
Vendor Verification Services in China: What Global Companies Actually Need to Check
The $60,000 Marketing Agency That Wasn’t There
A US-based DTC brand hired a Chinese marketing agency to run their Xiaohongshu and Douyin campaigns. The agency had a polished English website, a portfolio of recognizable brand logos, and a team that responded to emails within hours. The contract was for $60,000 over six months.
Three months in, the deliverables were late. The campaign data looked inflated. When the brand asked for access to the actual ad accounts, the agency went quiet. Emails bounced. The WeChat contact was deleted.
When the brand finally ran the agency’s company name through a Chinese business registry, the picture was grim. The company had been registered eight months earlier with 100,000 RMB in registered capital — zero paid-in. The business scope was “event planning and corporate image design,” nothing about digital marketing or advertising. The legal representative was also listed as the legal representative of four other companies, all registered within the same six-month window, all at the same virtual office address. Two of those other companies had already been deregistered.
The agency was real in the sense that a company existed on paper. It had a valid Unified Social Credit Code. It would have passed any basic “does this company exist” check. But it was a shell — no office, no employees, no track record, and no legal authority to run advertising campaigns. The brand lost $30,000 in prepaid fees and three months of campaign time.
This is the kind of story you do not hear about at sourcing conferences. Most of the advice out there is about factories: how to spot a trading company pretending to be a manufacturer, how to verify production capacity, how to check if a factory on 1688 is real. That stuff matters, but it only covers one kind of Chinese vendor.
Global companies work with all kinds of vendors in China. Logistics agents. Software developers. Sourcing agents. Consulting firms. Translation services. HR providers. Each one can burn you in a different way, and the standard “pull a business license and call it done” approach catches almost none of it.
The Risks Are Not the Same Across Vendor Types
A factory and a marketing agency do not fail the same way.
If a factory goes wrong, you usually find out when goods arrive defective or do not arrive at all. The risk is tangible — production capacity, environmental shutdowns, material substitution. You can video-call the factory floor. You can send an inspector. The evidence is physical.
A service vendor failing looks different. The website stays up. The emails keep coming for a while. The work is intangible enough that “deliverables are late” can be explained away for months. By the time you realize something is wrong, the money is already gone and the company may have already rebranded under a new name.
Logistics providers carry their own flavor of risk. A forwarder without a proper license can hold your cargo hostage or disappear with it. One with a history of cargo disputes may be chronically careless with handling, and you will not find out until a container arrives damaged. Software vendors can vanish with your source code or stop supporting a system your business now depends on. Sourcing agents can quietly take kickbacks from factories and pass inflated prices to you.
None of this means you need a separate verification process for every vendor type. The same data points work across the board — they just mean different things depending on who you are dealing with. Zero paid-in capital for a factory might mean the owner is undercapitalized. Zero paid-in capital for a marketing agency means something worse: it is one of the cheapest and most common signals of a shell.
Why This Is Harder Than It Looks
China has the data. The National Enterprise Credit Information Publicity System — NECIPS — is a public registry run by the State Administration for Market Regulation. Every company’s registration status, business scope, shareholders, and change history are in there. In theory, anyone can look it up.
In practice, it is all in Chinese. Advanced queries need a Chinese mobile number. The CAPTCHA is designed for domestic users. From outside China, the site is slow and frequently blocks foreign IPs. Domestic alternatives like Qichacha and Tianyancha have more data but the same problems: Chinese-only interface, domestic phone registration, RMB-only payment. Their so-called international versions are stripped of most useful features.
So what happens? A company overseas that wants to check a vendor has two bad options. They can ask the vendor to send a business license scan — which can be expired, revoked, or photoshopped — and take it at face value. Or they can skip the check entirely and hope for the best. Neither is a real verification.
And registering a company in China is cheap and fast, which makes the problem worse. A limited company can be set up in under a week. Virtual office addresses cost a few hundred RMB a month. There is no legal requirement that a registered company actually does the business it claims to do. A bad actor can go from zero registration to collecting client fees in about a month, and the company will look completely legitimate on a basic registry check.
Then there is the business scope, which a lot of overseas buyers have never heard of. In China, this is not a marketing line — it is a legally registered list of what the company is allowed to do. A company registered for “business consulting” cannot legally sign an advertising contract. One without “import and export” in its scope cannot handle your export documentation. A lot of overseas buyers do not know this, and a lot of vendors count on that.
What Actually Matters in a Verification
Forget the feature lists. Here is what you need to know about a vendor before you send money, and why each item matters.
Start with the basics, but do not stop there. Registration status needs to be active — not “abnormal,” not “revoked,” not “deregistered.” That sounds obvious, but the marketing agency in the opening story was technically active the whole time. Active just means the registration has not been cancelled. It does not mean the company operates.
Paid-in capital is more informative than registered capital. Registered capital is a promise — the amount shareholders say they will put in. Paid-in is what actually went in. A company with 50 million RMB registered and zero paid-in is not the same as a company with 50 million registered and 50 million paid-in. For service vendors especially, zero paid-in combined with a recent registration date is a pattern you see over and over in shell companies.
Business scope is the most skipped check, and it is one of the most useful. Does the scope actually cover what you are buying? If you are hiring a marketing agency and the scope says “event planning,” that is a mismatch worth asking about. Sometimes the explanation is innocent — the vendor uses a separate entity for contracting. Sometimes it is not. Either way, if the scope does not match, you need to understand why before you sign.
Ownership tells you who you are really dealing with. A vendor wholly owned by one person with no other business interests is a different risk profile than one backed by a corporate group. A legal representative whose name appears on ten other companies — especially if several are in related industries or registered at the same address — can indicate a portfolio of shells. Shareholder data and outbound investment records let you trace these connections.
Risk records are where you find the behavior patterns. Litigation tells you who has sued the company and why. Administrative penalties show regulatory problems. A dishonest execution record — meaning a court ordered the company to pay and it refused — is about as strong a signal as you can get that this entity does not honor its obligations. One old minor penalty is probably noise. Multiple contract disputes in the last twelve months are not.
Change history is the sleeper metric. A company that just added your service category to its business scope last month may have done it specifically to sign your contract. Frequent legal representative changes suggest ownership instability. A registered address that moved from a real office building to a virtual office service can mean the company is winding down. None of this shows up on a basic license check.
None of these data points is conclusive on its own. The value is in how they fit together. A recently registered company with zero paid-in capital, a mismatched business scope, and a legal representative with five other entities — that is a picture. Any one of those alone might be explainable. All four together is a walk-away.
A Sensible Onboarding Routine
You do not need a seven-step ceremonial process. You need a routine you actually follow every time.
Get the company’s full Chinese name and Unified Social Credit Code up front. Not a brand name, not an English trading name — the legal entity on the business license. If a vendor will not give you this, that is your answer.
Run the registration and scope check first. This filters out the obvious problems — revoked licenses, wrong business scope, suspiciously new registration — before you spend time on anything deeper.
Then pull the risk and ownership data. Look for litigation patterns, dishonest execution records, shareholder connections, and related-entity risk. Most of the findings that actually change a decision show up here.
Cross-reference what the data says against what the vendor told you. If they claim ten years in business and the company was registered last year, ask. If they say they are a factory but the scope has no manufacturing, ask. Discrepancies are not automatically disqualifying, but unexplained ones are.
Save the report. For vendors you work with ongoing, re-check every six to twelve months, or right away if they change bank details, payment terms, or your main contact. Companies restructure. Owners change. A vendor that was clean when you onboarded can look very different a year later.
ChineseVerify
Most verification tools built for overseas users stop at the basics. They show you the registration status and the company name and call it a report. ChineseVerify was built to go further, because the basics are not where the risk lives.
The full business scope comes through in professional English translation — not machine translation, but terminology a due diligence reviewer would recognize. You can see whether the vendor is actually authorized for what you are buying without needing to read Chinese.
Risk data — litigation, administrative penalties, dishonest execution records, abnormal operations flags — is pulled from official government databases and cross-checked across sources. It is not scraped from third-party websites that may be months out of date.
Shareholder structures, outbound investments, and legal representative cross-references are all in the report, so you can trace who controls the vendor and whether related entities carry their own risk. The full change history is there too, which is how you spot the recent scope additions and address moves that basic checks miss.
You do not need a Chinese phone number or a domestic bank account. Search by company name or USCC, pay with a regular international credit card, and the report comes back in minutes. It is $19 for a basic report, no subscription, no minimum. For the kind of vendor onboarding most companies do, that is enough to make a decision.
The same report works for a factory, a marketing agency, a logistics forwarder, or a software shop. The data points do not change — what changes is how you read them.
More reading:
- Chinese Supplier Corporate Structures: When the Factory, the Contract, and the Registry Are Different Companies
- Chinese Supplier Risk Assessment: Practical Due Diligence for Global Buyers
- How to Check Chinese Company Business Scope: Official Guide
FAQ
What is the difference between vendor verification and supplier verification?
Supplier verification usually means checking a company that sells you physical goods. Vendor verification is the broader category — it includes suppliers but also service providers, agents, logistics companies, software vendors, and professional services. The same data applies, but different vendor types call for different readings of that data.
Can I just use the business license the vendor sent me?
A business license scan proves someone has a piece of paper. It can be expired, revoked, or altered. Always cross-check the company name and USCC against an independent registry. The license is a starting point, not verification.
How do I verify a service provider that is not a factory?
The same checks apply, but pay closer attention to two things. First, business scope — service companies are frequently registered under generic categories that do not cover what they actually do. Second, paid-in capital and company age — service shells tend to be newly registered with zero paid-in capital.
What is the biggest red flag?
A dishonest execution record. It means a court ordered the company to pay and it refused. There is not much ambiguity in that signal.
How often should I re-check an existing vendor?
Once a year at minimum. Sooner if the vendor is a big part of your spend, if you are renewing a major contract, or if they change payment terms, bank details, or your point of contact.
No risk records means the vendor is safe?
It means no risk was found in official government records. That is a good sign, not a guarantee. Still do the normal things — ask for references, start small, write a clear contract.
Published by the ChineseVerify Team