Every china supplier payment you send is the single riskiest moment of an import transaction: money leaves your country, crosses into a foreign banking system, and lands in an account you may know very little about. If that account belongs to a fraudster instead of your factory, recovery odds shrink with every passing hour. This guide lays out the verification routine experienced importers use before releasing funds — a step-by-step checklist, a small test payment protocol, corporate account cross-checks, and company name consistency checks — so your money reaches the real supplier and never a criminal’s account.

Why China Supplier Payment Fraud Is Exploding

Wire fraud against importers has become an industrialized business. The FBI’s Internet Crime Complaint Center consistently ranks business email compromise among the costliest cybercrimes in the world, with reported losses running into the billions of dollars each year, and cross-border trade deals are a favorite hunting ground. China-bound orders are especially attractive targets for three reasons: the payment amounts are large, the relationships are often brand new, and the buyer and supplier are separated by language, time zones, and an ocean. A fraudster who inserts themselves at the payment moment can walk away with a life-changing sum in minutes, and the trail runs cold almost immediately.

The most dangerous thing about this crime is that it rarely looks like fraud from the outside. The scammer does not hack your bank, forge your signature, or brute-force anything. Instead, they slip quietly into an ordinary conversation you were already having, then change exactly one detail: the bank account number. Everything else about the transaction — the product, the price, the invoice, the shipping schedule — stays perfectly normal. That is why smart buyers treat the payment step as its own controlled process, with checks that do not depend on email at all.

There is also a hard asymmetry at the heart of this crime that every importer should internalize before their next order. A fraudster needs to succeed exactly once to walk away with months of your profit margin, while you need to be right every single time, across every supplier, every order, and every account change. Verification routines exist precisely to correct that imbalance: they convert a one-time judgment call made under deadline pressure into a repeatable process that works even when you are tired, traveling, or distracted.

The Anatomy of a Business Email Compromise Attack

Nearly every “account change” scam follows the same five-stage playbook:

1. Access. The attacker gains entry to a mailbox — sometimes the supplier’s, sometimes yours, sometimes a freight forwarder’s — through a phishing email, a reused stolen password, or a malware-laden attachment.
2. Monitoring. They read silently for days or even weeks, learning your invoice numbers, shipment schedules, payment deadlines, negotiation history, and the tone of the relationship.
3. Hijack. At the precise moment a payment is expected, they intervene: they either take over the real mailbox or register a lookalike domain that differs from the genuine one by a single invisible character.
4. Substitution. A convincing email arrives with “updated bank details,” usually backed by a doctored bank letter and an explanation that sounds administrative rather than suspicious.
5. Pressure. The message stresses urgency — goods will not ship, the deposit deadline will pass, the production line stops today — so you wire first and think later.

Why the “Updated Bank Account” Email Feels So Legitimate

Scammers succeed because the request fits the situation perfectly. It arrives exactly when you already expect to pay. It references real order numbers, real proforma invoices, and real names of people you have actually spoken with. It often comes from a mailbox that has been part of the conversation for weeks. And the stated reason — a tax review, an account upgrade, a subsidiary restructure — is precisely the kind of boring administrative detail nobody bothers to question.

The single best defense is a verification routine that does not rely on email for any final confirmation. Buyers who build that routine into their procurement process from day one — ideally with support from a Reliable manufacturing and procurement partner China that already knows which documents to demand and which answers to distrust — rarely fall for these schemes, because the routine makes every deviation obvious within minutes.

The China Supplier Payment Verification Checklist: 7 Steps That Work

Below is the complete pre-payment routine. Run it for every new supplier, every first payment, and every account change request — no matter how long the relationship has lasted, and no matter how trustworthy the supplier has been in the past. Fraudsters specifically exploit long relationships, because established trust is the thing they cannot fake and therefore must steal.

Step 1: Match the Beneficiary Name to the Legal Company Name

Open the bank details and read the account holder name character by character. It must match the legal entity name on your contract and proforma invoice — for example, “Shenzhen Brightstar Electronics Co., Ltd.” — with no missing suffixes, no trading-name shortcuts, and no unrelated third party of any kind.

Why it matters: legitimate suppliers are paid into accounts registered to their own legal entity. A beneficiary name that reads like an individual, a different company, or a “finance subsidiary” you have never heard of is the clearest warning sign in the entire process, and the check takes thirty seconds.

Step 2: Demand a Bank-Issued Account Certificate

Ask the supplier for an account opening certificate or bank book cover issued by their bank, showing the account name, account number, and bank branch. Request the original stamped document, not a screenshot pasted into an email thread, and keep a copy in your supplier file permanently.

Why it matters: any buyer can type fake bank details into an email, but fabricating a stamped, bank-issued document is far harder. If a supplier resists this request, ask yourself why a real factory would refuse a routine compliance step. Teams running Bulk product sourcing from China wholesale suppliers treat this certificate as a standard onboarding document, collected once from each supplier and archived forever.

Step 3: Cross-Check Against Your Contract and Proforma Invoice

Lay three documents side by side: the signed contract, the proforma invoice, and the bank details just provided. The company name, account number, and bank name must be identical across all three. If the proforma invoice predates a “new” account, treat the situation as an account change request and re-verify from scratch using the full checklist.

Why it matters: fraud depends on small, isolated changes that no one compares. When documents must agree with each other, a substituted account cannot hide; the inconsistency surfaces immediately, even if every individual document looks convincing on its own.

Step 4: Verify Through a Second, Independent Channel

Never confirm bank details using the same channel that delivered them. If the details arrived by email, verify by phone using a number you found independently — the number printed on the stamped contract, the official company website, or a business license lookup — not a number or contact listed inside the suspicious email itself.

Why it matters: if the attacker controls the mailbox, every reply inside that thread reaches the attacker too. An independent channel breaks the loop, because a scammer cannot intercept a phone call to a number they did not plant. A China sourcing agent for cross border ecommerce who speaks the supplier’s language and already holds verified contact details can complete this callback in minutes and remove the guesswork entirely.

Step 5: Run a Small Test Payment

For every new account — a brand new supplier, or an existing supplier’s “new” account — send a small amount first, typically one to two percent of the invoice value, and confirm receipt with the supplier by phone before releasing the balance.

Why it matters: a test payment proves the account actually exists, accepts international wires, and is controlled by someone genuinely in contact with your real supplier. If the account is fake, you lose a few hundred dollars instead of a full order value. Genuine suppliers understand this practice completely; fraudsters resist it, stall, or suddenly develop mysterious “banking problems.”

Step 6: Confirm Receipt With the Account Holder — By Phone

After the test payment lands, call your usual contact at the factory and have them confirm the exact amount and value date in their own banking system. Ask them to read back the account holder name exactly as their bank displays it.

Why it matters: money that arrives is not the same as money that arrives correctly. A live confirmation closes the loop and creates a second human checkpoint between your funds and a stranger’s account, and it gives your supplier an early heads-up if anything looks wrong on their side too.

Step 7: Archive Every Verification Record

Save the bank certificate, your phone call notes with dates and times, the email headers of any account change request, and the SWIFT confirmation of the test payment in a single supplier file that anyone on your team can access.

Why it matters: if fraud ever does occur, a documented verification trail dramatically strengthens your bank recall request, your police report, and any insurance claim. It also protects you in audits and payment disputes, and it makes the next china supplier payment faster, because the verified baseline is already on record.

[Video suggestion: “Inside a BEC Attack”] Insert a 3-minute screen-recorded walkthrough here showing an anonymized account-change email, its lookalike domain, and the email header details that exposed it. Readers remember what they see far longer than what they read.

Small Test Payment vs. Full Wire: A Practical Comparison

The table explains itself, but one nuance deserves emphasis: the test payment is not merely a financial hedge, it is a behavioral probe. A legitimate supplier confirms receipt cheerfully and often thanks you for being careful. A fraudster, whose entire scheme depends on receiving the full amount in one shot, tends to push back — the test “failed,” the bank is “holding” it, please send the full amount so production is not delayed. Any of those responses should freeze the payment process instantly and trigger a full re-verification through an independent channel.

This is also where disciplined sourcing operations differ from casual buyers. Teams that handle Bulk product sourcing from China wholesale suppliers at volume build the test payment into their standard payment workflow, so no individual employee ever has to argue with a supplier about it — the process, not the person, delivers the unwelcome news.

Legitimate Account Change or BEC Scam? The Side-by-Side Comparison

Suppliers do occasionally change banks — mergers, account upgrades, and regional branch reorganizations are real events. The trick is distinguishing an ordinary administrative change from a hijacked conversation. Compare the two profiles:

If even two rows in the right-hand column describe your situation, stop the payment and escalate. No genuine supplier has ever lost money because a buyer asked one extra verification question, but thousands of buyers have lost everything because they were afraid of offending a supplier they thought they knew.

[Image suggestion: “Spot the Difference”] Add a side-by-side screenshot pair here: a genuine invoice email versus a spoofed one, with the lookalike domain character, the mismatched reply-to address, and the urgency language circled in red annotations.

Company Name Consistency: The 5-Point Match for Payment Safety

Company name consistency is the quiet backbone of every check above. Before any china supplier payment leaves your account, the legal entity name should match across five documents:

1. The business license the supplier shared during onboarding.
2. The bank account certificate issued by the supplier’s bank.
3. The signed contract and proforma invoice.
4. The export documents attached to a previous shipment, such as the bill of lading or the customs declaration.
5. The company website and email domain in everyday use.

When all five agree, you are almost certainly dealing with the real company. When any two disagree, you have found either a sloppy supplier or an active fraud, and both outcomes deserve the same response: pause the payment and resolve the discrepancy in writing, through an independent channel. Experienced importers who work with a Reliable manufacturing and procurement partner China often have this five-point match performed on every new supplier before a single dollar is committed, because a mismatch discovered before payment costs nothing, while one discovered after payment costs everything.

Three specific mismatch patterns deserve special attention. First, payments requested to a personal name are a serious red flag — real factories invoice through corporate accounts, and an individual account means either a middleman you have no contract with or an outright scammer. Second, be careful with accounts belonging to a “sister company” or “group finance subsidiary” that you cannot find in the business license; ask for the corporate registration documents linking the two entities before proceeding. Third, treat Hong Kong accounts operated by a mainland factory as a reason for extra diligence rather than automatic rejection — many are entirely legitimate for trade settlement, but they deserve the full checklist and a test payment without exception.

Case Study: A $47,250 China Supplier Payment Gone Wrong

In February, a Chicago-based importer of commercial LED lighting — call them Northlight Trading — placed a $68,400 order with a Shenzhen factory they had worked with twice before without any problems. The 30% deposit of $20,520 was sent on February 12 to the factory’s verified account, collected properly during onboarding. Production ran for six weeks, and the balance of $47,880 fell due before shipment on March 25.

On March 24, one day before the scheduled wire, Northlight’s purchasing manager received an email from the factory’s “export manager” — same name, same signature block, same writing style — but the domain contained a capital “I” where a lowercase “l” belonged, invisible at a glance on a phone screen. The email explained that the factory’s account was “under review by the local tax authority” and that the balance should be sent to a “group settlement account” at a different bank. The account holder name was an individual, with a company name slightly different from the factory’s legal entity.

The email arrived at 4:47 PM Chicago time, twelve hours before the payment deadline the factory had emphasized all week. The manager was traveling, approved the wire from his phone, and $47,250 was sent the next morning — a $630 late-payment discount had been negotiated earlier, which explains the slightly lower figure.

Six days later, the freight forwarder asked for the SWIFT copy to book the shipment, and the real factory replied that no balance had ever been received. By then, the money had left the receiving account within hours of arrival and been dispersed onward through a chain of mule accounts.

Northlight’s bank filed a SWIFT recall immediately, and because $9,400 was still sitting in the first beneficiary account when the receiving bank froze it, that portion was eventually returned — five months later. The remaining $37,850 was never recovered. Their cyber insurance declined the claim because the policy excluded social engineering events that lacked dual-authorization controls.

The brutal arithmetic: the verification routine described in this article would have taken roughly twenty minutes and cost nothing. The Step 4 callback alone would have ended the scam with one phone call to the number printed on the stamped contract. Today, Northlight routes every first payment and every account change through the full checklist, uses a Bulk product sourcing from China wholesale suppliers workflow that enforces dual approval on any wire above $10,000, and has not had an incident since.

What to Do If You Already Sent Money to a Fraudster

Speed is everything, because the first 24 hours determine most of the outcome.

1. Call your bank immediately and request a SWIFT payment recall. Ask them to contact the beneficiary bank directly and to freeze the receiving account. Fraudsters empty accounts with astonishing speed, so every hour counts.
2. File a report with your national cybercrime authority — the FBI’s IC3 in the United States, Action Fraud in the UK, or your local equivalent. Financial institutions and regulators coordinate cross-border freezes through these channels.
3. File a police report locally, then notify the supplier’s local police jurisdiction through your embassy’s commercial section if the amount justifies it.
4. Notify your real supplier through a verified channel so they can check whether their systems, or a partner’s, were compromised, and so they can warn their other buyers.
5. Notify your insurance broker the same day, even if you are unsure of coverage; late notification alone can void an otherwise valid claim.

Even with a perfect response, recoveries are rare — which is exactly why the pre-payment checklist is worth its weight in gold. Prevention costs minutes; recovery costs months and usually fails anyway. Buyers using a China sourcing agent for cross border ecommerce gain an extra layer here as well, because a local agent can walk into a bank branch or police station in person, in the right language, while the trail is still warm.

China Supplier Payment FAQ

1. Is it normal for a Chinese supplier to change bank accounts?
It happens, but rarely without warning. Genuine changes are announced early, documented by the bank, and keep the account under the same legal company name. Any change announced hours before a deadline, or routed to a new entity name, should be treated as fraud until it has been verified through an independent channel.

2. Can I trust the bank certificate image the supplier emailed me?
Only as a starting point. Documents can be edited or faked, so treat the certificate as one data point and verify the account through a phone call using a number taken from the signed contract or the official website. The certificate’s real value is that it forces the supplier to put a bank-stamped document on record that can be cross-checked later if anything goes wrong.

3. Why do suppliers refuse PayPal or credit cards for large orders?
Fee math. On a $50,000 order, card or platform fees of 3-4% cost the supplier $1,500-2,000, which wipes out most of a factory’s margin. Wire transfer is the standard for B2B trade, which is precisely why fraudsters love it — wires are fast and hard to reverse. The answer is not to demand consumer payment methods; it is to verify the receiving account properly before sending anything.

4. The bank account is under a personal name. Should I pay?
No. Real factories receive payments through corporate accounts that match their business license. A personal account means either an undisclosed middleman — with whom you have no contract and no legal recourse — or a fraudster. Ask for a corporate account or walk away from the deal.

5. How large should a test payment be?
One to two percent of the invoice value, usually between $200 and $600 — enough to prove the account is live and controlled by your supplier, but small enough to lose without pain. Confirm receipt by phone, then release the balance. Keep the amount high enough to trigger a normal bank posting fee, because some fraudsters use micro-deposits below fee thresholds to probe whether buyers actually check anything.

6. Does a video call with the supplier help verification?
It helps with identity, but not with bank details. A scammer who hijacked a real mailbox is not the person on the video call, and modern deepfake filters make even that assumption shakier every year. Video calls complement the checklist; they never replace the independent callback and the name-matching checks.

7. Is paying into a Hong Kong account risky?
Not automatically. Many mainland manufacturers hold Hong Kong accounts for trade settlement, and they are legal and extremely common. The risk profile changes only in that recovery is harder if something goes wrong, so apply the full checklist without shortcuts — name match, bank certificate, independent callback, and a test payment every single time. A China sourcing agent for cross border ecommerce can also verify the account registration locally when the stakes justify it.

8. Will my bank reimburse me if I am scammed?
Usually not for authorized wire transfers, because you — not the bank — instructed the payment. Some banks offer partial goodwill refunds in fast-reported cases, and a few insurance policies cover social engineering fraud, but the default outcome is a loss. This is exactly why verification before payment is the only reliable protection.

Final Word: Make Verification a Habit, Not a Reaction

BEC fraud does not reward cleverness at the moment of attack; it punishes the absence of routine. The buyers who never lose a china supplier payment are not paranoid geniuses — they simply run the same boring checklist every single time: name match, bank certificate, document cross-check, independent callback, test payment, phone confirmation, records archived. Twenty minutes of discipline stands between your money and a scammer who needs exactly one distracted afternoon. Build the routine into your procurement process, train your team on the red flags, and work with a Reliable manufacturing and procurement partner China that treats verification as standard operating procedure rather than an optional extra. Your future self, staring at a confirmed receipt instead of a police report, will be grateful.

Tags: supplier verification, bank account fraud, business email compromise, wire transfer safety, import payments, trade fraud prevention, supplier due diligence, payment security, China sourcing, BEC scam

How Do You Verify a Supplier Bank Account Before Sending a China Supplier Payment?最先出现在China Sourcing Agent。

The best way to pay chinese suppliers after you have been burned once is not a clever new instrument. It is a verification habit that survives a compromised inbox. Business email compromise works in this trade because the money move looks routine: a changed bank account, a beneficiary name altered by two letters, a request timed to the day your balance is due. This guide is for the mid-market importer running three to eight orders a year between $15,000 and $80,000 who has already lost between $4,000 and $60,000 and now needs a protocol: how to verify bank details before the wire, how to re-verify after a hack, what to do when a supplier asks for Western Union or a personal account, and which instrument set limits the damage.

Suggested visual: A side-by-side screenshot of a legitimate proforma invoice bank block and the spoofed version, with the three altered characters highlighted and an arrow showing where the email thread was hijacked.
Suggested visual: A one-page “Verification Card” infographic listing the five checks a buyer runs before releasing any balance: second channel, legal name match, corporate account, callback to a number on file, and a $100 test wire.
Suggested visual: A 90-second screen recording of a callback verification: the buyer dials the number saved before the order, asks one scripted question about the account holder name, and logs the answer in the payment file.

Why the Best Way to Pay Chinese Suppliers Is Now a Fraud-Control Decision

Business email compromise is not a dramatic hack. In the China trade cases that reach us, it is usually dull: an attacker gets into a mailbox, sits quietly for two to six weeks reading the thread, learns the order value and the production stage, and then sends one message at the moment the buyer is most likely to pay without thinking. The message is short, apologetic and time-pressured. Our bank account is under audit. Our account was frozen by the tax bureau, please use the new one. We updated our remittance details, see the revised proforma invoice attached. Nothing in the email looks wrong, because most of it was copied from messages the attacker read.

Both sides of the trade get hit. A supplier’s sales mailbox is the most common entry point, but buyer-side compromise is just as common and just as costly, because the attacker can then reply inside a genuine thread from a genuine address. Lookalike domains do the rest: a single letter swapped in the domain, a hyphen added, or a display name that reads identically in the inbox. The buyer sees a known contact, a plausible reason, and a deadline. That is the whole trick.

The reason the loss usually lands on the buyer is settlement speed. A telegraphic transfer to a mainland corporate account settles in one to two business days; a transfer into an offshore mule account can be broken up and moved within hours of credit. By the time anyone notices, the money has passed through three or four accounts in two or three jurisdictions, and recall is a request, not a right. Practical recovery rates on cross-border BEC wires are low, and the cases that do recover tend to be the ones reported within twenty-four hours.

What makes this a payment-design problem rather than an IT problem is that every instrument you could choose handles a hijacked instruction differently. A wire to a corporate account in the supplier’s legal name fails slowly and visibly; a cash pickup transfer is unrecoverable by design; a letter of credit shifts the check to a bank’s document examiners. Once you accept that your inbox is a hostile channel, the question stops being “which bank is cheapest” and becomes “which instrument still protects me when the instruction is fake.” This is also where a Reliable manufacturing and procurement partner China changes the maths, because a partner with staff on the ground can walk into the factory and confirm a bank change in person instead of guessing over email.

There is a second reason the fraud problem and the instrument problem are the same problem. Instrument choice dictates how much of your money is exposed in a single event. A buyer who wires 70 percent of $60,000 as one balance payment has made a single $42,000 bet on the authenticity of one email. A buyer who splits that exposure across a deposit, a document-linked payment and a post-arrival retention has made three smaller bets, two of which can still be stopped after problems appear. Structuring for fraud control and structuring for quality leverage turn out to be the same discipline.

How to Verify Bank Details and Choose the Best Way to Pay Chinese Suppliers After a Hack

Step 1. Freeze the thread and open a second channel.
The moment any bank detail changes, stop replying to the thread. Do not forward, do not quote, and do not ask “is this correct?” in the same conversation, because if the mailbox is compromised the attacker answers. Start a fresh message to an address you collected before the order, or better, open WeChat, WhatsApp or the phone. Treat the email thread as evidence, not as a channel.
Why this works: an attacker can only control the channel they are inside. Moving the conversation to a channel established before the compromise restores the one thing you lost: an independent witness.

Step 2. Match the beneficiary name to the legal entity, character by character.
Open the supplier’s business licence, the contract, and the previous proforma invoice side by side. The account holder must be the exact legal entity name that appears on those documents, spelled identically. “Shenzhen Xingyuan Trading Co., Ltd.” and “Shenzhen Xingyuan Trade Co. Ltd.” are not the same payee, and a mismatch in one syllable is the single most common tell.
If you buy through a Bulk product sourcing from China wholesale suppliers programme, ask for the licence scan and the bank account page in the same request, so both documents arrive from the same source at the same moment.
Why this works: a fraudster can copy an account number perfectly but cannot easily fake a name that matches the licence, so name-matching converts a judgement call into a document check.

Step 3. Confirm you are paying a corporate account, not a person.
Legitimate Chinese factories and trading companies receive export payment into a corporate account held in the company’s own name. If the beneficiary is an individual’s name, a “finance manager,” or a company with no connection to your supplier, stop. No legitimate exporter needs your $30,000 routed through a private account to save tax, avoid a quota, or help a cousin.
Why this works: a personal beneficiary breaks the legal link between your payment and your supplier, which means that if the goods never arrive you have paid a stranger and have no contractual counterparty to sue.

Step 4. Call a number you already had, and ask one scripted question.
Use the mobile number saved in your CRM before this order, or the number on the original contract, never the one in the signature of the suspicious email. Ask a question the attacker cannot answer from the old thread: “Confirm the exact account holder name for our invoice ending 4471.” Keep it closed, log the date, time and answer.
Why this works: telephone verification defeats mailbox compromise completely, because the fraudster controls the email account and not the supplier’s phone, and a logged call is the evidence your bank will ask for later.

Step 5. Send a $100 test wire and confirm the value received.
Before any five-figure payment, send a small transfer to the account and ask the supplier to confirm the exact amount, currency, value date and sending name. Then wait for that confirmation on the verified second channel. It costs one wire fee and one day.
Why this works: a test wire proves the account exists, belongs to someone who is actively watching it, and can receive foreign currency, which quietly eliminates both typo accounts and fabricated details.

Step 6. Cap the blast radius: no single wire should be able to ruin the quarter.
Set a rule that no single payment exceeds a fixed ceiling, typically $15,000 to $25,000 for a mid-market importer, and split anything larger across a deposit, a document-linked payment and a retention tranche. Write the retention into the proforma invoice as 20/60/20 rather than fighting over the deposit percentage. A China sourcing agent for cross border ecommerce can hold that retention locally and release it only after inspection passes, which keeps your leverage without asking the factory to trust a stranger.
Why this works: splitting converts one catastrophic exposure into three recoverable ones, and the retention tranche is the only money that is still yours when a fraud or a defect becomes visible.

Step 7. Match the instrument to the risk, not to habit.
For a verified supplier with three or more clean orders, a bank wire to the confirmed corporate account, released against copy bill of lading plus a passed inspection, is the best way to pay chinese suppliers on cost and speed. For a first order above $50,000, an unverified counterparty, or a supplier whose mailbox has just been compromised, use a letter of credit at sight. Never use Western Union, MoneyGram, a personal account, a crypto transfer, or a third-country beneficiary for any trade payment.
Why this works: each instrument has a different failure mode, and choosing by risk means the instrument that fails most expensively is only used where you cannot avoid it, which in practice is nowhere.

Step 8. Write the verification policy into the purchase order and re-run it every quarter.
Add one clause to every PO: bank details may only change by written notice confirmed by telephone, payment is made only to the account holder named in the contract, and any change resets the verification sequence. Then re-verify standing suppliers’ details every ninety days even when nothing has changed.
Why this works: a written policy removes the discretion that fraud depends on, because a salesperson under deadline pressure no longer gets to decide whether a callback is necessary.

Payment Instruments Compared: Fraud Exposure and Reversibility

The table below scores each instrument on a $30,000 balance payment, using typical mid-market terms for a European or North American importer banking in USD.

Bank Detail Verification Protocol: Before, During and After

Run this checklist once before the deposit and again before every balance release. Any “no” answer stops the payment.

Case Study: A $47,800 Order, a Latvian Account, and a Second Attempt That Failed

Daniel Ferreira runs a fourteen-person outdoor furniture brand outside Porto. In March 2025 he placed a $47,800 order for cast aluminium bistro sets with a Foshan factory he had used twice before. The deposit of $14,340 went to the factory’s verified corporate account without incident. Production finished on 12 May, and on 13 May a message arrived inside the existing thread: the factory’s account was under annual audit, please remit the balance to an updated account in Riga, Latvia, held by “Foshan Jinyuan Metal Products Ltd” with a slightly different address line.

Ferreira’s controller noticed the third-country beneficiary and asked for confirmation by reply. The reply came in eleven minutes, in the same thread, with a scanned letter on letterhead. The balance of $33,460 went out that afternoon. The real factory chased the payment nine days later. The recall request produced nothing: the funds had moved through two intermediary accounts within thirty-one hours of credit, and the Latvian bank had already closed the relationship. Ferreira recovered zero, re-made the goods at a 22 percent price increase, and lost the summer season. Total damage was roughly $47,000 including the re-make. He later consolidated four of his remaining factory relationships under a single Bulk product sourcing from China wholesale suppliers arrangement, which cut the number of bank blocks his controller had to police from five to one.

Fourteen months later the same factory’s mailbox was compromised again. This time the protocol was in place. The change notice went straight to a WeChat voice call with the sales manager whose number had been saved since the first order in 2024; the manager had no idea what the email said. Ferreira ran the name check against the business licence on file, saw that the “new” payee in Lithuania was not the contracting entity, and sent a $100 test wire to the original verified account, which the factory confirmed within four hours. The attempted theft was for $41,920 on a $52,400 order. Nothing was lost, the order shipped on schedule, and the factory stayed on the panel.

The difference was not technology and it was not a bigger bank. It was a saved phone number, a licence on file, and a payment structure that no longer put 70 percent of the order behind a single email. Ferreira’s instrument set today is 20 percent deposit to the verified corporate account, 60 percent against copy bill of lading plus a passed inspection, and 20 percent retention released thirty days after arrival, with a letter of credit at sight for any new supplier above $50,000.

Alternatives If You Cannot Verify the Account Yourself

Use a letter of credit at sight instead of a wire.
Pros: the bank examines documents before releasing funds, so a hijacked instruction cannot redirect payment; non-conformity gives you a defensible reason to stop. Cons: 0.15 to 0.5 percent of invoice value plus $150 to $350 in fees, three to seven extra days of processing, and strict document discipline that trips up small factories. Best for first orders above $50,000 and for any supplier whose mailbox has recently been compromised.

Route payment through a platform escrow or trade assurance.
Pros: funds sit with a third party until you confirm shipment or receipt, and the interface is familiar to small suppliers. Cons: fees of 1 to 5 percent, coverage limits that often cap well below a container value, and dispute processes that favour the platform’s own rules. Best for orders under $15,000 and for suppliers found on a marketplace.

Have a China-based entity pay the factories for you.
A Bulk product sourcing from China wholesale suppliers arrangement lets one verified local counterparty hold the supplier relationships and receive your money under a single, repeatedly verified account. Pros: one account to verify instead of eight, staff who can physically confirm a bank change, and local-language access to the business registry. Cons: you must diligence that entity as carefully as any supplier, you add a margin line, and you become dependent on their controls. Best for importers with more than four active suppliers and no staff in Asia.

Use a specialist cross-border payment provider with beneficiary pre-approval.
Pros: you whitelist beneficiary accounts inside the provider’s system, so a changed account simply cannot be paid; FX spreads are usually 0.3 to 0.8 percent against 1.0 to 1.8 percent at a retail bank. Cons: onboarding takes one to three weeks, suppliers may dislike receiving from a non-bank name, and cover varies by corridor. Best for importers running eight or more payments a year.

Ask for net terms once the relationship is proven.
Pros: paying thirty to sixty days after arrival removes deposit exposure entirely and is the strongest possible position. Cons: very few factories will grant it before two or three years of clean trade, and it usually comes priced into the unit cost. Best as a destination, not a starting point. A China sourcing agent for cross border ecommerce can bridge towards it by vouching for your payment record with factories that would never extend terms to an unknown foreign buyer.

Frequently Asked Questions

What is the best way to pay chinese suppliers if I have already lost money to a scam?
Rebuild around two rules rather than one instrument. First, no payment leaves without a second-channel confirmation using contact details collected before the order. Second, no single payment can exceed a ceiling you set yourself, typically $15,000 to $25,000, which forces a split into deposit, document-linked payment and retention. On top of that, use a letter of credit at sight for first orders above $50,000 and any supplier whose email has been compromised. The instrument matters less than the fact that a single compromised message can no longer move most of your money.

How do I verify a Chinese supplier’s bank details safely?
Match the account holder name to the business licence and contract, character for character, and confirm the account is corporate rather than personal. Then callback on a phone number saved before the order and ask one closed question about the account holder name for the specific invoice. Send a $100 test wire and have the supplier confirm the amount, currency and value date on a verified channel. Log every check with a date. Never accept a change that arrives only inside an existing email thread, and never accept a scanned letter as proof.

What should I do if a supplier asks for Western Union or a personal account?
Treat it as a stop, not a negotiation. Western Union and similar cash pickup services are anonymous, instant and irreversible, which is exactly why no legitimate exporter needs them; the “our corporate account is frozen” story is the standard script. A personal account breaks the legal link between your payment and the company you contracted, so if the goods fail you have no counterparty. Reply on a second channel asking the real contact to reissue corporate details, and if they insist, walk away from the order. Where you need continuity of supply while you investigate, a Reliable manufacturing and procurement partner China can re-source the item and hold payment until the replacement factory’s account has passed the same five-check sequence.

Is a Hong Kong or third-country beneficiary account always a red flag?
Not always, but it always requires a documented reason before you pay. Legitimate cases exist: a Hong Kong or Singapore treasury entity inside the same group, a factory using a declared export agent, or a group that banks offshore for currency reasons. What makes it legitimate is that the entity was named in the contract or proforma invoice from the start and can be evidenced in the business registry. What makes it fraud is a change introduced mid-thread, under time pressure, to a country that has nothing to do with the supplier.

Can I recover money sent to a fraudulent account?
Sometimes, but speed decides almost everything. Contact your bank’s fraud desk the same day and ask for an MT103 recall and a message to the beneficiary bank; within the first twenty-four hours there is a real chance funds are still sitting in the receiving account. Provide the SWIFT reference, the fraudulent instruction and your verification log. After that the odds fall steeply, because mule accounts move money across borders in hours. Also file a police report, since banks and insurers will ask for a case number.

Should I use a letter of credit after being defrauded?
Use it selectively. An LC makes a hijacked email much less dangerous, because your bank pays against documents rather than against an instruction, and non-conforming documents give you a defensible reason to stop payment. But it costs 0.15 to 0.5 percent plus $150 to $350, adds three to seven days, and requires document discipline that small factories struggle with. A sensible compromise is to reserve LCs for first orders above $50,000 and for any supplier whose mailbox has been compromised, and use verified wires plus retention for everyone else.

How often should I re-verify bank details?
Every ninety days for standing suppliers even when nothing has changed, and immediately after any of four triggers: a change in the bank block on a proforma invoice, a gap of more than six months since the last order, a change in the salesperson handling your account, or any sign of unusual email behaviour such as delayed replies or a new signature block. Re-verification takes about fifteen minutes when the licence and the phone number are already on file, and it should be logged in the same payment file as the original check.

Do I need a China sourcing agent to pay suppliers safely?
No, but it reduces the number of accounts you have to protect. If you buy from six factories directly, you have six bank blocks, six salespeople and six mailboxes that can be compromised. Working through a China sourcing agent for cross border ecommerce collapses that to one counterparty you can diligence once and verify face to face, which is the reason many burned buyers consolidate payment even when they keep sourcing decisions in house. The cost is a margin line and the need to diligence the agent as strictly as any factory.

Conclusion

Fraud control and payment design are the same discipline now. The buyer who lost money did not lose it because the bank was wrong; they lost it because a single email could move most of the order, and because nothing in the process forced a second opinion before the wire went out. Fixing that does not require a new bank, a blockchain pilot or an expensive platform.

It requires four habits: verify the beneficiary against the licence every single time, confirm any change on a channel established before the order, split every order so no single payment is fatal, and match the instrument to the risk instead of to habit. Do those four things and the best way to pay chinese suppliers becomes a process your team can run without adrenaline, even on a Friday afternoon when the balance is due and the thread looks completely normal.

For buyers rebuilding after a loss, a Reliable manufacturing and procurement partner China supplies the part email can never supply: someone who can stand in the factory and confirm, in person, that the account you are about to pay is the account that belongs to the company making your goods.

Tags: best way to pay chinese suppliers, supplier payment fraud, business email compromise, verify chinese supplier bank details, western union supplier scam, letter of credit china, payment verification checklist, third country beneficiary, china sourcing fraud prevention, secure supplier payments

How to Verify Bank Details After a Hacked Email Thread: the Best Way to Pay Chinese Suppliers最先出现在China Sourcing Agent。