Most business relationships that go wrong do not do so because someone was obviously engaging in unusual activities. They went wrong because nobody looked closely enough before things got started.
A supplier disappears with a deposit. A distribution partner turns out to be a fake company with no actual operations – joint venture collapses because one side had undisclosed liabilities that would have surfaced in 5 minutes of proper research, as these are not exotic scenarios – they are the kind of thing that happens to businesses that move too fast and skip the homework.
42% of UK businesses with 200 or more employees experienced fraud in the last five years, according to BDO’s 2024 Fraud Survey – a significant chunk of that comes through third-party relationships – vendors, suppliers, partners, distributors – where due diligence did not go deep enough before the contract was signed.
Vetting a business partner online is not complicated. What it requires is knowing where to look, what to look for, and when the picture you are getting is incomplete.
Start With the Basics: Corporate Registration
Before anything else, confirm the business actually exists in the way it claims to.
Every legitimate company has a registration number and should appear in the corporate registry of the country it’s incorporated in. In the UK, that is Companies House. In the US, it varies by state – Delaware, Wyoming, and Nevada are the most common incorporation states. In the EU, most member states have public business registries accessible online.
What you are checking: does the company name, registered address, and incorporation date match what the potential partner has told you? A business claiming to have ten years of experience that was incorporated eighteen months ago is worth questioning. A company whose registered address turns out to be a virtual office building housing thousands of other entities is a flag, not a disqualifier – but it is something to follow up on.
Check the Ownership Structure
Registered details tell you where a company is incorporated. They do not always tell you who actually controls it.
This is where beneficial ownership matters. A beneficial owner is the real person behind a company – the individual who ultimately owns or controls a significant share of it, even if that ownership runs through holding companies, trusts, or nominee arrangements. Complex ownership structures are a standard tool for obscuring who is actually pulling the strings, and one research has flagged over 21 million risk activity indicators across nearly half a billion companies specifically related to fake company behavior.
When you’re vetting a business partner, you want to get to the human beings behind the entity – ask these questions – Who actually owns meaningful stakes? Have those individuals been involved in other companies that failed, were dissolved under suspicious circumstances, or attracted regulatory attention? Are any of them politically exposed persons – public officials or their close associates, who carry an elevated money laundering risk by virtue of their position?
This is also where the partner’s willingness to be transparent matters. Legitimate businesses do not generally have strong objections to explaining their ownership structure. Those who do have something to hide often reveal it through their reluctance to answer direct questions.
Check for Sanctions, Legal History, and Adverse Media
A company can be legitimately registered, have a clean corporate structure, and still have a track record you would want to know about.
Sanctions screening is non-negotiable for any serious due diligence process. OFAC, the UN consolidated list, the EU sanctions database, and country-specific watchlists are publicly accessible. If a potential partner, their directors, or their UBOs appear on any of these lists, that is a hard stop – not a conversation, a hard stop. Entering into a business relationship with a sanctioned entity can expose you to criminal liability regardless of whether you knew.
Verify Financial Health
A company that can not fulfill its obligations to you is a problem, even if it is not acting fraudulently.
For companies required to file financial statements publicly, which vary by jurisdiction and company size, those filings tell you whether the business is actually operating at the scale it claims. Revenue figures, assets, and liabilities all feed into whether a partner can actually deliver on what they are promising. A supplier claiming $20 million in annual turnover whose most recent accounts show $400,000 in revenue is worth pressing.
For smaller businesses or jurisdictions with limited public filing requirements, you are more reliant on asking directly – requesting audited accounts or management accounts before signing a significant contract is standard commercial practice – credit reference checks can also surface financial stress that is not yet visible in annual filings – late payment patterns or insolvency proceedings in early stages.
Use Automated Business Verification
Manual research across corporate registries, sanctions lists, adverse media, and ownership databases takes time – and for high-volume relationships or complex corporate structures, it becomes difficult to do consistently and thoroughly.
KYB providers, KYB solutions, combine registry lookups, sanctions screening, UBO identification, and adverse media checks into a single automated workflow – what would take a compliance analyst several hours per entity can run fairly quickly, at scale, with a documented audit trail of what was checked and when.
For businesses that take on multiple new partners, suppliers, or clients regularly, the automation matters less for any single check, and more for ensuring the process actually happens consistently – because the risk that slips through is almost always the one where someone decided to skip the full process “just this once”.
What the Red Flags Look Like
There is a difference between a flag that warrants a follow-up question and one that warrants walking away. Here are some of the patterns worth knowing:
Ownership structures that go nowhere
A company that’s owned by another company, which is owned by a third company registered in a high-secrecy jurisdiction, with no clear human beings identified as UBOs anywhere in the chain, is a structure designed for opacity, might be legitimate, might not be. Either way, you should know who you are actually dealing with before signing anything.
Directors with unusually broad portfolios
Individuals appearing as directors of dozens of companies, particularly ones that have dissolved or been struck off, are sometimes legitimate professionals and sometimes nominees covering for real owners who do not want their names on public records.
Inconsistencies between what they say and what the records show
Claims about company age, size, or track record that do not match filed accounts or registration dates are either mistakes or lies. Worth knowing which before you are contractually committed.
Pressure to move quickly
Legitimate business partners do not generally resist due diligence. One that is pushing hard to close before you have had time to do your research properly is telling you something about why they want to skip it.
Conclusion
The DOJ’s 2024 guidance on third-party due diligence made clear that vetting a partner once at the start of a relationship is no longer sufficient – ongoing monitoring – checking for changes in ownership, new sanctions designations, emerging adverse media, or financial deterioration – is now expected for significant business relationships.
Circumstances change. A company that was clean when you onboarded them can be sanctioned six months later. A director who was unknown at the time of contracting can become politically exposed following an election. A supplier with healthy accounts when you signed can be in serious distress by the time of renewal.
The due diligence that actually protects you is continuous, not a one-time exercise.
