How to verify a supplier bank details, in order: get the account on the supplier's own stamped letterhead or in a confirmation letter from their bank, check the beneficiary name is their exact registered legal name, then read the details back by phone on a number you already had before this order started. If one of the three fails, hold the payment.
The short version
- Beneficiary name must equal the registered legal name. Not the brand, the trading name, or a person. A beneficiary name mismatch is a stop, not a typo.
- Confirm by voice, on a number you already had. Never a number, address or PDF from the same thread as the new account.
- A bank-change email mid-order is the highest-risk message you will get. Business email compromise cost reported victims $3.05 billion in 2025 across 24,768 complaints.
- Offshore and third-party accounts need paperwork. A Hong Kong account for a mainland Chinese factory can be legitimate, but that entity must be your named seller.
- On a first order, structure beats checking. An LC or escrow makes bank details far less load-bearing than a 100% telegraphic transfer.
How to verify a supplier bank details in five steps
Five checks, in this order.
- Get the details from a controlled document. Stamped letterhead, or better, a bank confirmation letter showing account name, number and SWIFT/BIC. Details typed into an email body are evidence of nothing.
- Match the beneficiary name to the registered legal name, character by character. Pull the registry record: business licence and 18-digit unified social credit code in mainland China, Companies Registry extract in Hong Kong, trade licence in the UAE. Contract, invoice and beneficiary name should read as one string.
- Check the account's country against the seller's. A Vietnamese exporter banking in Vietnam is unremarkable. The same exporter banking in Cyprus is a question you ask before paying.
- Call on a number you held before this transaction. The contract, the trade-fair card, the switchboard on the site where you found them. Have them read the number to you, and never use the number in the email signature.
- Send a small test tranche. A few hundred dollars, confirmed received by voice, before the balance moves. Banks will not unwind a wire, so buy the confirmation cheaply.
Beneficiary name mismatch: why it means stop
Most buyers assume the receiving bank checks the wire's name against the account's name. For plenty of cross-border payments it does not. Under US wire law, where a payment order gives a name and an account number pointing to different people and the beneficiary's bank does not know they conflict, that bank "may rely on the number as the proper identification of the beneficiary" (UCC §4A-207). The rule exists so wires can be automated. The effect is that the number decides where your money lands.
The account number moves the money. The name is often just a label travelling alongside it. A fraudster needs no forged identity, only their number in your payment file.
Europe closed part of the gap: since 9 October 2025, euro-area payment providers must offer a free verification-of-payee check that compares your typed name against the IBAN and warns you on a mismatch. No help on a USD wire to Guangzhou. Two mismatches buyers wave through: a personal name instead of the company, and "Ningbo XYZ Trading Co., Ltd" when the contract says "Ningbo XYZ Machinery Manufacturing Co., Ltd".
Invoice redirection fraud and the mid-thread bank-change email
Supplier bank detail fraud rarely arrives cold. It arrives inside the conversation you are already having: the supplier's mailbox is compromised and the attacker replies in the real thread, or a look-alike domain one character off carries your own quoted history underneath. It lands when you are most likely to pay fast, at final balance.
The scale is not marginal. The FBI's Internet Crime Complaint Center recorded 24,768 business email compromise complaints in 2025 with reported losses of $3,046,598,558, up from $2.77 billion the year before. Invoice redirection fraud is its commonest form in trade.
Red-flag checklist: stop the payment if any of these are true
- Changed bank details arrive by email, chat or PDF mid-order.
- The beneficiary name does not exactly match the registered legal name.
- The account is in a personal name, or a company absent from the contract.
- The account country is unrelated to the supplier, the goods or the named seller.
- The sender's domain is one character off, or reply-to differs from the display name.
- You are told not to call, or the only number offered is new and in the signature.
- Sudden urgency: the vessel is sailing, the container will be held, the discount expires today.
- The reason is unverifiable: audit, tax inspection, "old account frozen", a new "group account".
- The supplier will not put the change on stamped letterhead, or the bank will not confirm it.
- The message came from free webmail when every earlier one used a company domain.
One is enough to pause. Two, assume compromise.
How to verify a supplier bank details when they change mid-order
Treat changed banking details as a new counterparty, not an update. Freeze the payment. Open a fresh email to the address in your signed contract rather than replying, and telephone your known contact on your known number. Confirm three things out loud: that they requested the change, the account name, the full account number. Have a second person approve the new payee, and hold first payments to it for a cooling period. Fraud runs on speed and on one person acting alone.
If the payment already went, hours matter more than paperwork. Call your bank, ask them to attempt a recall and contact the beneficiary bank, then report it. In 2025 the IC3 Recovery Asset Team worked 3,900 incidents covering $1,163,919,846 of attempted theft and froze $679,013,183, a 58% success rate. Those recoveries come from same-day reporting.
Third-party and offshore accounts: the Hong Kong case
A mainland Chinese factory asking to be paid into a Hong Kong account is the classic version of this problem: common, sometimes legitimate, still where plenty of buyers get hurt. Many groups run a Hong Kong trading arm, and factories without export rights must ship through an agent whose name then appears on the documents.
What separates the legitimate case from the fraudulent one is documentation, not explanation. Before paying any entity that is not your contracted supplier: name it as seller on the sales contract and commercial invoice, get its registry extract and a signed letter from your supplier authorising payment to it, and check the bill of lading, packing list and certificate of origin name a chain you can follow. If they will not put it in writing, you have your answer. Personal accounts are a hard no.
SWIFT and IBAN: what the fields actually prove
A SWIFT/BIC code is 8 or 11 characters: four for the bank, two for the country, two for location, three optional for the branch. Characters five and six give the receiving bank's country, a fast check against the seller's. An IBAN runs up to 34 characters, opening with a country code and two check digits, and can be validated arithmetically before you send.
Two limits. China, Hong Kong, the US, India, Vietnam and Japan do not use IBAN at all, so a missing IBAN is normal for most Asian suppliers. And a valid BIC with a well-formed IBAN only proves the account exists at a real bank in a real country. Neither proves who owns it. Format validation is not identity verification.
Which payment method to use on a first order
Knowing how to verify a supplier bank details is half the job. The other half is picking an instrument where the details matter less, because on a first order the instrument does more work than any checking.
| Method | Who carries the risk | Recoverable? | Use when |
|---|---|---|---|
| 100% TT in advance | You, entirely | No, once credited | Samples, or a long paid history |
| 30% TT deposit, 70% against copy B/L | Shared | Deposit exposed, balance is leverage | Repeat orders |
| Documentary collection (D/P) | Mostly the seller | You pay to get the documents | Mid-value, LC too heavy |
| Irrevocable letter of credit (UCP 600) | Banks intermediate | Payment conditional on compliant documents | First orders, high value |
| Escrow or marketplace assurance | Platform holds funds | Yes, within its window | First orders via a marketplace |
| Credit card or PayPal | Issuer carries some | Chargeback possible | Samples, where fees are tolerable |
| TT to a personal or third-party account | You, no recourse | No | Never |
An LC beats a TT on a first order for one structural reason: the bank pays against documents, so a stranger's account stops being the single point of failure. Its limit: an LC guarantees document compliance, not that the container holds what you ordered, so inspection terms stay in the contract.
How TradeVerify helps, and what it does not verify
Plainly: TradeVerify does not verify bank accounts. No trade-records service can tell you who owns an account number, and any provider claiming otherwise is overselling. What the shipment record tells you is whether the entity you are about to pay is a real, active exporter trading under that exact legal name, the question underneath most payment fraud.
- Check the legal name you are paying, not the brand. Run the exact beneficiary name through a free check and see whether shipments exist against it.
- Do a three-way name comparison. Trade records, commercial invoice, beneficiary account. All three matching is the state you want. The sample verification report shows the evidence: export history, buyers, destination markets, recency, trend. A long many-buyer record is harder to fake.
- Use it as one layer. Trade records evidence activity. They do not confirm bank ownership, product quality, or that today's email came from your contact. Suppliers can claim and verify their own profile, and how we score companies is documented, not a black box.
One habit to keep: no bank detail enters your payment file on the strength of an email alone.