How to use this list
These ten signs come from real patterns in counterparty verification work across multiple jurisdictions. Each is something a buyer can look for during the early stages of contact, before any commitment, and each one is more useful as a prompt to ask one more question than as a verdict in itself.
One red flag, on its own, is often nothing. Two or three together, and the counterparty needs more verification, usually a fully investigated report, before any meaningful order or contract goes forward.
Red flag 1
A very recently incorporated entity asking for a disproportionately large order
What it looks like: A company incorporated within the last twelve months that approaches you wanting to place an unusually large opening order, often with urgency.
Why it matters: Genuine businesses growing into a market typically build up gradually: small initial order, demonstrated reliability, scaling exposure. An entity less than a year old requesting an order that would represent a substantial share of its claimed turnover usually means one of three things: the entity is a vehicle for someone with a track record they would prefer you not connect to; the order represents the entire business plan and there are no follow-ups; or you are being prepared as a fraud target. The age of a registration is the cheapest piece of information available. Always check it.
Red flag 2
A name mismatch between the trading name and the legal entity
What it looks like: The brand, website and signature line use one name; the proforma invoice and contract are drawn up under a different legal name, and the connection between the two isn't explained.
Why it matters: Multi-entity groups using one company for marketing and another for trading are common and entirely legal, but the credit exposure, the legal recourse and the regulatory responsibility all sit with whoever signs and invoices, not with whoever advertises. A counterparty unable or unwilling to explain the relationship between brand and legal entity has not yet earned a contract.
Red flag 3
A generic email domain on professional correspondence
What it looks like: Quotes and contracts arriving from gmail, qq, yahoo, hotmail, or other consumer email providers, rather than from the company's own domain, particularly when the company's website advertises a corporate email at the same domain.
Why it matters: Genuine businesses with their own websites also have email at that domain and use it. The use of consumer email is normal for small individual traders and is not a fatal flag, but on correspondence from any business large enough to be quoted as a serious counterparty, it points either to an employee operating outside their company's systems or to someone impersonating the business entirely. The latter is the standard attack vector for invoice fraud.
Red flag 4
A request to pay to a third-country bank account
What it looks like: The counterparty is registered in Country A and operating in Country A, but asks payment to be made to a bank account in Country C, and the account holder name is either different from the legal entity, or is the same name but at a bank with no obvious connection to the operating jurisdiction.
Why it matters: There are legitimate reasons for offshore accounts: group treasury structures, currency-management arrangements, sanctions on the operating country's banking sector. There are also several illegitimate ones, including invoice diversion, money laundering, and the routine fraud pattern of intercepting payment instructions and substituting an unconnected account. Any third-country payment instruction should be confirmed by a separate channel, ideally a phone call to a known number, not the one on the invoice.
Red flag 5
Reluctance or refusal to provide basic registration documents
What it looks like: A counterparty pushes back on requests for a copy of their business licence, certificate of incorporation or registry extract, citing confidentiality, internal policy, or "we don't usually share that".
Why it matters: Registration documents are public information by definition. The registry extract for any registered entity in any major jurisdiction can be obtained from the public record by any third party. A counterparty unwilling to send a document that you could buy from their own government website is signalling something about how the relationship will go later, when you need them to send something less freely available.
Red flag 6
An address that is a virtual office, flexi-desk or PO box
What it looks like: The registered address resolves to a shared service office, a co-working location, or a known mass-registration site, particularly visible in some industrial parks, free zones, and serviced-office providers where hundreds of entities share a single address.
Why it matters: Many entirely legitimate businesses (particularly small consultancies, holding companies, and free-zone entities) operate from shared addresses. The question is whether the counterparty's business model is consistent with that. A small advisory firm at a virtual office is normal. A claimed manufacturer of industrial equipment at the same address is not. The flag is the mismatch between the operating claim and the physical reality.
Red flag 7
Licensed activity that doesn't cover what's being sold
What it looks like: The counterparty's trade licence or registered business scope describes one activity ("general trading", "consulting", "wholesale of textiles") and the goods or services being offered are something different.
Why it matters: In many jurisdictions, including most of the Gulf, the major Asian markets and large parts of Latin America, licensed business scope is more than a formality. Customs paperwork, banking arrangements and tax treatment all depend on the licence. A counterparty trading outside its licensed scope may not survive its first customs declaration. Where the activity is regulated (pharmaceuticals, dual-use goods, defence, finance), operating outside scope can put the buyer on the wrong side of export controls too.
Red flag 8
Registry status of suspended, revoked, inactive or struck-off
What it looks like: The counterparty exists in the registry but shows a status other than active: inapta in Brazil, under process of striking off in India, licence revoked (吊销) in China, expired licence in the UAE, struck off in the UK.
Why it matters: A non-active status is rarely an administrative oversight at any meaningful trading scale. It usually means the company has failed to file returns, has had its licence withdrawn for a reason, or has been formally wound up. In several jurisdictions, an entity in this state cannot legally issue valid tax invoices, meaning your import documentation may not work even if the goods arrive. Every public registry exposes status; it is among the first things to check, and one of the most reliable.
Red flag 9
Beneficial ownership obscured behind nominees or layered structures
What it looks like: The direct shareholder of the trading entity is another company, which itself is owned by another company, which is owned by an offshore entity, which is owned by another offshore entity, and the human at the end of the chain is genuinely difficult to identify.
Why it matters: Multi-jurisdictional holding structures are common in legitimate international groups and don't, by themselves, indicate anything wrong. The question is whether the structure makes sense for the business. A small trading company with no obvious tax or regulatory reason for a four-layer offshore structure is using that structure for a reason: sometimes to separate adjacent businesses (fine), sometimes to obscure sanctions exposure or politically exposed connections (not fine). Beneficial ownership reaches into territory the public record alone usually can't cover.
Red flag 10
Pressure to commit without standard documentation
What it looks like: The counterparty creates urgency around closing (the price is only good until tomorrow; the shipping slot will go; the production run is starting next week) and uses that urgency to discourage normal verification steps.
Why it matters: Legitimate counterparties have real deadlines, and real deadlines occasionally compress timelines. What real deadlines don't do is shrink to a size that excludes standard checks. The pattern of artificial urgency followed by resistance to verification is among the most reliable signs of a transaction that does not survive examination. The right answer to manufactured urgency is to slow down, not to speed up.
What to do when red flags appear
One flag is rarely enough to walk away. It is usually enough to slow down: ask for the document that would resolve it, run the registry check that would confirm the entity, or commission the report that would settle the question.
Two or more flags together, particularly when one of them touches payment instructions or beneficial ownership, justify a fully investigated due-diligence report before any commitment. The cost is low relative to the exposure being taken on; the value, in the cases where it matters, is the difference between a problem that doesn't happen and one that takes years to recover from.
When you need to know for certain
Freshly investigated company reports on companies in over 200 countries. Researched in-country, delivered in English, treated as completely confidential, and a 100% refund if we cannot locate the company.