Verify a Chinese Business License Before Payment
Separate a genuine, stale, altered, or wrong-entity business licence from the payment decision by checking the file, current record, and transaction parties.
A Chinese business licence can be genuine and still be the wrong evidence for a payment. The supplier may send an old copy, a real licence belonging to an affiliate, a flattened screenshot that cannot be digitally validated, or a correct company record followed by bank instructions for somebody else. “The document looks official” does not resolve any of those cases.
A useful review answers three separate questions: what file did you actually receive, does it still match the current registered entity, and is that entity the seller or collector in this transaction? Keep those answers separate. A clean visual inspection is not authentication, and a successful company search is not approval of the bank account.
Start by naming the artifact, not judging it
“Business licence PDF” is too vague for an evidence file. A phone photo of paper, a scan saved as PDF, a screenshot of an electronic licence, an original electronic-licence file, and a screenshot of a registry result preserve different evidence. The distinction matters because only some formats retain a verifiable digital signature or a live validation path.
Save the supplier's original attachment before opening it in an editor. Record the sender, channel, message timestamp, original filename, file size, and a cryptographic hash when the payment is material. Keep the full image, including corners and surrounding paper, even if you make a cropped working copy. For an email attachment, preserve the original message or .eml file as well as the document.
Classify the item in the review note:
- Paper original or physical copy: available for direct inspection, but its printed facts may no longer be current.
- Photo, scan, or flattened PDF: useful for transcription and visual triage, but normally lacks cryptographic proof that the pixels were not changed.
- Electronic business-licence file or live display: potentially eligible for official real-time validation if the original verification path is retained.
- Registry screenshot: evidence of what somebody saw, not the licence itself and not a substitute for your own dated query.
If the file is too cropped or blurred to copy the Chinese legal name and the 18-character Unified Social Credit Code exactly, stop there. Obtain a usable source through the business-licence request workflow. Guessing a character to keep a payment deadline is not verification.
Use visual inspection as triage only
At high zoom, look for abrupt changes in compression, type weight, baselines, character spacing, background texture, and the edges around the company name, USCC, dates, or address. Compare a field copied with OCR against a second manual transcription. Inspect whether important areas are hidden by cropping, glare, a sticker, or a newly drawn redaction. These observations tell you where to investigate; they do not prove an edit or identify who made it.
A polished forgery can look clean. A genuine licence photographed through a messaging app can look skewed, noisy, or over-compressed. Do not turn image quality, a red mark, paper colour, or a familiar layout into a genuine/fake verdict. China has also changed licence formats over time. The State Administration for Market Regulation's 2019 format notice, for example, introduced a horizontal format for covered new, changed, and replacement licences from 1 March 2019.
The code and QR image need the same restraint. A USCC format or checksum test can catch transcription errors; the official explanation describes the code as a nationally unique and stable organization identifier. A valid checksum does not show that the pixels are genuine or that the code belongs to the supplier. Use the USCC Validator as an input-quality check, then match the code to a company record.
Likewise, a copied QR code only shows where that copy directs. The 2019-format notice says the licence QR is intended to connect to public information in the national system, but a screenshot can contain any image. Inspect the destination before proceeding and independently search the Chinese name or USCC rather than treating the scan as the source of truth. Do not scan an unexpected code on an unmanaged device.
Know when electronic verification is available
China's rules give electronic and paper business licences equal legal effect, but an official electronic credential is not simply a photograph labelled “electronic.” Under the SAMR electronic business-licence measures, the electronic file is held in the national system, digitally signed, and available for real-time verification through the official application or an integrated system. The file uses an electronic-licence watermark and signature value; it does not rely on a registration-authority seal.
If a supplier shares the original electronic credential through an official validation flow, record the route, validation time, identity returned, licence status, and result. If the supplier sends only a screenshot, state exactly that: “electronic-licence screenshot received; digital validation not retained.” Do not upgrade a screenshot to “verified electronic licence” because it resembles the official design.
The distinction is especially useful when a file is suspected of alteration. Real-time validation can support the credential and current identity. A static paper scan can only be described as consistent or inconsistent with independently obtained records unless a qualified examiner inspects the underlying document.
Run a two-key match against a fresh public record
Search independently using the exact registered Chinese name and the exact USCC. These are the two identity keys. Do not begin with an English sales name and then select the closest-looking result. The National Enterprise Credit Information Publicity System is described by SAMR as the national statutory enterprise-information platform and public query service; record the source used, query time, and any access limitation.
- Resolve the entity. The Chinese legal name and USCC on the received file should resolve to the same current record. A one-character name difference or different code is a different identity problem, not a minor formatting issue.
- Read current status. Capture the status exactly as shown and the query date. Use the business-status definitions before translating it into a payment rule.
- Compare version-sensitive particulars. Check the legal representative, registered address, company type, business scope, and other face fields relevant to the file. Mark each as same, changed, absent, or unreadable.
- Preserve the result. Save a dated record or report with its source and cutoff. A naked screenshot without the company key, date, and origin cannot support a later review.
A difference does not automatically mean forgery. The current Regulation on Market Entity Registration requires a replacement when a change affects a matter printed on the licence. The same regulation prohibits forging or altering a licence and provides for invalidation announcements when certain licences are lost, destroyed, not returned after changes, cancelled, or revoked. That is why the current record and the document's version have to be reviewed together.
Use three clocks to explain a mismatch
Every review should carry three dates, even when the fields match.
The document clock is the issue date printed on the licence, the electronic validation time, or, for a scan without reliable provenance, simply the date you received it. The registry clock is the date and timezone of your fresh query. The payment clock is the date the beneficiary instruction was issued or changed.
The clocks produce more accurate findings:
- Same name and USCC, but a later legal-representative or address change: likely the same entity with a stale copy; obtain a current copy rather than calling the old one fake.
- Different USCC under a similar name: wrong-entity or altered-field problem; do not merge the records.
- Current identity match, followed by a new beneficiary message: the licence finding may remain valid while the payment instruction requires independent re-verification.
- No current record for the exact two keys: unresolved; retry through the correct official route and check transcription before making any accusation.
Case file: real document, old version, payment still held
A buyer receives a sharp 2021 licence scan from the fictional Suzhou Ruilan Motion Components Co., Ltd. The supplier says the production deposit is due Friday. The scan has complete edges and consistent type, but the buyer does not record “genuine.” The evidence label is “paper-licence scan received by email; visually reviewable; source paper and digital authenticity unverified.”
- The Chinese legal name and USCC resolve to one current Mainland record. Both keys match exactly.
- The current record shows a legal representative and registered address changed in 2024. The company status is current, and there is no identity-key conflict.
- The buyer classifies the file as same entity, stale copy. That explains the differences without pretending to prove the history of the pixels.
- The pro forma invoice names the Mainland company, but a message received that morning instructs payment to the fictional Ruilan International Trading (Hong Kong) Limited. No collection agreement or contract clause identifies that company.
- The identity review passes with a version exception; the payment gate does not. Accounts payable holds the transfer, requests a current licence or officially validated electronic credential, records for the proposed collector, and a signed explanation of the relationship.
The buyer also confirms the new instructions through a previously known company contact. That control matters because IC3 documents how a compromised legitimate mailbox can redirect vendor payments and recommends confirming transactions through a known telephone number or in person. The licence cannot authenticate the message that carried the bank details.
Report one of four evidence findings
Verified electronic credential. The credential was validated in real time through the official electronic-licence route, and the returned entity and status were recorded. This supports the credential at that time; it does not approve the transaction.
Consistent copy. The Chinese name and USCC on a paper photo or flattened file match a fresh record, and no material face-field contradiction remains. Say “consistent with the current record,” not “document proven genuine.”
Stale copy. The exact entity matches, but one or more printed particulars changed after the document version. Record which fields changed and when the newer information was observed. Ask for a current version when the difference affects authority, contracting, location, or your policy.
Unresolved or contradictory. The two identity keys point to different entities, the status or version cannot be reconciled, the file is unreadable, an edit affects a key field, or the licence belongs to somebody outside the transaction. Hold the decision and state the missing evidence without calling the supplier fraudulent.
Release payment only after the transaction identity closes
A licence finding closes the registration-document question. Payment needs a second conclusion. Before release, the approval file should show the current registered entity, the contract seller, the invoice issuer, and the beneficiary as either the same party or a documented and approved relationship. Use the dedicated beneficiary workflow for that review; this article does not reduce it to name similarity.
Approve when the current identity is resolved, the document result is at least consistent, transaction parties align, and no new instruction remains unconfirmed. Approve with an exception only when policy permits a documented stale version or related-party arrangement and a named reviewer owns the exception. Hold for unreadable evidence, version conflicts, wrong-entity records, undocumented collectors, or a changed instruction. Escalate suspected alteration or material loss to the appropriate legal, compliance, bank, or law-enforcement channel rather than trying to conduct invasive forensics yourself.
A reproducible closeout can be one sentence: “Licence scan received 15 July; exact Chinese name and USCC matched a current record queried 15 July; address and legal representative reflect a later version; contract seller matches; proposed beneficiary differs and remains on hold pending relationship evidence and known-channel confirmation.”
That note is more useful than a green “licence verified” badge. It tells the next reviewer what was tested, what the evidence supports, which clock applies, and why money was or was not released.