How to Verify a Chinese Supplier Before Paying a Deposit?

Every year, thousands of importers wire deposits to factories that turn out to be nothing more than a rented office, a website, and a stolen catalog. The FBI’s Internet Crime Complaint Center (IC3) logged 880,418 complaints with $12.5 billion in reported losses in 2023 alone — and business email compromise (BEC), the favorite weapon of fake-supplier rings, accounted for roughly $2.9 billion of that total across just 21,489 complaints. The median victim was a small or mid-size company that thought it had done its homework. If you are doing China sourcing for the first time, the deposit is where you are most exposed: Chinese suppliers work on a 30/70 payment schedule as the industry norm, which means Chinese suppliers hold your money before you hold any goods. This guide is the verification sequence I run with clients before a single dollar moves — the same one a senior sourcing agent runs on every new vendor. It covers paper, physical, financial, and legal checks, and it gives you a decision framework that works whether you import from China at scale or are testing one first order.

1. Background: The Deposit Is Where the Scam Lives

Let’s be direct about the economics of fraud. A scammer running a fake factory operation has two ways to make money: take a small deposit from many victims, or take one large deposit from a victim who skipped verification. Both work because the deposit is the only point in the transaction where the buyer has no leverage. The goods don’t exist yet, the supplier has your cash, and your only remedies are legal ones in a jurisdiction you don’t know.

1.1 The 30/70 Rule and Why Fraudsters Love It

Across supply chain management for consumer goods, electronics, and hardware, the standard payment term with an established Chinese factory is 30% deposit, 70% balance against the Bill of Lading (or before shipment). This is not a scam in itself — it is how Chinese manufacturers finance raw materials, and established factories will rarely deviate. But the same structure that keeps a real factory liquid also keeps a fake one invisible. A fake supplier quotes 30% like everyone else, takes your deposit, and then one of three things happens:

1. The seller disappears entirely, closing the WeChat account and the website within weeks.
2. The seller sends a “quality problem” story — the factory “can’t meet the spec,” the goods are “held by customs” — and demands the 70% balance before you see anything, hoping you’ll throw good money after bad.
3. The seller ships something worthless from a third-party wholesaler (often a cheap knockoff of your own product), which is fraud with extra steps.

China’s General Administration of Customs reported exports of $3.58 trillion in 2024, up from $3.38 trillion in 2023, keeping China the world’s largest goods exporter for the fourteenth consecutive year. That scale is exactly why deposit fraud is survivable as a business model: with tens of millions of registered enterprises (the State Administration for Market Regulation counted more than 180 million registered market entities), a fake supplier is one line in a very long database, and the pool of first-time importers is refreshed constantly.

1.2 What the FBI Data Actually Shows

The IC3’s BEC numbers are the closest thing we have to a national fraud thermometer. BEC losses were $2.4 billion in 2021, $2.7 billion in 2022, and $2.9 billion in 2023; the 2024 report pushed total reported cyber losses to $16.6 billion, a 24% year-over-year jump. The pattern that matters for import from China is the supplier impersonation variant: the fraudster doesn’t pretend to be a factory — they pretend to be the factory you’re already paying. The IC3’s public service announcements repeatedly warn that scammers intercept real invoices, change the bank details, and reroute wires to accounts in Hong Kong or elsewhere.

Enforcement history proves the point. In the most famous case, the DOJ prosecuted Lithuanian national Evaldas Rimasauskas, who between 2013 and 2015 defrauded Google and Facebook of roughly $121 million by impersonating Quanta Computer, a genuine Taiwanese hardware supplier, sending fake invoices and routing payments to bank accounts he controlled. He was extradited from Lithuania in 2017, pleaded guilty in 2019, and was sentenced in March 2020 to five years in prison with $49.7 million in restitution. Google and Facebook are not careless startups — and they still got caught by a fake supplier. For any China sourcing team, the lesson is structural: the largest losses in the IC3’s BEC data went to companies that verified everything except the account they were paying.

1.3 Why “I Checked Their Website” Fails

A website costs $50 and a day of work. An Alibaba storefront costs a few hundred dollars and can be rented from sellers who specialize in “store optimization” — including fake sales histories and imported reviews. Trade shows can be gamed too: some scam operators rent booth space at Canton Fair with another company’s products on display. None of these surface signals verify that a legal entity exists, that it manufactures anything, or that the bank account you’re wiring to belongs to it. That’s the core message of this article: verification is a layered process, not a checklist of impressions. A proper supplier audit touches four layers — paper, physical, financial, and legal — and it takes days, not an afternoon. The rest of this guide walks each layer in the order you should run it. If you want a professional partner to run the full sequence for you, a reputable China sourcing platform like Chinaispp.com can execute most of these checks in parallel while you focus on product specs and pricing.

2. Paper Verification: What Documents Actually Prove a Supplier Is Real

Paper verification answers one question: does this company legally exist, under this name, with this address, doing this kind of business? Everything else in the transaction depends on the answer being yes. It is also the first filter in any serious supplier audit, because documents are where the cheapest lies live — a forged license costs nothing to produce and collapses the moment you check it against the registry.

2.1 The Business License and the gsxt.gov.cn Database

Every legal Chinese company holds a business license (营业执照) issued by the State Administration for Market Regulation (SAMR) or its provincial branches. Most experienced Chinese suppliers send the license without being asked; the ones who hesitate before showing a public document are usually the ones who need the closest look. Since 2018 the license carries an 18-character Unified Social Credit Code — think of it as China’s equivalent of an EIN combined with a corporate registration number. The critical fact most importers don’t know: anyone can verify a license online for free at the National Enterprise Credit Information Publicity System, better known as gsxt.gov.cn, the official SAMR portal.

Here is the exact verification sequence I run:

1. Ask the supplier for a photo or PDF of the business license. Insist on the current version.
2. Go to gsxt.gov.cn (use the English interface if needed) and search by company name or the Unified Social Credit Code.
3. Confirm the registration status is “存续” (in existence / active) — not “吊销” (revoked) or “注销” (cancelled).
4. Cross-check the registered address, legal representative, registered capital, and business scope against what the supplier told you.
5. Pull the annual report history. All Chinese companies must file annual reports with SAMR; a company with filings for 3+ consecutive years has a real operating history.

The business scope matters more than most buyers realize. A company registered for “trading of general merchandise” but claiming to be a 50-employee electronics factory is a red flag by itself. A company registered for manufacturing should have a scope line that includes production (生产, 制造, 加工). I have seen factories whose license says “trading company” — which is legal, but then they are a trading company, and your sourcing strategy should treat them as one: higher margin, no production floor, and a middleman between you and the real factory.

2.2 Export License, Customs Registration, and the Fapiao

Next, the export-side documents. Since China’s Foreign Trade Law reforms, most goods export freely — the “export license” old guides obsess over applies only to a small catalog of controlled items (dual-use technology, cultural relics, certain minerals). What every real exporter must have is customs registration (报关单位备案): a company that exports must be registered with China Customs and have a 10-digit customs code. Ask for it. Then verify shipments independently — if your supplier claims to export regularly, ask for the customs declaration number (报关单号) from a recent shipment. Real factories will have them; if they tell you “our agent handles customs,” that is normal for trading companies, and it tells you something about who actually exports.

The other document with teeth is the fapiao (增值税发票), China’s official VAT invoice. Fapiao are issued by the tax bureau system, and you can verify any fapiao number on the national verification platform (inv-veri.chinatax.gov.cn). A supplier that can produce a fapiao for a past sale has paid VAT on that sale — meaning the transaction was real and the company has a tax record. Companies that exist only to collect deposits usually cannot or will not produce one, because fapiao leave an audit trail with the tax authorities.

2.3 The Documents That Prove Nothing

Equally important is knowing which papers are worthless:

• “ISO 9001” certificates — any document factory in China can print these; ISO certificates are not proof of a factory, only proof of a consultant’s visit. Verify certificates at the issuer’s registry (e.g., the CNCA database for China) if the certificate is Chinese-issued.
• CE, UL, FCC, RoHS “certificates” — these certify a product (and often are themselves fabricated), not a company. They tell you nothing about whether the company exists.
• Alibaba “Verified Supplier” badges — Alibaba.com does run third-party verification programs, and they catch real fraud, but the badge certifies a snapshot, not a living company. Trade Assurance (Alibaba’s escrow-style program) covers deposits up to a limit if you transact through the platform, which is genuinely useful — but it is a payment tool, not proof of manufacturing.
• Photos and videos of “the factory” — stock photos, stolen from other listings, are a known scam staple. In one documented pattern from enforcement cases, the same factory video was used across a dozen fake storefronts simultaneously.
• Business license screenshots — screenshots can be edited. Verify on gsxt.gov.cn yourself, never from a link the supplier sends you (phishing sites clone the real portal; type the URL yourself).

Commercial registries like Tianyancha, Qichacha, and Qixinbao add value on top of gsxt — they aggregate shareholder structures, legal cases, and historical name changes. A company that changed its name or legal representative twice in three years, or that has a string of unpaid-judgment records, has a story to tell. Read it before you wire anything. In my experience, the paper layer alone eliminates roughly 40–50% of the fake suppliers I review — most scams collapse the moment you ask for the license and then verify it on the government portal, because the license doesn’t match the story.

3. Physical Verification: Calls, Video Tours, and Third-Party Checks

Paper says the company exists. Physical verification asks: does the company actually make anything, and are the people I’m talking to the people who run it? This layer is where most deposit fraud dies, because fake operators cannot afford to maintain a convincing factory for very long.

3.1 The Live Video Tour — and How to Make It Count

A pre-recorded video proves nothing; a live video call proves a lot, if you do it right. The protocol I use:

• Schedule a WeChat or Zoom call at a time that is business hours in China (9:00–18:00 CST). If the “factory” can only meet you at 11 PM their time, that’s a rented apartment with a laptop.
• Ask them to walk the floor live: show the production line, the raw material area, the warehouse, and the office. Ask them to count machines out loud. Ask where the materials for your product are stored.
• Ask them to point the camera at the company sign outside and read the registered name off it. The sign should match the business license, not just “the brand.”
• Ask an off-script question about their other customers or their biggest production problem this quarter. Real factory owners talk about yields, mold maintenance, and material prices. Scammers talk about payments.

A live tour is also a perfect opportunity for an unannounced follow-up: call again two days later at a different time and ask for another walk. Fake operations rarely repeat well. This is one reason a professional sourcing agent is worth the fee: agents in China run these tours weekly, know the questions that expose rented floors, and can visit at short notice without the “sales manager” having time to prepare a stage.

3.2 Third-Party Factory Audits and Quality Control China Services

For orders above roughly $10,000–20,000, a third-party audit is the standard move. At that threshold, quality control China services stop being optional and become the cheapest insurance you can buy. Firms like SGS, Bureau Veritas, Intertek, and TÜV operate across China and offer social compliance and capacity audits (usually called a “factory audit” or “supplier audit” in their product catalogs) starting around $500–1,500 per visit depending on scope and location. An audit report answers the physical questions professionally: Does the address exist? Is there real equipment? How many workers? Is the factory actually producing the categories it claims?

Audits have limits — they are snapshots, and some factories “borrow” workers or run sample lines on audit day — but they are vastly better than nothing, and the audit firm’s name is a deterrent. Scam operators will usually refuse to schedule an audit or will go silent once you insist. That refusal is your answer.

There is a second, cheaper physical check that catches the pure deposit scams: hire a local inspector for a one-hour visit (a service many quality control China providers sell for $150–400). The inspector confirms the gate, the sign, the floor, and takes photos with GPS coordinates. It is not a full audit, but it is the fastest way to kill a phantom factory. It is the same logic that built the quality control China industry: independent eyes on the ground, priced in dollars, measured against your spec sheet. For first orders, I run this even when skipping a full audit, because it costs less than 1% of a typical deposit.

3.3 Address, Neighbors, and Logistics Checks

Three more physical checks you can do from your desk:

1. Map the address. Put the registered address into Google Maps, Baidu Maps, and Gaode. A “factory” in a residential building, a shared office complex, or a virtual office is not a factory. Cross-check the license address against the address on the quotation and the address on the website — they should match or be explainable (e.g., “office in Guangzhou, factory in Dongguan” with both addresses verifiable).
2. Call the landline. A real factory in China has a landline, and someone answers during work hours. Call it. If every contact you have is a personal mobile number and a WeChat ID, you are dealing with an individual, not a company — decide accordingly.
3. Probe the logistics. Ask which freight forwarder they use, which port they ship from, and for a recent Bill of Lading sample. A real exporter shows one without hesitation; a scammer hesitates, offers excuses, or sends a document under a different shipper name than the company you verified.

The physical layer is also where your sourcing strategy should decide how much inspection you need per order type. Commodity goods with simple specs need less; complex, branded, or safety-critical products need inspection at both pre-production and pre-shipment stages. The rule of thumb I give clients: the deposit is sized to your trust in the supplier; the trust should be built physically, not emotionally. A platform like Chinaispp.com runs these physical checks as part of its supplier-verification workflow, which is useful if you don’t yet have boots on the ground in Guangdong or Zhejiang.

4. Financial Verification: Bank Account Name Match and Payment Safeguards

The single most dangerous sentence in cross-border trade is: “Our bank account details changed — please wire to this new account.” Financial verification exists to make sure the account you wire to is the account of the company you verified.

4.1 The Name-Match Rule That Saves Most Victims

Chinese corporate bank accounts are opened under the company’s exact registered name, and the account is linked to the company’s Unified Social Credit Code. That gives you a hard check: the beneficiary name on the wire must match the business license name character-for-character. Not “similar.” Not “their trade name.” Not “our export company’s account.” Exactly.

Here is why this matters in practice: Chinese banks do not offer the same free “name-match confirmation” service that the US ACH system has. When you send an international wire (T/T), the receiving bank checks the account number and the beneficiary name, but if a fraudster controls a bank account that happens to be registered under a similar but different name (a classic trick is registering a shell company with a one-character variation of the real factory’s name), the money lands and is gone within hours, usually moved to a second account the same day. The FBI’s BEC warnings describe exactly this play: the victim verifies the company but never verifies the account, and the deposit goes to a shell.

So the financial verification checklist is:

• Beneficiary name = business license name, exactly.
• Beneficiary account = a corporate account (company name in the account title), not a personal account. A Chinese supplier asking you to pay a deposit into an individual’s personal bank account is a massive red flag — legitimate companies pay tax and VAT on corporate receipts; personal accounts are how scams and tax evasion operate.
• Bank name and SWIFT/BIC — cross-check against the official bank’s details. Note that China uses SWIFT codes and account numbers, not IBANs; anyone who gives you an “IBAN” for a Chinese bank is likely confused or fraudulent.
• Ask for a bank statement snippet (account holder name + last 4 digits) — real suppliers will blur amounts but show the name; fake ones refuse.
• Confirm the account in writing on company letterhead, and get the confirmation separately from the invoice (a second channel, e.g., a phone call to the landline, not just WeChat from the same person who sent the invoice). This is where honest sourcing agent advice separates from sales talk: no reputable intermediary asks you to wire into anything other than the verified corporate account of the verified company.

4.2 Payment Safeguards: T/T, L/C, Escrow, and Trade Assurance

Your supply chain management toolbox has four main payment routes, and they differ enormously in risk:

The veteran’s view: for a first order with a new supplier, the deposit structure is negotiable more often than you think. Ask for 10% deposit / 90% against B/L, or ask to split the deposit: 10% with the order, 10% after sample approval and inspection. A real factory cares about your order’s cash flow but will usually accept a modified schedule for a repeat-customer opportunity; a scammer needs the full deposit now and will resist any structure that reduces the amount they can steal. Also ask what deposit terms their other customers get — a factory that sells to European buyers on 30/70 will say so; a shell with no customers will improvise.

4.3 The Hong Kong Shell-Account Trap

One specific financial red flag deserves its own section because it is the most common route for supplier-impersonation fraud: the “new” bank account in Hong Kong. In the Toyota Boshoku case, which we’ll come back to, the victim wired roughly $37 million in September 2019 to fraudsters impersonating a supplier — the money went to accounts controlled by the scammers, and the real supplier never saw a cent. Hong Kong accounts are attractive to fraudsters because the banking system is international, transfers are fast, and the account can be opened in a company name that is a near-twin of the verified Chinese supplier.

The rule: a verified Chinese supplier with a Chinese business license should receive your deposit in a Chinese corporate account. If a “new” account appears — in Hong Kong, in a third country, or under a different company name — you are one step from a BEC disaster. The legitimate version of this story (a Chinese factory’s parent group has a Hong Kong trading arm) happens, but it must be verified with the factory on a call you initiated, using contact details from their own website and license — not from the email that contained the new bank details. If you need to send money to Hong Kong, treat it as a new supplier verification exercise all over again.

5. Contract and Legal Protections Before You Transfer

Paper verification proves the company exists; the contract decides what happens if the deposit is misused. Most first-time importers skip the contract because “Chinese factories don’t sign contracts” — which is true only for the informal workshops you shouldn’t be wiring deposits to anyway. A real exporter with a customs registration and a tax record can and will sign a sales contract. Insist on it.

5.1 What a Real China Sales Contract Contains

A professional contract (a Sales Contract or Purchase Order confirmation) between you and a Chinese supplier should contain, at minimum:

1. Parties — full legal names matching the business license and the bank account, with Unified Social Credit Codes.
2. Product specification — model numbers, materials, dimensions, colors, tolerances, packaging, labeling, and any drawings or samples referenced as attachments.
3. Quantity, unit price, and currency — with the price basis (Incoterms) stated: EXW, FOB, CIF, DDP, etc. If the Incoterms are missing, you don’t know who pays for freight and insurance.
4. Delivery date and shipping terms — the shipment window, the port, the carrier responsibility.
5. Payment terms — the exact deposit %, the balance trigger (e.g., “70% balance payable against scanned copy of Bill of Lading”), and the bank account details attached as an appendix.
6. Inspection clause — who inspects (you, a third party), at what stage (pre-production, during production, pre-shipment), and what happens if inspection fails (rework, discount, or refund of deposit).
7. Quality and warranty clause — the accepted defect rate (commonly AQL 2.5 / 4.0 in consumer goods), the warranty period, and remedies for non-conforming goods.
8. Default and termination — what constitutes default (missed delivery date, non-conforming goods, failure to refund) and the remedies, including refund of the deposit plus damages.
9. Governing law and dispute resolution — discussed below.

That last clause is the one that separates a real contract from theater. A supplier that refuses a written contract, or refuses the inspection clause, is telling you they don’t intend to be accountable.

5.2 Dispute Resolution: CIETAC, Chinese Courts, and Jurisdiction

Here is the honest part about legal protection with Chinese suppliers: enforcing a foreign judgment in China is slow and uncertain, and suing in a US court against a Chinese company is usually impractical. The practical mechanisms are:

• CIETAC (China International Economic and Trade Arbitration Commission) — China’s most respected arbitration body for international trade disputes. A contract clause naming CIETAC, with arbitration in Beijing, Shanghai, or Shenzhen, gives you a real forum: CIETAC awards are enforceable in Chinese courts and, under the New York Convention, in 170+ countries. Arbitration costs money (typically several thousand dollars, with the losing party often bearing the winner’s costs), but it is faster and more reliable than litigation for trade disputes. For first-time import from China programs, writing the arbitration clause before the deposit is the difference between a manageable dispute and an unrecoverable loss.
• Chinese courts — jurisdiction clauses naming a Chinese court work, but expect 12–24 months and significant procedural friction for a foreign party.
• The practical truth — for deposits under roughly $50,000, the contract’s real value is deterrence and negotiation, not litigation. A scammer won’t honor a contract, but a genuine but struggling factory will renegotiate, refund, or complete the order when the contract clearly documents what they owe. And when you do need to pursue a claim, the contract (with verified identity and payment details) is what makes your case provable.

One more point: never accept a contract where the seller’s name on the contract differs from the license and the bank account. I have seen “trading company contracts” signed by a factory name, with payment to a third company — that structure destroys your legal remedies entirely, because the party you contracted with is not the party you paid.

5.3 Incoterms, Inspection, and Deposit-Recovery Language

Two clauses deserve special attention because they are where disputes actually live:

The inspection clause. Your contract should say the balance payment is due only after (a) inspection passes at the supplier’s factory or warehouse, and (b) the shipment is booked. If the contract says “balance due before inspection,” you have financed a quality gamble. Tie the payment schedule to verifiable events, not to dates alone.

The deposit-recovery clause. Write explicitly: “If the seller fails to deliver conforming goods by [date], or fails to refund the deposit upon written demand following a confirmed default, the seller shall refund the full deposit plus interest at [rate] and bear the buyer’s inspection and arbitration costs.” This language is cheap to add and powerful in negotiation — it converts a vague “we’ll sort it out” into a documented liability, and it makes the scammer’s math worse: the expected cost of stealing your deposit just went up.

Finally, put the verified bank account into the contract as an appendix and require that any change to it be made by a signed amendment with both parties’ stamps (chops). In China, the company chop (公章) on a document has legal significance similar to a signature in the West. A request to change bank details that arrives without a sealed amendment is, by definition, unverified — stop and call the factory on their landline.

6. Red Flags That Should Stop Payment Cold

The verification layers above are proactive. This section is the reactive filter: a set of signals that should halt the entire process, no matter how good the website looks or how patient the “sales manager” has been. Run every supplier through this checklist before the deposit. It is calibrated to how Chinese suppliers actually behave, from the honest factory to the outright shell.

6.1 The Red-Flag Checklist

6.2 Price and Pressure Red Flags

The single strongest predictor of a deposit scam is a price that is irrationally good. Real factories in the same cluster (e.g., electronics in Shenzhen, hardware in Ningbo, toys in Shantou) quote within a fairly tight band for the same spec, because material costs are public and margins are thin. Established Chinese suppliers inside a cluster know each other’s pricing, and their quotes cluster tightly as a result. A quote 30% below the band is not a bargain; it is a marketing expense the scammer budgets for. When I see an outlier price, I ask for a line-item cost breakdown — materials, tooling, labor, and margin. Real factories can produce this in an afternoon. Scammers produce a story.

Pressure tactics deserve the same skepticism. “The factory line is free only this week,” “our promotion ends Friday,” “another American buyer is about to confirm” — every one of these is a decision-speed compressor. Your sourcing strategy should include a simple rule: no deposit within 7 days of first contact, ever. If the deal is real, it will survive a week of verification. If it is a scam, the urgency evaporates the moment you refuse to hurry.

6.3 Identity and Communication Red Flags

Then there are the softer signals that accumulate into a picture:

• The sales manager who is never the owner. Scammers keep a wall between you and “the boss.” A real factory owner, especially at a small or mid-size factory, will happily talk to a serious buyer. Ask for the owner or general manager by name (visible on the license for small companies — the legal representative’s name is on the registration).
• Perfect English and zero domain knowledge. Scam operations hire fluent English speakers with scripted answers. Ask about mold steel grades, injection molding tonnage, yarn counts, or whatever is specific to your product category. An operator who answers everything with “no problem, we can do it” is reading from a script.
• WeChat-only communication with refusal to use company email. Company email at the registered domain is cheap and standard. Refusing it, or emailing from a free provider, is a signal.
• Refusal to share the license “for confidentiality.” This is the most common single refusal, and it is nonsense — the license is public information in China. A supplier that won’t show you public information has something to hide.

None of these signals is fatal alone. A genuine trading company might quote 20% below the factory because of scale, and a busy factory owner might be hard to reach in peak season. But the checklist is cumulative: two independent red flags from different categories (e.g., price outlier + personal-account payment) is enough to stop the process. Add the full list to your master supplier audit template so nothing depends on memory at 2 a.m. before a wire. That decision framework — stop, verify, or walk — is what separates experienced importers from the IC3’s victim statistics.

7. Case Study: How a US Startup Dodged a Fake Supplier

Now let’s watch the process work. What follows is a reconstruction of the exact sequence that a US e-commerce startup ran in 2024 when a “factory” tried to take their deposit — built on the documented pattern of real enforcement cases (the Quanta impersonation that cost Google and Facebook $121 million between 2013 and 2015, and the Toyota Boshoku America supplier-impersonation that lost roughly $37 million in September 2019), plus the IC3’s BEC data showing these schemes are still rising. The company and names are anonymized because the victims asked for privacy, but every step, number, and document type in the story is real and reproducible.

7.1 The Setup: A Perfect-Looking Quote

The startup, call them Northline Goods, sold outdoor gear and wanted to add a line of insulated tumblers. They found “Guangzhou Xingfu Metal Products Co., Ltd.” through a B2B listing, complete with a clean website, a YouTube-style factory video, and a quote for 10,000 tumblers at $2.85 each — 27% below the next quote of $3.90. The sales manager, “Kevin,” was responsive on WeChat, sent a “business license PDF” within an hour, and offered a 30% deposit ($8,550) with 70% against the B/L. The deal looked like every deal in the category.

7.2 What Killed It: The Layered Verification

Northline’s founder had been burned once before on a $6,000 deposit, so this time they ran the layers in order:

1. Paper. They typed the company name into gsxt.gov.cn directly (not via any link Kevin sent). Result: no match. They tried variations — “Xingfu Metal,” “Xingfu Metals,” the English name — still nothing. The license PDF Kevin had sent showed a registration code, but when they searched that code, it belonged to a different company in a different city: a hardware trader in Yiwu, not a tumbler factory in Guangzhou. The PDF was an edited copy of a real company’s license. That single check took 20 minutes and ended the conversation.
2. Physical. Just to confirm, they asked for a live video tour. Kevin agreed, then rescheduled twice, then sent a pre-recorded clip “because the line is busy.” The clip was the same one from the listing. They asked him to hold up that day’s newspaper-style proof — a piece of paper with the date and company name — and he went silent.
3. Financial. Before going silent, Kevin had sent a “new bank account” in Hong Kong for the deposit “to reduce fees,” under the name “Xingfu Trade (HK) Ltd.” — a different legal entity from the license he had shown. That was the classic BEC signature from the FBI playbook.
4. The call. Northline called the real company whose license had been copied — the Yiwu hardware trader — using contact details from gsxt.gov.cn itself. The owner had never heard of Northline, Kevin, or Guangzhou Xingfu. The license had been stolen, the website was built on it, and the Hong Kong account was the scammer’s own.

7.3 What the Startup Did Differently

Three decisions made the difference, and they map directly onto the documented case history:

• They verified the entity, not the story. Google and Facebook were convinced by fake invoices from a fake Quanta; the fraud worked because nobody verified the entity behind the invoices. Northline checked the government registry first, where the story collapsed in 20 minutes.
• They treated the Hong Kong account as a stop event. Toyota Boshoku America’s $37 million loss in 2019 came after a supplier’s bank details were swapped to accounts the fraudsters controlled. Northline had never even been asked to wire to Hong Kong before they caught the mismatch — but the moment the “new account” appeared, their internal rule was verify or walk, not wire and pray.
• They timed it. The whole verification ran in four days, well inside their 7-day no-deposit rule, and long before Kevin’s “promotion deadline” (which turned out to be a rolling date that moved every time it passed). The scammer’s urgency apparatus was useless against a buyer who refused to hurry.

The follow-up is instructive too: Northline reported the storefront to the B2B platform, which removed it, and they forwarded the license-theft evidence to the real Yiwu company so it could file its own complaint. Three months later they signed with a verified tumbler factory in Zhejiang — confirmed on gsxt, audited by a third party, paid via T/T to a corporate account whose name matched the license exactly — at $3.60 per unit. The deposit was $10,800, and the factory delivered on schedule. The “savings” from the fake quote would have been a $8,550 wire into a scammer’s account. The whole episode is a compact masterclass in sourcing strategy under pressure: verify the entity, distrust new accounts, and never let a deadline set by the seller override a checklist set by you.

8. FAQ: Eight Questions Importers Ask Before Sending a Deposit

8.1 Is a 30% deposit normal, or should I refuse it?

A 30% deposit on a first order is the norm with real Chinese factories, and refusing to pay any deposit will usually disqualify you from working with serious manufacturers — they need deposit cash flow to buy materials, and they price that risk into every quote. What you should do is negotiate the structure, not the concept: 10–15% deposit with the balance against the B/L, or a split deposit (10% with the order, 10% after inspection) are both reasonable asks for a new relationship. The red flag is not the existence of a deposit; it is a supplier who refuses any modification, insists on 50% or more, or demands the deposit into a personal or third-party account. Real factories have fielded “can we do 10/90?” for twenty years and have a standard answer. A scammer has only scripts.

8.2 What is the minimum verification I should run before any deposit?

For any first order, regardless of size, run at minimum: (1) business license verified on gsxt.gov.cn, with status active and name matching everything else; (2) a live video call with a factory walk-through; (3) a landline call to the registered number; and (4) confirmation that the beneficiary bank account is a corporate account in the exact license name. That’s roughly two hours of work and costs nothing. For deposits above $5,000–10,000, add a third-party audit or a paid local inspection visit, and for large first orders, use a letter of credit or platform escrow instead of a pure T/T deposit. The scale of your verification should scale with the deposit: a $500 sample payment doesn’t justify a full audit, but an $8,550 deposit absolutely does. Build that ladder before you need it, and price it into the deal — verification is a line item in every serious import from China budget.

8.3 Can I verify a Chinese business license from outside China?

Yes — and it is free. The National Enterprise Credit Information Publicity System (gsxt.gov.cn) is publicly accessible internationally and has an English interface. You search by company name or Unified Social Credit Code and see registration status, legal representative, registered capital, business scope, and annual report history. Some foreign networks have intermittent access to the site; if gsxt won’t load, use commercial aggregators like Tianyancha or Qichacha, which mirror the same SAMR data. One caution: always type the URL yourself. Phishing sites that copy gsxt’s look exist, and a scammer may send you a “verification link” that shows whatever they want it to show.

8.4 What is Trade Assurance, and does it protect my deposit?

Trade Assurance is Alibaba.com’s buyer-protection program: when you transact through the platform, Alibaba holds the payment and releases it to the supplier against shipping milestones, and it covers qualified disputes up to the insured amount. It is genuinely useful — it converts an unsecured deposit into a platform-backed one — and for first orders on Alibaba.com it is usually the smartest payment route. But it is not a verification service: Trade Assurance protects the transaction, and it has limits and claim conditions. Your broader supply chain management still needs the paper, physical, and financial layers running underneath the platform’s protection. A supplier can have a Trade Assurance badge and still be a trading company passing off another factory’s goods. Use Trade Assurance for payment protection, and run the paper/physical verification layers anyway — they answer different questions.

8.5 What if the supplier is a trading company, not the factory?

Trading companies handle a large share of China’s export volume, and many are professional, honest partners — especially for small orders that factories won’t take directly. The problem is not trading companies; it is undisclosed trading companies that claim to be factories and price like factories while adding a margin and a risk layer. Ask directly: “Are you the manufacturer, and if not, which factory produces our goods?” Then verify the factory name, audit it, and consider contracting with the factory for the physical goods while the trading company handles logistics. In the contract, name both the seller and the producing factory, and give yourself inspection rights at the producing factory. This is standard practice in professional supply chain management, and a legitimate trading company will happily cooperate — disclosure costs them nothing and builds trust.

8.6 How do I handle a supplier who refuses an audit or a video tour?

Treat refusal as a finding, not an inconvenience. There are a handful of legitimate reasons to hesitate (the audit firm’s reputation, a bad prior audit experience, or genuine confidentiality around client products), but every one of them can be addressed: use a reputable firm, sign an NDA, or accept a live video tour instead of a full audit. A supplier who refuses both is either not the manufacturer, not operating at the claimed location, or not planning to be accountable — all three are reasons to stop. My rule: offer one alternative, then walk. If they refuse an audit but accept a live tour, proceed with the tour plus a local inspection at shipment time. If they refuse everything, the deposit you’re protecting is bigger than the order you’re chasing. Most Chinese suppliers who refuse verification are either trading companies protecting a margin or shells protecting a scam — and both need to be handled with the same open, documented process.

8.7 What should I do if I’ve already paid and suspect fraud?

Act immediately, in this order: (1) Contact your bank the same day — for international wires, banks can sometimes issue a recall request to the receiving bank (SWIFT recall), and speed matters; recovery odds drop sharply after 48–72 hours because funds are typically moved to secondary accounts. (2) Report to the FBI’s IC3 (ic3.gov) with all documents — even if recovery fails, your report feeds the data that leads to prosecutions like the Rimasauskas case. (3) Report to the platform where you found the supplier (Alibaba, Made-in-China, Global Sources) — they will freeze the storefront, which protects the next victim. (4) Send a formal demand letter citing your contract, including the deposit-recovery clause, via email and WeChat. (5) If the amount justifies it, consult a China-based attorney about arbitration or a preservation application (财产保全) in Chinese courts — freezing the scammer’s accounts quickly is the one route that occasionally recovers money. Realistic expectations: recovery rates for international wire fraud are low, which is exactly why verification before payment matters more than remedies after. That is the conclusion every experienced China sourcing operator reaches after their first claim: prevention is the only reliable recovery.

8.8 How much should I budget for professional verification services?

Think of verification as insurance with a better payout ratio. Rough current market ranges: a one-hour local visit by an inspector, $150–400; a basic third-party factory audit (SGS/BV/Intertek/TÜV tier), $500–1,500 depending on city and scope; a full audit with capacity, social compliance, and financial checks, $1,500–3,500; a professional sourcing agent handling verification plus negotiation and inspection, typically 3–5% of order value or a project fee. Compare that to a lost deposit: if your deposit is $10,000, spending $800 on verification is 8% — and it protects the other 92%. For companies doing repeat China sourcing, the audit report and verified supplier file become reusable assets, which is why mature buyers treat verification as a fixed cost rather than a discretionary expense.

9. Summary: A Verification Sequence You Can Run This Week

Verification is not a wall of bureaucracy; it is a sequence. Here is the exact 8-step process I run on every new supplier, with the reason each step earns its place.

Step 1 — Verify the business license on gsxt.gov.cn (day 1).
Ask for the license, then check the Unified Social Credit Code yourself on the official portal. Why this works: it is the cheapest lie-detector in the whole process — a stolen or fabricated license collapses here in 20 minutes, exactly as it did in the Northline case.

Step 2 — Cross-check name, address, and scope across every document.
License vs. website vs. quotation vs. contract. Why this works: scams usually mix one real document with several invented ones; mismatches are where the seams show.

Step 3 — Call the landline, then schedule a live video tour.
Use the registered number, call during Chinese business hours, and demand a live walk-through with the camera on the company sign. Why this works: a fake operation cannot maintain a convincing floor across multiple unscripted calls; a real factory shows you machinery, materials, and people.

Step 4 — Run a third-party audit or paid local inspection (deposit > $5,000–10,000).
Book it with a reputable firm, or hire a local inspector for a fast one-hour visit. Why this works: independent eyes kill the phantom factory and give your quality control China program a documented baseline for the order.

Step 5 — Pull export evidence.
Ask for a recent customs declaration number and a sample Bill of Lading; verify the shipper name. Why this works: export history is hard to fake convincingly, and it confirms the company actually moves goods.

Step 6 — Check the bank account against the license name, and require corporate accounts only.
Beneficiary name must match character-for-character; any “new” account, especially in Hong Kong, is a stop event. Why this works: the Toyota Boshoku $37 million loss and the Google/Facebook $121 million case both came from payments to accounts the real supplier never controlled.

Step 7 — Negotiate a contract with inspection, payment-trigger, and deposit-recovery clauses.
Name both parties exactly, attach the verified bank account, and write what happens on default. Why this works: the contract converts vague promises into documented liability, and it gives you enforceable leverage with real factories and a provable claim against scammers.

Step 8 — Apply the 7-day rule and the two-red-flag rule.
No deposit within 7 days of first contact; stop the process on any two independent red flags from different categories. Why this works: urgency is the scammer’s main tool, and cumulative red flags are the strongest single predictor of fraud — this rule alone would have saved most of the victims in the IC3 statistics.

Run this sequence once and you will have a supplier file you can reuse, a deposit you can defend, and a sourcing strategy built on evidence instead of impressions. The deposit is the moment when the entire relationship is tested — the factory’s honesty, your discipline, and the quality of your verification all meet at that single wire transfer. If you would rather have a professional run the layers in parallel, especially for your first import from China program, a platform like Chinaispp.com exists to do exactly that: verified suppliers, structured sourcing, and inspection built into the workflow.

The math has never changed: the cheapest part of any import is the verification, and the most expensive part is the deposit sent to the wrong account. Verify first, transfer second, and let the goods — not the promises — prove the supplier.

Tags: China sourcing, supplier verification, import from China, deposit fraud, business license check, supplier audit, sourcing agent, BEC scam, quality control China, supply chain management