Verifying a Chinese Supplier in 2026: What You Can Still Check Remotely, and What You Can't

The quote is 30% under the incumbent's price, the company is unfamiliar, the deposit is due, and part of the output ships to the United States. Verifying a supplier in mainland China in 2026 is harder than it was in one respect and easier in another, and the difference decides how you spend your hour.

The general method, four independent layers of source and the question each answers, is in how to verify a supplier online. This guide covers what changes when the supplier is Chinese: a different registry, a different certificate database, a business licence that carries most of the information you need, and a legal environment that changed in March 2026.

What changed in 2026?

Two sets of rules now pull in opposite directions. Western import law requires buyers to know more about Chinese suppliers than before, and Chinese law restricts how that knowledge can be gathered inside China. Public access to Chinese court judgments also ended in 2024. The practical effect is that document-based, remote verification has become the safe core of the process, and on-site investigation has become something to do only through locally licensed partners.

On the Western side, the US Uyghur Forced Labor Prevention Act has applied a rebuttable presumption since 21 June 2022: goods produced wholly or in part in Xinjiang, or by an entity on the UFLPA Entity List, are presumed prohibited from import (DHS). The EU has adopted its own forced-labour and due-diligence measures. On the Chinese side, the Regulations on Industrial and Supply Chain Security took effect on 31 March 2026. Legal commentary on the text highlights Article 13, which restricts "information gathering activities" concerning industrial and supply chains, language broad enough that supplier questionnaires, ESG audits, human-rights assessments and on-site inspections may fall within it depending on interpretation, with enforcement tools ranging from trade and investment restrictions to travel restrictions on individuals (VinciWorks, 2026). The regulations sit alongside the earlier Anti-Foreign Sanctions Law.

The third change is older but often missed. China Judgments Online, the public database of court decisions, was replaced from January 2024 by a national database accessible only to court personnel (Chinascope, reporting the Supreme People's Court notice of 21 November 2023). A supplier's litigation history, once a routine remote check, is no longer directly available.

Where do you start: the code and the licence?

With the Unified Social Credit Code, an 18-character identifier that every registered Chinese company carries, and the business licence that displays it. Ask the supplier for a scan of the licence before anything else, because it holds most of what you need and gives you the key to check the rest.

The licence shows the registered Chinese name, the code, the legal representative, the registered capital, the business scope, the registration date and the registered address. Each of those is a fact you will verify against the registry rather than accept, and the code is what makes the registry lookup unambiguous where an English trading name would not. English names are informal in China; the Chinese name and the code are the legal identity (see what is a Unified Social Credit Code). A supplier that hesitates to send its licence, or sends one where the name differs from the name on the quote, has given you your first finding.

The company chop, the red seal, carries legal weight in China that a signature does not, and the name on the chop must match the name on the licence. And a Hong Kong entity receiving payment for a mainland factory's goods is common and often legitimate, but it is a different legal person, and its own registration should be checked in Hong Kong's Companies Registry.

How do you read NECIPS without Chinese?

The National Enterprise Credit Information Publicity System at gsxt.gov.cn is run by the State Administration for Market Regulation, is free, and is published in Chinese only (China Justice Observer). Machine translation on top of it works well enough for a buyer, because the fields you need are structured and the labels are consistent.

Search by the Chinese name or the credit code. Read the registration status first, then the change history, which records every change of legal representative, registered address, company name and capital, and tells you whether the company you are about to pay is the one that was registered or a shell that acquired an old registration. Then the enforcement sections: administrative penalties, the abnormal-operations list, which records failures to file annual reports or to be reachable at the registered address, and the serious-illegal-and-dishonest list. A clean record here is ordinary; an entry is a question to put to the supplier.

The commercial aggregators, Tianyancha, Qichacha and Baidu's Aiqicha, repackage this data with English interfaces and add relationships between companies and people, and for a foreign buyer they are the easier route to the same facts. They have access limits for users without Chinese phone numbers or payment methods, and their relationship graphs are inferred, so use them to navigate and NECIPS to confirm. A short version of this lookup is in how to verify a Chinese company.

Is it a factory or a trading company?

The business scope on the licence answers this more reliably than the website does. A scope that includes production or manufacturing terms, 生产 or 制造, describes a company registered to make things. A scope limited to sales, import and export, or trade, 销售, 进出口, 贸易, describes a company registered to sell things made elsewhere. Company names containing 贸易 (trade) or 进出口 (import-export) point the same way.

A trading company is a legitimate counterparty, and for small volumes or mixed orders often the better one. What changes is the price stack, which now includes the trader's margin, and the quality liability, which sits with a factory you may never have named. If you are told you are buying from a factory, the scope, the address and the customs record should all agree; the signals are summarised in is a Chinese supplier a factory or a trading company.

What does registered capital tell you?

Less than the figure suggests, and the rules changed in 2024. Under China's revised Company Law, effective 1 July 2024, shareholders must pay in the subscribed capital of a limited liability company within five years of incorporation, with transition arrangements for companies formed under the earlier rules (China Briefing; Pinsent Masons). Before that, registered capital could be subscribed and left unpaid indefinitely, so a company showing RMB 50 million in registered capital might have had none of it on hand.

Read the paid-in figure where the registry or aggregator shows it, and read the incorporation date next to the registered capital. A large registered figure on a company formed in 2020 with no paid-in capital shown is a marketing number. A modest figure that has been paid in is a better sign than a large one that hasn't. Registered capital is not a balance sheet, and no Chinese registry gives you one for a private company.

Are the ISO and product certificates real?

Check them in China's own systems first. The Certification and Accreditation Administration of the PRC, CNCA, maintains a certificate query platform, and a management-system certificate issued to a Chinese company by a body operating in China is required to appear there. The China National Accreditation Service for Conformity Assessment, CNAS, lists the accredited certification bodies. For products that fall under China Compulsory Certification, the CCC mark, the CQC database holds the certificate records.

Fake and adjusted ISO 9001 certificates from Chinese suppliers are a documented problem; an exploratory academic study examined the practice directly (Faking ISO 9001 in China). The patterns are the same as anywhere: a certification body nobody has heard of, a scope that doesn't match the product, no certificate number, an expired date, or a certificate in a company name different from the licence.

Then use the general route: the issuing body's own register, its accreditation body, and the global CertSearch database, which continues under Global Accreditation Cooperation after the International Accreditation Forum merged into it on 1 January 2026 (IAF). A certificate that cannot be found in CNCA's records and cannot be found at the issuer is a document, not a certification.

Is the supplier, or its owner, on a list you can't trade with?

This check has more weight for Chinese suppliers than for most, because the lists that matter are longer and the consequence is a blocked shipment rather than a fine. The UFLPA Entity List is the one importers into the United States must know, and its presumption applies to goods made "wholly or in part" by a listed entity, so a component from a listed sub-supplier can taint a finished product (DHS). The Bureau of Industry and Security's Entity List and Unverified List restrict exports of US-origin technology to listed parties, which matters if your drawings or tooling contain controlled content. OFAC's non-SDN Chinese Military-Industrial Complex list restricts investment rather than trade, but appears in the same screening.

Screen the manufacturing entity, its shareholders as shown on NECIPS, and any parent group. A clean subsidiary with a listed parent is a problem, and a trading company that sources from a listed factory is a problem the trading company's own record will not reveal. OpenSanctions aggregates these lists in one free search (OpenSanctions); confirm any hit on the list's own site before acting on it.

Do the customs records match the story?

US import records are public and indexed by commercial services, and for a Chinese exporter they show whether the company has shipped under its own name, to whom, how often, and under which HS codes. A factory that claims ten years of exports to North America and has no record in the data is either shipping through a trader, selling domestically, or not what it claims, and each of those calls for a direct question.

Third-party on-site reports are the paid layer here. Alibaba's Verified Supplier programme and similar schemes publish inspection reports by firms such as SGS, TÜV and Intertek that confirm the existence of premises, equipment and staff on the day of the visit. They are useful for exactly that and no more: they don't audit quality systems in depth, they don't verify certificates against CNCA, and they say nothing about the supply chain behind the factory.

What can no longer be verified remotely, and what replaces it?

Three things, and each has a substitute. Litigation history, because the public judgments database closed; the enforcement and dishonesty lists on NECIPS are the remaining public signal, and an aggregator's litigation summary is worth reading with the understanding that it is now built from limited sources. Deep ownership, because aggregator relationship graphs are inferred and foreign access to them is limited; a paid ownership database or a locally licensed investigator replaces it where the exposure justifies the cost. Labour practices, because direct questionnaires and self-organised site visits are now the activity most likely to be read as information gathering under Article 13; the replacement is documentary evidence requested through the commercial relationship and inspection by firms licensed to operate in China.

Two controls do more than any of these. Pay only into a bank account in the name of the licensed entity, never a personal account and never a Hong Kong company with a different name unless its registration has been checked and the arrangement is in the contract; mismatched payee details are the most common precursor to a loss in the cases buyers describe to us. And for a first large order, use a letter of credit, escrow, or a small trial order first, so that the part of the risk no register can retire is carried by the payment terms.

This guide describes public sources and their limits. It is not legal advice on UFLPA, export controls or Chinese law, and a buyer with imports exposed to those rules should have the compliance position confirmed by counsel.

The one-hour China check

Ordered by what disqualifies fastest and costs least.

The route above is the Chinese version of the general check in how to verify a supplier online. The logistics that follow a successful check are covered in managing overseas suppliers, what leaves your control when a drawing goes out in when to transform and when to redact an RFQ, and the RFQ package itself, for one category, in what to include in an aluminum casting RFQ. Timing matters too: the Chinese New Year shutdown in 2026 ran 15–23 February by State Council calendar, and registry changes and certificate renewals cluster around it.

FAQ

How do you check if a Chinese company is legitimate?

Ask for the business licence, then look the company up on the National Enterprise Credit Information Publicity System at gsxt.gov.cn by its Unified Social Credit Code or Chinese name. Confirm status, legal representative, registered address and business scope against the licence and the quote. The registry is free and run by the State Administration for Market Regulation; it is published in Chinese, and machine translation is adequate for the structured fields.

What is the Unified Social Credit Code?

An 18-character identifier assigned to every registered organization in China and printed on its business licence. It is the unambiguous key for the official registry and for the commercial aggregators, and it is more reliable than an English trading name, which has no legal standing. Ask for it at the start of any verification.

How do you tell a Chinese factory from a trading company?

Read the business scope on the licence. Production or manufacturing terms, 生产 or 制造, indicate a company registered to make products; a scope limited to sales, import-export or trade indicates a reseller. Check the registered address, an industrial zone against an office tower, and the customs record, which should show exports under the company's own name in the relevant product categories.

Are Chinese ISO certificates reliable?

Many are; enough are not that every one should be checked. Look the certificate up in the CNCA certificate query platform, where a valid certificate issued in China is required to appear, then at the issuing body's own register and, for the body's accreditation, at CNAS. A certificate that appears in neither place, or in a different company name, should be treated as absent.

Can you still do due diligence on Chinese suppliers in 2026?

Yes, but the remote, document-based part has become the core. China's Regulations on Industrial and Supply Chain Security, in force since 31 March 2026, restrict information-gathering activities on supply chains, and public court judgments have been unavailable since 2024. The registry, the licence, certificate records, sanctions lists and customs data remain available; on-site and labour-practice checks should go through locally licensed firms.

Key takeaways

• Two sets of rules pull in opposite directions in 2026: UFLPA and EU measures require deeper checks, while China's supply-chain security regulations, in force since 31 March 2026, restrict how they can be carried out. Remote, document-based verification is the safe core.
• Start with the business licence and the 18-character Unified Social Credit Code, then confirm every field on NECIPS at gsxt.gov.cn rather than on the supplier's website.
• The business scope tells factory from trading company: 生产 or 制造 for production, only 销售, 进出口 or 贸易 for resale. Address and customs records should agree with it.
• Registered capital is not a balance sheet. Under the 2024 Company Law it must be paid in within five years; read the paid-in figure and the incorporation date.
• Check certificates in CNCA's query platform and at the issuing body, then in the CertSearch database now run by Global Accreditation Cooperation. Fake ISO 9001 certificates are a documented problem.
• Screen the entity, its shareholders and its parents against the UFLPA Entity List, BIS lists and OFAC; a listed parent or sub-supplier can block a shipment.
• Litigation history, deep ownership and labour practices can no longer be checked remotely with confidence. Payee details in the licensed entity's name and risk-sharing payment terms carry the part of the risk no register can retire.