Why “They Have a Business License” Does Not Mean They Are Safe

Your supplier sends you a business license. It has a red stamp, a registration number, and looks official. You relax. “They have a license, so they are real.”

That assumption costs overseas buyers tens of thousands of dollars every year.

China sees millions of new company registrations every year. A significant number are shell companies — entities registered for the sole purpose of looking legitimate on paper, collecting a deposit, and disappearing. The business license proves only that someone filed paperwork with the government. It does not prove the company operates a factory, has assets, or will fulfill your order.

The real danger signals are not on the license. They are in the dynamic records maintained by SAMR — the State Administration for Market Regulation — and accessible through the National Enterprise Credit Information Publicity System (GSXT). A company can have a perfectly valid license and simultaneously be on the abnormal operations list, have zero paid-in capital, and be registered at a virtual office address.

This article lists 15 red flags backed by SAMR official data. Each one tells you what it is, why it matters, and exactly where to find it in the official record. Use this checklist before you wire any deposit.

The 15 SAMR-Backed Red Flags

Category A: Registration Status — The Most Critical

These flags directly tell you whether the company is legally active and in good standing. If any of these are present, treat the transaction as high risk.

1. Abnormal Operation (经营异常)

What it is: SAMR places a company on the Abnormal Business Operations Directory when it fails one of four basic compliance obligations: missed annual report deadline, failure to publish required information after a formal order, uncompleted required name change registration, or inability to be contacted at the registered address (confirmed by two undelivered official mailings 15–30 days apart).

Why it is dangerous: A company on this list may have stopped operating, never operated at all, or be deliberately evading contact. The most common trigger — a missed annual report — is also the strongest indicator of a shell company or scam operation. A fraudulent entity that takes your money and vanishes has no reason to file an annual report.

How to find it in SAMR: Search the company by name or USCC on GSXT. The company profile has a dedicated “经营异常” (Abnormal Operation) section showing the listing date, reason, and removal date if applicable.

Deep dive: What Does “Abnormal Operation” Mean in a SAMR Company Record? — Full breakdown of all four triggers, the removal process, and the three-year escalation to the serious illegal list.

2. Serious Illegal and Untrustworthy List (严重违法失信名单)

What it is: This is the blacklist. A company reaches this list either by committing a serious violation or — more commonly — by staying on the abnormal operations directory for three consecutive years without being removed.

Why it is dangerous: The consequences are severe and directly affect your ability to do business with the company. The legal representative is restricted from high-consumption activities (air travel, high-speed rail, luxury hotels). The company is barred from government procurement and public bidding. It is ineligible for administrative licenses and honorary designations. The legal representative cannot serve as a director, supervisor, or senior manager at other companies. If you are about to pay a deposit to a company on this list, you are paying an entity that is already under severe regulatory sanction.

How to find it in SAMR: The GSXT company profile includes a “严重违法失信” (Serious Illegal & Untrustworthy) section. This is separate from the abnormal operation section — check both.

3. Cancelled vs. Revoked Status (注销 vs 吊销)

What it is: These are two different ways a company ceases to exist, and the distinction matters. Cancellation (注销) is a voluntary, orderly process — the company chose to close, settled its debts, and filed the proper paperwork. Revocation (吊销) is a punitive measure — SAMR forcibly canceled the company’s business license because of serious violations, such as operating without a license for an extended period, submitting false registration materials, or failing to resume operations within six months of registration.

Why it is dangerous: A contract signed with a revoked company may be unenforceable, because the entity no longer has legal capacity to conduct business. If a supplier’s company status shows “revoked” and they are still taking orders, they are operating illegally. Even “cancelled” status means the company no longer exists — if someone is using a cancelled company’s name and stamp to sign contracts, that is fraud.

How to find it in SAMR: The company profile header shows the current registration status (登记状态). Look for “存续/在业” (active), “注销” (cancelled), “吊销” (revoked), or “迁入/迁出” (moving in/out). Any status other than “存续” or “在业” warrants immediate clarification.

Category B: Capital and Address — The Most Common Shell Company Signatures

These flags do not necessarily mean fraud on their own, but they are the classic profile of a shell company. When multiple appear together, the risk compounds.

4. Subscribed vs. Paid-In Capital Trap (认缴 vs 实缴)

What it is: Since China’s 2014 company law reform, registered capital is “subscribed” (认缴), not “paid-in” (实缴). A company can register with RMB 50 million in subscribed capital and contribute zero. The shareholders simply promise to pay it in by a future date — often 20 or 30 years later. The business license shows only the subscribed capital. The paid-in amount is a separate field in the SAMR record.

Why it is dangerous: Subscribed capital is a promise, not an asset. If the company defaults on your order, the RMB 50 million on the license does not exist. You cannot recover from capital that was never contributed. A company with RMB 500,000 in paid-in capital is more substantial than one with RMB 50 million subscribed and zero paid in. Scammers love high subscribed capital — it looks impressive on the license and costs nothing to declare.

How to find it in SAMR: The GSXT shareholder information section (股东及出资信息) shows each shareholder’s subscribed capital amount and paid-in capital amount, along with the contribution deadline. If paid-in is zero or the deadline is 20+ years in the future, the company has no real capital behind it.

A $19 full report from ChineseVerify will surface the paid-in capital amount, social insurance participant count (a proxy for actual employees), and any abnormal operation history — all critical data points that a business license alone hides.

5. Virtual Registered Address (虚拟注册地址)

What it is: Many Chinese companies register at addresses that are not actual places of business — shared office incubators, business registration service addresses, “concentration registration zones” (集中办公区), or virtual office providers. These are legal for registration purposes, but they mean the company does not necessarily operate from that location.

Why it is dangerous: If you are buying manufactured goods, a company registered at a virtual office address is almost certainly not a factory. It may be a trading company, a middleman, or a shell with no physical operations at all. Virtual registration is extremely common among scam entities because it costs almost nothing and requires no physical presence. The address on the license is not where your goods are being made — if they are being made at all.

How to find it in SAMR: The registered address (住所) is shown on the company profile. Look for indicators like “集中办公区” (concentration office zone), “孵化器” (incubator), “商务秘书” (business secretary), or room numbers that look like mailbox slots (e.g., “A座101室-035”). Cross-reference the address on a map — if it is a shared office building or a registration service address, the company likely has no factory there.

6. Unreachable Registered Address (地址失联)

What it is: When SAMR cannot contact a company at its registered address, it follows a formal procedure: two official mailings sent 15–30 days apart, both returned unsigned. The company is then deemed unreachable and listed for abnormal operation. This is the second most common abnormal operation trigger.

Why it is dangerous: If the government cannot deliver mail to the address, neither can you. If a dispute arises, you will not be able to serve legal documents, send demand letters, or locate the company. An unreachable address combined with an active sales operation is a classic scam signature — the company takes orders and payments while being officially impossible to contact.

How to find it in SAMR: Check the abnormal operation section for the reason “通过登记的住所或者经营场所无法联系” (unable to contact at registered address or business premises). Even if the company is not yet on the abnormal list, you can independently verify the address by checking whether it is a real commercial location or a virtual registration service.

Category C: Operational Behavior — Dynamic Risk

These flags reflect what the company has been doing, not just how it is registered. They require checking historical records and change logs.

7. Business Scope Mismatch (经营范围不匹配)

What it is: Every Chinese company has a registered business scope (经营范围) — a list of activities it is legally permitted to conduct. If a company’s business scope says “clothing retail” but it is quoting you USD 1 million in precision machine tools, that is a mismatch. Some activities require special licenses (medical devices, food, hazardous materials, telecommunications equipment) — if the business scope does not include the activity or the required license is absent, the company may be operating illegally.

Why it is dangerous: A company selling outside its registered business scope may lack the technical capability, quality control, and regulatory approvals to deliver. In a dispute, the opposing party could argue the contract is void because the company lacked capacity. For regulated products, an unlicensed seller cannot provide the certification you need for customs clearance in your destination country.

How to find it in SAMR: The business scope is listed in the company’s basic information (基本信息) section. Compare it against what the company is actually selling you. If they claim to manufacture something not in their scope, ask why.

Deep dive: How to Check a Chinese Company’s Business Scope: Official Guide

8. Frequent Legal Representative or Shareholder Changes (频繁变更)

What it is: Chinese companies are required to file changes to legal representative, shareholders, registered capital, address, and business scope with SAMR. These changes are all recorded in the company’s change history (变更记录). A company that has changed its legal representative three times in six months, or cycled through multiple shareholders in a short period, is showing instability.

Why it is dangerous: Frequent changes at the top are often a “pass the buck” pattern. The original owner may have taken on debt, committed fraud, or anticipated legal trouble and transferred the company to someone else — sometimes a relative, sometimes a paid proxy. The person you are negotiating with may not be the one who will be around when problems arise. A company that changes its legal representative right before or during your negotiations is particularly suspicious.

How to find it in SAMR: The change history (变更信息) section lists every filed change with the date, change item, before value, and after value. Scan for clusters of changes in a short time window, especially legal representative and shareholder changes.

9. Multiple Administrative Penalties (大量行政处罚)

What it is: SAMR and other regulatory agencies (tax, environmental protection, quality supervision, customs) issue administrative penalties for violations such as false advertising, product quality failures, tax evasion, environmental non-compliance, and unfair competition. These penalties are public records.

Why it is dangerous: A factory with repeated environmental penalties may be shut down at any time, halting your production with no warning. A company with tax violations may have its bank accounts frozen. Quality supervision penalties suggest the company’s products fail inspections — your order may be next. A single minor penalty is not necessarily alarming, but multiple penalties across different agencies indicate a pattern of non-compliance that directly threatens supply chain stability.

How to find it in SAMR: The administrative penalty (行政处罚) section of the GSXT profile lists penalties issued by SAMR. For penalties from other agencies (tax, environmental, customs), you need a cross-source risk report that aggregates data from multiple government systems.

Category D: Transaction Signals — What You Can Observe Directly

These flags do not require a SAMR lookup. They appear during normal communication and negotiation. Treat them as immediate prompts to run a verification.

10. Refuses to Provide the USCC (拒绝提供统一社会信用代码)

What it is: The Unified Social Credit Code (USCC) is an 18-character identifier printed on every Chinese business license. It is the key that unlocks the company’s entire official record in SAMR. A legitimate company has this number readily available — it is on every invoice, every official document, and the business license itself.

Why it is dangerous: A company that hesitates, deflects, or refuses to provide its USCC is preventing you from looking it up in the official system. Common excuses: “Our finance manager has that,” “We will send it later,” “Why do you need it? You can see our business license.” If you cannot verify the company against the official registry, you have no way to confirm it is who it claims to be. This is the single most reliable early warning sign of a scam.

How to verify: Ask for the USCC directly. If they refuse, treat it as high risk. Even if they eventually provide a USCC, run it through ChineseVerify’s $9 Upload & Match immediately. Upload the business license they sent you — the OCR will extract the USCC and compare it against the live SAMR record in 30 seconds. If the license has been photoshopped (a common scam), the mismatch will be flagged instantly.

Deep dive: What Your Chinese Supplier’s USCC Number Reveals (And Why Scammers Fear It)

11. Insists on Personal Payment (坚持个人收款)

What it is: The supplier asks you to pay to a personal bank account, a personal WeChat or Alipay account, or a third-party account that does not match the company name. They may claim the company account has “problems” or that paying personally gets a better exchange rate.

Why it is dangerous: Paying a personal account creates no paper trail linking the payment to the company. If the supplier disappears, you cannot prove you paid the company — you paid an individual. Chinese banks and police treat personal account payments very differently from corporate account payments in fraud cases. Recovery is extremely difficult. A legitimate company with a valid business license has a corporate bank account and will insist on using it. If they will not, something is wrong.

How to verify: Always require payment to a corporate bank account where the account name exactly matches the company name on the business license. Refuse any request to pay personally.

Deep dive: Should I Pay a Chinese Supplier’s Personal Bank Account? Risks Guide

12. Corporate Account Name Mismatch (对公账户名不一致)

What it is: Three names should always match exactly: the name on the business license, the name on the contract stamp, and the name on the corporate bank account. If any two differ — for example, the license says “Shenzhen XYZ Technology Co., Ltd.” but the bank account says “Shenzhen ABC Trading Co., Ltd.” — that is a mismatch.

Why it is dangerous: A name mismatch means you may be paying a different entity than the one you contracted with. If the supplier is using another company’s bank account, you have no contractual relationship with the account holder. In a dispute, both parties can disclaim responsibility — the contract company says you did not pay them, and the bank account company says you have no contract with them. This is a common structure for organized fraud rings.

How to verify: Before paying, compare the three names character by character. Chinese company names are precise — even one different character means a different legal entity. Use ChineseVerify’s $9 Upload & Match to confirm the license details, then verify the bank account name matches.

13. Unrealistically Low Pricing (报价远低于市场价)

What it is: The supplier’s quotation is 30% or more below the market rate for comparable products, with no clear explanation (such as excess inventory, a specific promotion, or a material substitution you have verified).

Why it is dangerous: This is the classic “bait and switch” or “deposit scam” pattern. The impossibly low price gets you to commit and pay a deposit. After the deposit is paid, the supplier discovers “additional costs” — raw material prices went up, a new regulation requires expensive certification, shipping costs increased. The final price ends up above market, or the supplier simply disappears with the deposit. Legitimate factories operate on thin margins and cannot undercut the market by 30% without a reason. If a price seems too good to be true, it is.

A concrete example from 1688: a standard CNC machining part might list for ¥50–¥80. If a supplier quotes ¥20–¥30 for the same specification, that is a 40–60% discount — a classic bait price. Legitimate factories operate on thin margins and cannot sustain such pricing without cutting corners or disappearing after the deposit.

How to verify: Get quotations from at least three suppliers for the same product specification. If one is dramatically lower, ask for a detailed cost breakdown. Verify the company’s registration status and capital before paying anything.

14. Cannot Provide a VAT Invoice Sample (无法提供增值税发票样本)

What it is: Every legitimate Chinese company registered as a general taxpayer (一般纳税人) can issue VAT special invoices (增值税专用发票). These are standardized, tax-authority-issued documents with a unique invoice number and the company’s tax ID. A company that cannot show you a sample of a previous VAT invoice, or claims it can only issue “receipts” (收据) or ordinary invoices (普通发票), may be a small-scale taxpayer (小规模纳税人) or may not be properly registered for tax at all.

Why it is dangerous: If you need the supplier’s VAT invoice for import tax deduction, customs clearance, or internal accounting, a company that cannot issue proper VAT invoices creates a compliance problem for your business. More importantly, inability to issue VAT invoices suggests the company is very small, may be operating under the tax radar, and may not have the financial infrastructure to handle large orders. A real factory with significant revenue is registered as a general taxpayer and issues VAT invoices routinely.

How to verify: Ask for a redacted sample of a previous VAT invoice (cover the buyer’s name and amount). Check that the seller’s name and tax ID match the business license. You can also verify the company’s taxpayer status through the tax bureau’s public query system, though this requires Chinese language capability.

15. Platform Store Entity Mismatch (平台店铺主体不一致)

What it is: The company name on the supplier’s 1688, Alibaba, or other B2B platform store does not match the company name on the contract, business license, or bank account they send you. For example, the 1688 store is registered to “Guangzhou DEF Electronics Co., Ltd.” but the contract you receive is from “Guangzhou GHI Trading Co., Ltd.”

Why it is dangerous: You may be dealing with a “store group” operator (店群) — someone who runs multiple storefronts under different company names, often with no actual business relationship to any of them. Or the platform store may belong to a real factory, but the person contacting you is a middleman using the factory’s storefront to generate leads, then redirecting orders to a different (possibly non-existent) company. The platform’s buyer protection applies only to transactions conducted through the platform — if you pay outside the platform to a different entity, you have no protection.

How to verify: On 1688, every store has a visible “Company Profile” section (公司档案) that displays the registered entity name, a business license snippet, and the SAMR registration status. Many suppliers will send you a contract from a different company than the one shown in their 1688 store. This is a classic “store group” (店群) tactic — they use a legitimate storefront to attract buyers, then redirect payments to an unrelated entity. Always cross-check the store’s registered name against the contract and license before paying. If they differ, ask why. Keep transactions on-platform until you have independently verified the entity you are paying.

Deep dive: 1688.com Supplier Verification: Platform Badges vs. Government Reality

Real-World Case Studies

Case A: The Photoshopped License

A buyer in the United States was negotiating a USD 60,000 order for consumer electronics. The supplier sent a business license showing a company registered in 2019 with RMB 50 million in registered capital. The license looked clean — red stamp, proper format, no visible issues.

Before paying the 30% deposit, the buyer ran the company name through ChineseVerify. The official SAMR record told a very different story:

• The company was actually registered in March 2025, not 2019.
• Registered capital was RMB 1 million, not 50 million.
• The company was already on the abnormal operations directory for failure to file an annual report.
• The registered address was a virtual office in a business incubator.

The license the supplier sent had been digitally altered — the registration date and capital were changed to make the company look established and substantial. The buyer walked away. A $9 Upload & Match or a free USCC lookup would have caught the discrepancy in seconds.

Case B: The RMB 50 Million Shell

A European importer found a supplier on 1688 offering industrial machinery at competitive prices. The supplier’s business license showed RMB 50 million in registered capital. On 1688, this company had a “5-year store” badge and thousands of transactions. The importer assumed this was a substantial manufacturer.

But badges on 1688 and Alibaba are based on platform membership and transaction volume, not SAMR capital or operational reality. A shell company can easily maintain a high-volume store while having zero paid-in capital and no employees.

A full ChineseVerify report revealed:

• Paid-in capital: RMB 0. The entire RMB 50 million was subscribed, with a contribution deadline of 2044.
• Social insurance participants: 0. No employees were registered for social insurance — a company with a factory would have dozens or hundreds.
• Registered address: A shared office space with over 200 companies registered at the same address.
• Abnormal operation history: Listed for unreachable address in 2024, removed after changing to another virtual address.
• Legal representative: Changed three times in 18 months.

This was a textbook shell company — impressive numbers on paper, zero substance in reality.

What to Do When You Find Red Flags

Not all red flags are equal. Your response should match the severity.

Mild flags (single missed annual report, quickly corrected): Ask the supplier for documentation showing the issue has been resolved — a screenshot of the updated GSXT record, the filed annual report receipt, or the address change approval. Then run a fresh $9 Upload & Match through ChineseVerify to confirm the current status is clean before proceeding.

Severe flags (serious illegal list, revoked status, unreachable address, refuses USCC, insists on personal payment): Stop negotiations immediately. Do not pay anything. Do not accept explanations — a company on the serious illegal list or with a revoked license cannot legally fulfill your contract, and no excuse changes that. Find an alternative supplier.

Uncertain or mixed signals: Do not guess. Run a ChineseVerify $19 full report to get the complete risk picture — shareholder structure, litigation records, administrative penalties across all agencies, dishonest execution records, and historical change logs. A $19 report is cheap compared to a $15,000 deposit you cannot recover.

Conclusion

Verifying a Chinese supplier should not be a guessing game. SAMR makes a remarkable amount of company data public — registration status, capital, shareholders, addresses, changes, penalties, abnormal operation records, and more. The problem for overseas buyers has never been availability of data; it has been access. The official system is in Chinese, requires CAPTCHA solving, and provides no translation or cross-source aggregation.

ChineseVerify solves that access problem. The $9 Upload & Match lets you upload the license your supplier sent you and get a plain-English comparison against the live SAMR record in about 30 seconds, with any mismatch or abnormal-operation status flagged. The $19 full report adds litigation, penalties, dishonest execution, and shareholder data across all sources. Both are available with no Chinese phone number, no Chinese ID, and international credit card payment. Uploaded license files are automatically deleted 24 hours after comparison.

Do not wait until after you have paid a deposit to find out the company is a shell. A $9 Upload & Match takes 30 seconds and catches photoshopped licenses and abnormal operation flags. A $19 full report adds litigation, penalties, and shareholder data. Both are cheaper than a single day of production delay — let alone a $15,000 deposit you cannot recover.

Verify your supplier now →

FAQs

Can a company with one red flag still be legitimate?

Yes. A single, quickly-corrected missed annual report from an otherwise well-established company is low risk. What matters is the pattern — multiple flags, especially across different categories (registration status + capital + address + transaction behavior), compound the risk. Evaluate the full picture, not any single data point.

How do I check all 15 flags efficiently?

The $9 Upload & Match covers the core registration verification — license authenticity, registered capital, address, operational status, and abnormal operation flag. The $19 full report adds shareholder changes, administrative penalties, litigation, and dishonest execution records. For transaction-signal flags (refuses USCC, personal payment, account mismatch, pricing), you observe these directly during negotiation and should use them as triggers to run the verification.

What is the difference between abnormal operation and the serious illegal list?

Abnormal operation is a warning-level designation for administrative compliance failures (missed filings, unreachable address). It is correctable and removable. The serious illegal list is a punitive blacklist for serious violations or for staying on the abnormal operation list for three consecutive years. It carries severe restrictions and is much harder to remove. Abnormal operation is a yellow flag; the serious illegal list is a red flag.

How often should I re-verify an existing supplier?

For active suppliers, re-verify every 6 to 12 months. A company that was clean when you started can develop problems later — a new abnormal operation listing, a lawsuit, a penalty, or a legal representative change. A fresh Upload & Match takes under a minute and catches issues before they become your problem.

Does a matching business license prove the supplier is safe?

No. A license match confirms only that the document aligns with the official SAMR record. It does not prove the company has a real factory, has paid-in capital, has no litigation, or that the person you are communicating with is authorized. Pair the license match with an abnormal-operation check, and for orders above $5,000, run a full risk report.

More Reading

• What Does “Abnormal Operation” Mean in a SAMR Company Record? — The most critical red flag, explained in full: four triggers, removal process, and three-year escalation.
• What Your Chinese Supplier’s USCC Number Reveals (And Why Scammers Fear It) — The 18-digit code that unlocks the entire official record, and why scam operators will do anything to keep you from running it.
• Why You Must Check Chinese Enterprise Risk Information Before Doing Business — The full landscape of Chinese enterprise risk data: litigation, penalties, dishonest execution, abnormal operation, and more.
• GSXT Supplier Verification: What the Official Registry Can and Cannot Prove — What the National Enterprise Credit Information Publicity System can tell you — and what it cannot.
• Should I Pay a Chinese Supplier’s Personal Bank Account? Risks Guide — Why personal account payments are one of the strongest scam signals and what to do instead.
• Chinese Supplier Risk Assessment: Practical Due Diligence for Global Buyers — A step-by-step due diligence framework for evaluating Chinese suppliers beyond the basic registration check.

Published by the ChineseVerify Team