Supplier vetting: how to verify a supplier before you buy

What supplier vetting covers

A complete vetting covers five checks:

• Identity. The legal entity behind the quote exists, and the name on the contract, the invoice and the bank account all belong to it.
• Status. It is active and registered, with no insolvency markers.
• Capability. Its registered business scope, licences and history fit what you are buying.
• Financial health. It can fund your order and survive the contract period.
• Reputation. No adverse history in courts, gazettes or the local press.

The first three can usually be checked free; the last two are where investigation earns its keep.

Step 1: verify identity and registration

Start at the official company register in the supplier's country: confirm the legal name, registration number, address and status, and where disclosed, the directors. Our company registry directory links the registry for every country we cover, rated for accessibility, and our company background check guide explains each registry check in detail.

Then apply the single most effective fraud control in supplier vetting: the bank account you are asked to pay must be in the registered company's name. A mismatch, or a mid-relationship "change of bank details", is the classic invoice-fraud pattern; verify any change by a known channel before paying.

Step 2: supplier risk assessment

Not every supplier deserves the same depth of checking, and pretending otherwise guarantees the checks won't get done. Assess the risk each supplier actually carries: how much money will be exposed at any one time, whether you are paying in advance, how hard the supplier would be to replace, how far away and how new the relationship is, and whether your own delivery commitments depend on theirs.

High exposure plus hard-to-replace plus far away means full verification before commitment. Our supplier due diligence framework turns this into a practical three-tier system for procurement teams.

Step 3: supplier financial health check

The point of a financial check is simple: will this company still be solvent at delivery, and can it fund the work in between? Where the supplier's country publishes filed accounts, read the most recent filing and its date. In many countries accounts are paid documents, partial, or not public at all, and payment behaviour is invisible everywhere on free sources. A company credit report fills this gap: financial standing, payment record where available, credit opinion and adverse history, instantly online for selected countries, investigated in-country elsewhere.

KYB checks: when vetting is a compliance duty

For regulated businesses (finance, payments, gambling and increasingly others), checking a counterparty is not just prudent but mandatory. A KYB check (know your business, the corporate counterpart of KYC) confirms the entity, identifies its ultimate beneficial owners, and screens both against sanctions and watchlists. Even outside regulated sectors, the same questions are worth asking of any significant supplier: who actually owns this company, and would any of those names fail a sanctions screen? Our due diligence services cover UBO identification and screening as part of a full report.

Vendor due diligence and other names for the same job

Terminology varies and overlaps. Vendor due diligence usually means exactly what this guide describes (checking a vendor before buying), though in M&A it has a second, unrelated meaning: a sell-side report commissioned by a company being sold. Supplier onboarding checks, third-party due diligence and counterparty risk checks all describe the same discipline at different depths. Whatever the label, the content is the five checks above, sized to the risk.

Common questions

What is supplier vetting?

The checks run on a supplier before you commit: identity, registration and status, capability, financial health and reputation. Light for low-risk suppliers, investigated for critical ones.

How do you vet an overseas supplier?

Same checks, harder sources: the register may be paid or restricted and the records in the local language. Start from our registry directory, use the country guides (for example China), and commission a report where the free sources stop.

What is a KYB check?

Know your business: verifying a company, its beneficial owners and its sanctions exposure. Mandatory in regulated sectors, sensible practice for any major supplier.

What is the difference between supplier vetting and supplier due diligence?

In practice they are used interchangeably. We use vetting for the checks themselves and due diligence for the wider programme (tiering, documentation, review cycles) described in our framework guide.