A vendor can look credible right up to the moment a deposit disappears, a shipment stalls at port, or a regulator asks why your business dealt with a sanctioned or improperly licensed counterparty. The question is not whether vendor checks are worthwhile. It is when to conduct vendor checks so that the findings can still change the decision.
For procurement teams, traders, and growing businesses, the right timing is usually earlier than instinct suggests. Due diligence completed after a purchase order is issued or funds are transferred may document a problem, but it rarely prevents the loss. Effective checks sit at the decision points where your company is about to commit money, data, inventory, credit, or reputation.
Conduct Vendor Checks Before the First Material Commitment
The first and clearest trigger is before signing a contract, placing a meaningful order, extending trade credit, or making an advance payment. This applies even when the vendor was introduced by a mutual contact, has a professional website, or has sent registration documents.
A basic commercial relationship can become expensive quickly. A supplier may request a 30% deposit for custom production. A logistics provider may gain access to shipping records and customer details. A distributor may represent your brand in a new market. Each arrangement creates exposure that is difficult to reverse once performance begins.
At this stage, a vendor check should establish that the company exists, is properly registered, and is operating under the name and address it claims to use. It should also identify who controls the business, whether public records reveal litigation, regulatory concerns, adverse media, or insolvency indicators, and whether its stated capabilities fit the proposed transaction.
The depth of review should match the commitment. A small one-time purchase from a low-risk supplier may warrant a targeted identity and registration review. A long-term supply agreement, exclusive distribution appointment, or six-figure prepayment calls for a broader assessment of ownership, compliance exposure, market standing, and fraud indicators.
Check Again When the Transaction Changes
Vendor due diligence is not a one-time administrative exercise. A company that was suitable for a modest order may not be suitable for a larger commitment six months later. Re-check the vendor when the commercial facts change materially.
Common escalation points include a sharp increase in order value, a request for longer payment terms, a move from samples to production, or a proposal to sign an exclusive agreement. The same applies when a vendor asks to change the beneficiary bank account, payment destination, legal entity, warehouse, or key contact.
A changed bank account deserves particular attention. It may be legitimate, but fraudsters frequently exploit invoice-redirection scams by impersonating genuine suppliers or taking advantage of weak email controls. Do not treat a new payment instruction as a routine update. Independently verify the request using established contact details, then assess whether the new account is consistent with the vendor’s legal entity and operating location.
Changes in ownership or management can also alter the risk profile. A new beneficial owner, director, or parent company may introduce sanctions, politically exposed person exposure, regulatory concerns, or conflicts that were not present during the original review.
When to Conduct Vendor Checks for High-Risk Categories
Some vendor types require scrutiny before any meaningful work begins because the consequences of failure are unusually high. Risk rises where the vendor handles regulated goods, sensitive information, customer funds, controlled technology, health-related products, or cross-border logistics.
For an import-export business, the vendor check should be completed before the supplier is relied upon for time-sensitive or regulated shipments. A delayed container may be inconvenient. A shipment linked to inaccurate documents, a prohibited party, or a supplier without the required license can lead to seizure, penalties, missed customer commitments, and reputational damage.
Higher-risk engagements generally include vendors that:
- receive substantial deposits or hold inventory on your behalf;
- operate in jurisdictions with limited corporate transparency or elevated corruption risk;
- provide financial, legal, customs, logistics, data-processing, or regulated services;
- sell goods subject to product-safety, export-control, environmental, or labeling requirements; and
- act as agents, distributors, intermediaries, or representatives with authority to affect your reputation.
This does not mean every vendor requires the same intensive investigation. It means the review should be proportionate to the potential loss and the difficulty of replacing the vendor if something goes wrong.
Watch for Events That Justify an Immediate Review
Sometimes the trigger is not a planned transaction but a warning sign. If a vendor becomes evasive, changes its story, pressures your team to pay quickly, or refuses to provide basic corporate documents, pause the process. Urgency is not evidence of legitimacy.
Other warning signs include inconsistent company names across invoices and contracts, personal email accounts used for commercial instructions, copied website content, unusually favorable pricing, unexplained intermediaries, and reluctance to disclose ownership or manufacturing locations. None of these facts alone proves fraud. Together, they may indicate that the counterparty is misrepresenting its identity, capacity, or authority.
An immediate review is also warranted after public reports of regulatory action, litigation, insolvency, product recalls, labor concerns, data incidents, or sanctions-related developments. A vendor’s operational problem can rapidly become your supply-chain problem, especially if it is a sole source or serves a critical market.
Build Checks Into Your Procurement Workflow
The most reliable approach is to make vendor verification a defined approval gate, not a task performed only when someone feels uneasy. Procurement, finance, operations, and compliance should know which events require a check and who can approve an exception.
For many small and midsize businesses, a practical workflow has three levels. New low-value vendors receive an identity, registration, and basic public-record review before onboarding. Vendors receiving deposits, credit, or access to sensitive data receive a deeper ownership and compliance assessment. Strategic suppliers, foreign distributors, acquisition targets, and high-value counterparties receive enhanced review before contracts are signed or funds are released.
Set renewal points as well. Annual reviews may be suitable for stable, lower-risk vendors. Higher-risk or strategic vendors may require monitoring and a fresh assessment before each significant renewal, payment milestone, or expansion into a new territory. The objective is not to create bureaucracy. It is to identify material changes while you still have alternatives.
Document the result in a way that supports real decisions. A useful report should distinguish verified facts from unverified claims, cite accessible sources, identify gaps, and explain what the findings mean for the proposed relationship. A clean registration record, for example, does not confirm production capacity. A concerning legal record may require clarification rather than automatic rejection.
Use the Right Decision After the Check
Vendor checks should lead to a decision, not a file that sits unread. Depending on the findings, your business may approve the vendor, approve with controls, request further evidence, reduce the initial order, change payment terms, or walk away.
Controls can be commercially sensible when risks are manageable. You might begin with a smaller trial order, use staged payments tied to inspection, require proof of insurance or licenses, avoid exclusivity, or add termination and audit provisions to the contract. These steps cannot cure a fraudulent company, but they can limit exposure where a legitimate vendor is new, lightly capitalized, or operating in a challenging market.
SDDCheck is designed for the moments when informal research is no longer enough: before money moves, before contracts bind, and before a promising opportunity becomes a costly dependency. Source-cited verification and clear risk highlights give decision-makers a defensible basis to proceed, negotiate safeguards, or stop.
The best time to check a vendor is when saying no is still inexpensive. Put verification before commitment, repeat it when the relationship changes, and treat unanswered questions as commercial information rather than an inconvenience.