How to Verify a Business Before Paying: A Complete SMB Guide
8 min read · Updated March 2026
You've found a supplier or contractor who looks perfect. The price is right, their website looks professional, and they seem responsive. But before you wire money, there's one question that could save your business: are they actually who they say they are?
The Problem: B2B Fraud Is Worse Than You Think
B2B payment fraud costs businesses over $300 billion annually worldwide. Unlike consumer fraud, B2B scams are often meticulously crafted — fake company websites with real-looking registration numbers, spoofed email domains, fabricated product portfolios, and ghost employees on LinkedIn.
The hard truth: most SMBs that get scammed had no verification process in place. They relied on gut feel, a professional-looking website, and the willingness to "just get the deal done." That's how you lose $20,000 to a supplier who ships you nothing — or doesn't exist at all.
Common B2B fraud patterns in 2026:
- Advance fee fraud — pay a deposit, supplier disappears
- Invoice fraud — legitimate supplier's email spoofed, you pay a fraudster
- Ghost suppliers — company exists on paper but cannot fulfil orders
- Identity theft — fraudster impersonates a legitimate, known business
- Counterfeit goods — goods shipped are nothing like what was ordered
The Stakes: Why This Matters More for SMBs
Large enterprises have compliance teams, legal departments, and the financial cushion to absorb a bad deal. You don't. For an SMB with 10–50 employees, a single fraudulent payment of $15,000–$50,000 can be existential. Recovery rates for B2B fraud are extremely low — less than 20% of B2B fraud losses are ever recovered, and cross-border fraud is nearly impossible to pursue legally.
Beyond financial loss, there's reputational damage. If a fraudulent supplier causes a downstream failure — you miss delivery commitments, your customer loses confidence, your own reputation takes a hit for something that wasn't your fault.
The Solution: A 6-Step Verification Process
Here is the practical verification checklist we recommend for any B2B payment over $500, especially for new counterparties.
Verify company registration
Every legitimate business should be registered with a government authority. In the US, check the state Secretary of State registry. In the UK, use Companies House (free). In Australia, check ASIC. Look for: registration date, registered address, director names, and status (active vs. dissolved). If they claim to be incorporated but nothing comes up — that's a red flag.
Validate their domain and email
Run a WHOIS lookup on their domain (whois.domaintools.com). Check when the domain was registered — a supplier with a 3-month-old domain claiming 10 years in business is suspicious. Confirm their email domain matches their website domain exactly. Invoice fraud often uses a domain like "acme-supplies.com" spoofed from the real "acmesupplies.com".
Check for sanctions and watchlists
Use OFAC's SDN lookup (ofac.treas.gov) to screen the company name and key individuals against US sanctions lists. For international deals, also check the EU Consolidated Sanctions List. This is a legal requirement in many jurisdictions — and it takes 30 seconds.
Request a video call and ask specific operational questions
Fraudsters are often unwilling or unable to do video calls. If they will, ask operational questions only someone actually running the business could answer: "Walk me through your fulfilment process." "What's your typical lead time from your manufacturer?" "Can you share a reference from a customer with similar order volume?" The quality of their answers tells you a lot.
Ask for verifiable references — and actually call them
Most buyers accept a reference list but never follow up. Call the contacts directly. Ask: "How long have you been working with them? What's the average order size? Have you ever had a dispute, and if so, how was it handled?" Real references give specific, unsolicited detail. Fake ones are vague or unreachable.
Use a trust verification platform
All of the above is manual. A dedicated B2B verification tool automates company registry checks, sanctions screening, WHOIS validation, and cross-references the supplier's verified transaction history. This is where a platform like TruthLedger adds real value — you can see a supplier's cryptographically verified deal history before committing to a payment.
Green Flags vs. Red Flags
Green Flags
- Registered company with matching address and directors
- Domain registered 2+ years ago, matches email exactly
- Passes OFAC/sanctions screening
- Willing to do video call, gives operational detail
- Verified deal history on a trust platform
- KYB/KYC verified by a third party (escrow provider, bank)
- Consistent reviews across multiple platforms
Red Flags
- Refuses video call, only communicates via WhatsApp
- Requests wire transfer or crypto only, no escrow
- Price is significantly below market rate
- Urgency pressure: "deal expires in 24 hours"
- Domain registered in the last 6 months
- Cannot provide operational references
- Invoice domain differs from trading domain by one character
Verify counterparties in seconds with TruthLedger
TruthLedger runs automated KYB checks, OFAC sanctions screening, WHOIS validation, and cross-references your counterparty's verified deal history — all in one place. During open beta, it's completely free.
Get Free AccessFrequently Asked Questions
How do I verify a small business is legitimate?
Start with a government company registry check using the business name and registration number they provide. Cross-reference the registered address with their website and email domain. Run their name through OFAC's SDN list. For further confidence, request a video call and ask for references you can independently contact.
What documents should I request before paying a new supplier?
At minimum: a Certificate of Incorporation or equivalent registration document, a copy of a recent utility bill or bank statement (to confirm address), the full legal name and ID of the primary director you're dealing with, and either a KYC/KYB verification certificate (e.g., from Escrow.com, Stripe Identity, or a similar provider) or references from existing customers.
Is there a tool that checks if a business is legitimate automatically?
Yes. TruthLedger automates company registry verification, OFAC and sanctions screening, and WHOIS domain validation. You can search any TruthLedger-registered business to see their KYB status, verified transaction history, and trust score — all confirmed by third-party sources.
What is KYB (Know Your Business) verification?
KYB is the business equivalent of KYC (Know Your Customer). It's the process of verifying that a company is real, legally registered, not sanctioned, and operated by who they claim to be. KYB typically involves checking company registration, beneficial ownership, sanctions lists, and sometimes financial history.
How can I protect myself if paying an unverified business is unavoidable?
Use an escrow service. Escrow holds your payment until the goods or services are delivered to your satisfaction — the supplier gets paid only when you confirm delivery. This doesn't replace verification, but it dramatically reduces financial risk even when dealing with unverified counterparties.