same as a factory, warehouse, or sales office. Check that the address exists and is not only a virtual office or mail-forwarding address. Check whether the email domain matches the supplier’s website and whether the contact details are consistent across the quotation, website, registry, and correspondence. The source recommends checking that the address exists, that it is not only a virtual office, and that the email domain matches the website [1]. These checks are indicators, not conclusive proof. A domain can be old or new, shared, or registered through a privacy service; the point is to identify inconsistencies that need explanation.
Certificates and claims
Certificates are claimed information until the issuer confirms them. A PDF certificate may be altered, expired, suspended, or issued to a different legal entity or facility. Confirm the certificate number, holder, scope, facility, issue and expiry dates, and accreditation with the issuing body. For packaging and printing, scope is especially important. A food-contact statement may cover a material or process rather than every finished article. A chain-of-custody certificate may apply to a specific site, not to a broker or trading company. A quality management certificate does not prove that a particular carton, label, or printed film meets your specification.
Bank account and payment details
The bank account name should match the legal entity that will be the seller under the contract. Confirm bank details through an independent channel, such as a known phone number or a bank-issued letter, rather than relying only on email instructions. The source notes that bank references and certificates still need independent confirmation [1]. This matters most before a deposit and whenever bank details change. Payment fraud often relies on a convincing email that changes the account number while the rest of the transaction looks normal.
How verification differs from due diligence, inspection, and certification
These checks answer different questions and should not be treated as substitutes. A registry extract can confirm that a legal entity existed on a given date; it does not show whether the supplier can produce your specification. A certificate issuer can confirm that a certificate is valid and in scope; it does not prove that every batch conforms. A product inspection may check a sample or lot; it does not establish the supplier’s legal identity. A third-party verification report may organize multiple signals; it does not remove the need for a buyer decision.
| Check | Question it helps answer | Typical evidence | Important limitation |
|---|---|---|---|
| Official registry search | Does the legal entity exist, and is it active? | Registry extract showing legal name, number, status, and registered address | Does not prove manufacturing capability or product quality |
| Tax or trade-ID validation | Is the identifier active and linked to the claimed name? | Official validation result or reference number | Does not confirm ownership, financial health, or capacity |
| Sanctions screening | Do the company or directors appear on relevant lists? | Screening result with list names and dates | List coverage and match quality vary; false positives need review |
| Certificate issuer confirmation | Is the certificate valid, current, and in scope? | Issuer response or official certificate database record | Does not prove every production batch conforms |
| Bank account verification | Is the account held by the legal entity being paid? | Bank letter or independent callback record | Does not guarantee that the supplier will perform |
| Product inspection | Does a sample or lot meet the specification? | Inspection report with sampling details | Does not establish company identity or certificate scope |
A practical verification workflow: from supplier name to decision gate
Use a sequence so that later checks rest on the correct legal identity. At each stage, the output should be a dated record that another buyer could review.
Stage 1: define the decision and risk level
Start with the purchasing decision. Is this a sample request, a first deposit, a repeat order, or a change of bank account? Consider order value, payment terms, product risk, and whether the supplier is new. A high-risk case may involve prepayment, a new supplier, food-contact packaging, medical or regulated products, or a supplier whose name differs from the factory. The output is a short list of required checks. For a low-value sample, a basic identity and bank check may be proportionate. For a production deposit, the full identity, tax, sanctions, certificate, and bank checks are more appropriate.
Stage 2: collect exact identifiers and claimed documents
Ask the supplier for its exact legal name, country, registration number, registered address, tax or trade identifier, bank account name, and the name and role of the person authorised to sign. Request copies of the registration record, tax validation, certificates relevant to the order, and any references. The output is a supplier information sheet. Treat the documents as claims to be checked, not as completed verification.
Stage 3: check the official registry
Search the official registry for the jurisdiction and match the exact legal name, registration number, incorporation date, and registered address. Look at status and any recent filing or name changes. If the supplier provides a registry extract, compare it with a current independent search where possible. The output is a dated registry record. If the legal name, number, or status does not match, place the verification on hold and request an explanation before continuing.
Stage 4: validate tax or trade identifiers and screen sanctions
Validate VAT, GSTIN, EORI, or other identifiers through the relevant official tool, not only through a supplier screenshot. The source lists VIES for EU VAT, GSTIN in India, and EORI where customs are involved [1]. Screen the company and its directors against OFAC, EU, and UN sanctions lists [1]. The output is a validation record and a sanctions screening result. If an identifier is inactive, belongs to a different name, or a sanctions match remains unresolved, stop and escalate before any payment.
Stage 5: verify address, domain, and contact trail
Check that the registered address and claimed operating address exist and are consistent with the supplier’s story. Review whether the email domain matches the website and whether the same contact details appear across documents. Search the company name with terms such as ‘scam’ or ‘complaint’ as a warning-signal check [1]. The output is a short note with sources, dates, and any discrepancies. Search results are not proof of wrongdoing, but repeated complaints or unexplained identity inconsistencies require follow-up.
Stage 6: confirm certificates and references with the issuer
For each certificate that matters to the order, contact the issuer or use its official verification service. Check the holder, scope, facility, validity dates, and accreditation. For packaging and printing, confirm that the certificate covers the actual production site and the relevant material or process. For trade references, ask the referee independent questions about the legal entity, order type, and payment conduct. The output is an issuer or referee confirmation record. A certificate copy alone is not enough.
Stage 7: verify the bank account and contracting party
Confirm that the bank account name matches the legal entity that will sign the contract and receive payment. Use an independent channel, such as a known telephone number or a bank-issued confirmation, especially before a deposit or when bank details change. Reconcile the quotation, proforma invoice, contract, purchase order, and bank details so that the same legal entity appears throughout. The output is a bank verification record and a reconciled document set. If the account name differs, hold the payment until the relationship and authority are explained and independently confirmed.
Stage 8: decision gate and evidence file
Proceed only when the legal identity is consistent, required identifiers are valid, sanctions screening is clear or escalated, critical certificates are confirmed, and bank details are verified. If information is missing, the decision is hold, not assumed approval. The output is a short decision memo: proceed to sample, proceed to deposit, hold for evidence, or stop. This is the practical result of verification. It allows the buyer to take the next purchasing step with a documented basis.
Comparing verification depth: what to use for which decision
Verification should be proportionate to the decision. The table below compares common approaches and their trade-offs. It is a decision aid, not a rule that every buyer must follow the same depth.
| Approach | Best suited to | Typical evidence | Trade-off |
|---|---|---|---|
| Basic identity check | Low-value sample or first contact | Registry search, tax-ID validation, address and domain review | Fast and low cost, but limited comfort for a deposit |
| Transactional verification | First production order or deposit | Registry, tax ID, sanctions, bank account, contract-party reconciliation | More evidence and time, but directly supports payment decision |
| Certificate and reference confirmation | Regulated, food-contact, or branded packaging | Issuer confirmation, scope check, facility check, trade references | Can take days with issuers; reduces reliance on supplier copies |
| Third-party verification report | Buyer needs organized public signals | Report covering identity, trust signals, cautions, and next checks | Useful summary, but not a substitute for direct issuer or registry confirmation [1] |
| Enhanced due diligence | High-value, high-risk, or ownership-sensitive deals | Ownership research, specialist sanctions review, financial and legal checks | Highest time and cost; should be scoped with specialist advice |
Packaging and printing examples: where company verification affects the order
In packaging and printing, the supplier may be a converter, printer, broker, importer, or agent. The buyer should identify which entity will contract, invoice, manufacture, and receive payment. A folding-carton supplier may be a trading company that sources from several converters. A label printer may outsource some finishing. A flexible-packaging supplier may sell laminated rolls made by another facility. These models can be legitimate, but the buyer needs to know who is responsible for the order and whether the claimed facility is within the verified entity’s control or disclosed relationship.
For food-contact packaging, a statement or certificate should be checked for the material, process, and facility it covers. A logo on a website is not a certificate confirmation. For chain-of-custody claims, confirm the certificate number, scope, and site with the issuing body. For printed cartons or labels, a colour proof approval is a quality step, not a company identity check; both are needed. If tooling, plates, cylinders, or dies are charged, confirm which legal entity owns or holds them and which entity is invoicing the charge. For suppliers in India, the MCA portal and GSTIN checks are relevant examples, but they are jurisdiction-specific; buyers sourcing elsewhere should use the corresponding official registry and tax tools [1].
Costs, timing, and trade-offs
There is no universal cost or timeline for supplier verification. Official registry fees vary by jurisdiction, and some searches are free. Tax-ID validation may be immediate. Sanctions screening may be immediate but depends on list coverage and match review. Certificate issuer confirmation can take hours or days. Bank confirmation may require a callback or bank letter. Trade references can take longer because they depend on third-party responsiveness. Confirm current fees and processing times with the relevant registry, issuer, or bank.
The main trade-off is depth versus speed. A basic identity check can be done before a sample request, while a production deposit usually justifies a broader check. Urgency is not a reason to skip bank verification or sanctions screening. If time is short, scope the checks around the decision: legal identity, tax ID, sanctions, bank account, and any certificate that is critical to the product. Record what was not checked so that the evidence gap is visible. A paid report or specialist service may save time, but it does not transfer the buyer’s decision responsibility or replace direct confirmation where the risk is material.
Illustrative worked example (hypothetical)
All names, quantities, prices, and outcomes in this example are hypothetical. No real supplier, quotation, or case study is implied.
Suppose a US ecommerce brand plans to order 10,000 printed folding cartons from a new supplier in India. The supplier quotes USD 0.42 per carton and USD 300 one-time setup. The order value is 10,000 × 0.42 = USD 4,200. The setup-inclusive total is 4,200 + 300 = USD 4,500. The setup-inclusive unit cost is 4,500 ÷ 10,000 = USD 0.45. A sample courier fee of USD 60 is separate and excluded. The supplier requests a 30% deposit and 70% before shipment. These figures are illustrative only.
The buyer starts with the quotation name, which is a trading name. A registry search for that name returns no legal entity. The supplier then provides the legal name and registration number. The registry extract shows an active entity, but the registered address differs from the factory address in the quotation. The supplier says the factory is a sister concern. GSTIN validation returns a different legal name. A food-contact certificate provided is expired and names another facility. The bank account name belongs to a third company. The buyer holds the deposit and requests corrected evidence: a registry extract for the contracting entity, GSTIN validation matching that legal name, a current certificate covering the actual facility, a bank letter for the same entity, and a written explanation of the relationship with the factory. If those are resolved and independently confirmed, the buyer can proceed to sample and proof approval. If not, the buyer does not proceed. The example shows the decision output, not a guarantee.
Common mistakes and corrective actions
- Treating a website as proof. A professional website is a claim. Correct by checking the official registry and tax authority.
- Matching a trading name only. Verify the exact legal name, registration number, and entity type that will appear on the contract and bank account.
- Accepting a PDF certificate without issuer confirmation. Confirm the certificate number, holder, scope, facility, and status with the issuer.
- Ignoring certificate scope. A certificate for one material, process, or site may not cover the ordered product or factory.
- Screening only the company, not the directors. Screen the company and relevant directors against applicable sanctions lists [1].
- Verifying bank details only by email. Use an independent callback or bank-issued confirmation, especially before a deposit or a change of account.
- Assuming a report is a guarantee. A report organizes signals; it does not prove product quality or eliminate commercial risk [1].
- Not recording the check. Keep dated evidence and a discrepancy log so the decision can be reviewed later.
Buyer checklist before the next purchasing step
- Write down the exact legal name, country, registration number, and entity type of the contracting supplier.
- Search the official company registry and match the legal name, number, status, and registered address.
- Validate the relevant tax or trade identifier through the official tool and match it to the legal name.
- Screen the company and its directors against applicable sanctions lists [1].
- Check the address, email domain, and contact trail for inconsistencies.
- Confirm critical certificates with the issuer, including scope and facility.
- Verify the bank account name and details through an independent channel.
- Reconcile quotation, proforma invoice, contract, purchase order, and bank details to the same legal entity.
- Record discrepancies, evidence gaps, and the proceed, hold, or stop decision.
Next steps and deeper guides
Use this guide before you pay a deposit, approve a supplier for a first order, or change bank details. Start with the Supplier Research hub to organize supplier discovery and evaluation. For the purchasing sequence after verification, use Procurement & RFQs. For product and certificate-scope questions, use Quality & Specifications. The next practical task is to build a one-page supplier evidence sheet and request exact legal identifiers in your RFQ or supplier onboarding form.
Company verification is not a one-time badge. Re-check when the legal name changes, bank details change, ownership or directors change, certificates expire, a new facility is introduced, or an order moves from sample to production. The goal is a documented, proportionate decision that fits the risk of the purchasing step.
FAQ
What is the difference between supplier verification and supplier due diligence?
Verification confirms legal identity, existence, and consistency of registry, tax, bank, and certificate information. Due diligence is broader and may include financial, ownership, legal, compliance, and operational checks.
Can I verify a supplier using only its website?
No. A website is supplier-controlled information. Use official registries, tax-ID validation, sanctions screening, certificate issuers, bank confirmation, and independent references.
Which checks should come before a deposit?
At minimum, match the legal entity to the official registry, validate the relevant tax or trade ID, screen the company and directors, confirm the bank account, and check any certificate that is critical to the order.
How do I verify a supplier certificate?
Confirm the certificate number, holder, scope, facility, issue and expiry dates, and status with the issuing body. Do not rely only on a PDF supplied by the company.
What should I do if the bank account name differs from the supplier’s legal name?
Hold the payment and request an explanation, a bank-issued confirmation, and evidence of the relationship between the account holder and the contracting entity. Confirm through an independent channel before paying.