How to check if a company is legitimate

What "legitimate" actually means

Registration alone is not legitimacy: a genuinely registered company can still be a shell, dormant, or run by people with a trail of failures. Equally, absence from a register is not always fraud: sole traders legitimately operate unregistered in many countries. Legitimacy is the three elements together: the entity exists, the business is real, and the entity and the business are the same thing. Each check below tests one of those joints.

The eight checks

1. Find the registry record. Search the official company register in the company's country; our registry directory links every one. No record where one should exist is close to disqualifying.
2. Confirm the status is active. Not dissolved, struck off, suspended or in an insolvency process.
3. Match the details you were given. The legal name, registration number and registered address on the quote, contract and invoice must match the register. Lookalike names are a classic clone trick.
4. Check the people. The directors exist, and their other appointments don't show a pattern of dissolved companies. Our company background check guide covers this layer in detail.
5. Test the history claims. "Trading since 2009" with a company registered last year, and a website domain registered last month, is a story, not a history.
6. Trace the contact details. A registered office can legitimately be an agent's address, but a business that can only be reached through a web form deserves caution.
7. Match the bank account to the company. The single best fraud filter: the account name you are asked to pay must be the registered company's. Our supplier vetting guide explains this control.
8. Read the filings where public. Accounts and annual filings show whether a real business sits behind the registration.

Legitimate-looking, but not

Three patterns defeat casual checking. Cloned identities borrow a real company's details, so everything checks out except the people you are actually talking to: verify contact channels independently, never from the email that approached you. Recently registered companies with a big-order appetite combine a real registration with no substance behind it. And registrations in one country fronting operations in another make every check land on the wrong entity. Two or more oddities together mean stop; our guide to red flags when verifying an overseas company covers the full pattern list.

Checking an overseas company

The same eight checks apply abroad, with harder access: the register may be paid or restricted, the records are in the local language, and document formats are unfamiliar. Start from the registry directory (each source rated 1–5 for accessibility), use the country guides where we have them, and where the register cannot answer, an investigated in-country report confirms the business is real, trading and creditworthy, delivered in plain English.

Common questions

Can I check if a company is legitimate for free?

Largely yes for existence and status, depending on the country: many registers are free to search, others charge or restrict access. The trading-reality layer (payment behaviour, adverse history, whether the premises match the paperwork) is where free sources run out.

Is a registered company always legitimate?

No. Registration proves the entity exists; it says nothing about whether the business trades honestly, pays its suppliers, or is the same operation you are dealing with. Treat registration as the first check, not the verdict.

How do I check if an overseas company is real?

Find its national register in our directory, run the eight checks above, and where the register is restricted or the records unreadable, commission a report investigated in that country.

What if the company isn't on any register?

It could be a legitimate sole trader, you could be searching the wrong legal name, or there could be nothing to find. Ask for the registration details and check them yourself; treat a refusal to provide them as the answer.