Fake Supplier Warning Signs Every Importer Should Know
By Aditya Shinde · Founder, Vetrade
Most import fraud is not sophisticated. The buyers who get burned almost always saw a warning sign and talked themselves out of it — usually because the price was good and the supplier was in a hurry. After enough of these stories, you start to notice that fakes rhyme. They make the same mistakes, ask for the same things, and dodge the same questions.
This is a field guide to those mistakes. I have grouped the red flags into four buckets so you can scan them quickly: identity and registration, communication and behaviour, payment, and digital footprint. None of these on its own proves fraud. A genuine small manufacturer can have a bad website and a Gmail address. But red flags stack. One is a question. Three or four pointing the same direction is an answer.
You can verify a supplier in about 20 seconds, free to start — so most of what follows is about knowing what to look for before and after you run that check.
Identity and registration red flags
This is the foundation. If the company is not who it says it is, nothing else matters.
The IEC, GSTIN, and company name don't match. A legitimate Indian exporter has an Importer-Exporter Code (IEC) from DGFT, a GSTIN, and — if it's a company — a registration on MCA21. These should all point to the same legal entity at consistent addresses. When the name on the invoice differs from the name on the GST certificate, or the IEC belongs to a different firm, you are dealing with either sloppiness or a borrowed identity. Cross-check the IEC on the DGFT portal, the GSTIN on the GST portal at gst.gov.in, and the company on MCA at mca.gov.in. If you can't reconcile the three, stop.
They refuse to share their GSTIN or IEC. A real exporter hands these over without flinching — they're on every invoice anyway. "We'll share after the advance" or "our accountant handles that" is a stall. There is no commercial reason to hide a number that exists precisely so buyers and tax authorities can verify it. Treat reluctance as the answer.
A documents that look edited. Scanned certificates with mismatched fonts, a GST certificate where the legal name has clearly been pasted over, or a PDF that won't let you select the text (because it's a screenshot of a screenshot) all point to forgery. Don't accept document images as proof. Verify the underlying number on the government portal yourself, where the source of truth is the registrar, not the supplier's file.
The registered address is residential, virtual, or shared with dozens of firms. A trading company at a flat is normal. A "manufacturer of industrial machinery" registered to a co-working desk is not. If the same address shows up against many unrelated companies, you may be looking at a shell-company farm. Check the address against the kind of business they claim to run, and ask for a real factory or warehouse location.
Communication and behaviour red flags
Identity tells you who they are. Behaviour tells you what they intend.
Pressure and urgency. "Price valid only today," "last container before the rate increase," "another buyer is ready to pay." Manufactured urgency exists to stop you from verifying. A genuine supplier wants a repeat customer and will give you the days you need to run checks. Anyone rushing you past due diligence is rushing you for a reason. Slow the deal down on purpose and watch how they react — a real seller waits, a fake one escalates or vanishes.
They only use free email, WhatsApp, and avoid calls. A Gmail or Outlook address alone isn't damning for a tiny firm, but a company with a real website that still corresponds only from companyname.exports@gmail.com is worth a second look. More telling: refusal to take a video call, do a live factory walkthrough, or be seen on camera. Fraudsters trade in text because text leaves no face. Ask for a short video call. The request itself filters out a lot of fakes.
Vague answers to specific questions. Ask for HS code, port of dispatch, lead time, packing details, and bank name in the company's own name. A real operator answers in a sentence. A fake one deflects, changes the subject, or sends a glossy brochure instead of a straight answer. Specific questions are cheap to ask and expensive for a fraudster to answer consistently.
The deal is too good. Prices well below the market floor, no MOQ, instant stock of everything, and terms that favour you suspiciously much. Fraud often baits with margins no honest business could sustain. If the number doesn't make sense for a real factory's cost structure, assume it isn't coming from one.
Payment red flags
This is where the loss actually happens, so this category deserves the most caution.
100% advance to a personal or third-party account. The single most common fraud pattern. The bank account name doesn't match the company name, or you're asked to pay an "agent," a "sister concern," or an individual. Money sent to a personal account is far harder to trace and recover. Pay only to a current account in the verified company's exact legal name. If the name doesn't match, do not send a rupee. I've written more on this in advance payment fraud and supplier red flags.
Last-minute change of bank details. You've agreed on an account, and then a follow-up email says "use this new account, the old one is under audit." This is a classic interception or impersonation move, sometimes from a compromised email. Always re-confirm any change of bank details by phone with a number you already had — never a number from the same email that requested the change.
Refusal of any buyer-protective payment terms. A supplier who won't consider an LC, escrow, a small trial order, or even a modest advance with balance on shipment documents is telling you they want all the money up front and all the risk on you. Genuine suppliers negotiate terms; fakes insist on the one structure that protects them and exposes you. Start small. A real relationship survives a trial order; a scam usually doesn't bother showing up for one.
Digital-footprint red flags
A real business leaves traces over time. A fake one is thin, new, and inconsistent.
A brand-new domain with no history. A company claiming ten years in business with a domain registered three months ago is a contradiction. Check when the website went live and whether it matches the claimed track record. New isn't automatically fake, but new-plus-grand-claims is a flag.
Stolen or stock content. Product photos that reverse-image-search to other companies, an "About Us" copied word-for-word from a competitor, or stock-photo "factory" images with no real, specific detail. Fraudsters assemble a façade from other people's material. Run a reverse image search on their product and factory photos; borrowed images mean a borrowed identity.
No verifiable presence anywhere else. No reachable landline, no consistent listing across directories, no trace on B2B marketplaces under the same name, no real reviews. Legitimate firms accumulate a footprint; ghosts don't. If the company exists only inside the chat where they're pitching you, that's a problem. On marketplace-sourced leads specifically, see IndiaMART supplier verification and avoiding scams.
Inconsistencies across sources. The address on the website differs from the GST address; the phone number on the invoice rings nowhere; the director named in the email isn't on the MCA filing. Each gap is small. Together they describe a story that doesn't hold up. Genuine details reconcile across independent sources because they describe one real company.
What to do when you spot one or more
Spotting a flag is the easy part. Acting on it is where buyers go wrong, usually by rationalising. Here's the sequence I'd follow.
- Stop the clock. The moment you see a flag, take payment off the table until the flag is resolved. Urgency is the fraudster's only real weapon, and pausing disarms it.
- Verify at the source, not from their documents. Confirm the IEC on DGFT, the GSTIN on the GST portal, and the company on MCA, using the numbers — not the PDFs they sent. Or run them through verify a supplier to do the cross-checks in one pass.
- Force a live interaction. Ask for a video call and a live factory or warehouse walkthrough on camera. Watching how a supplier responds to this single request resolves a surprising number of cases on its own.
- Test with a small order on protective terms. If you still want to proceed, propose a trial order with an LC, escrow, or balance-on-documents. A real supplier engages; a fake one suddenly loses interest.
- Walk away on an unresolved stack. If two or more flags remain unexplained after you've verified and asked, the deal isn't worth it. There will always be another supplier. There is not always another chance to get your advance back.
For a fuller workflow, the pillar guide on how to verify an Indian supplier walks through verification end to end, and the supplier due diligence checklist gives you a step-by-step list to run before paying. If you want a single question to anchor on, how to check if a supplier is genuine covers the core signals.
In short
Fakes repeat themselves. The identity won't reconcile across DGFT, GST, and MCA; the behaviour leans on urgency and avoids a face; the payment wants everything up front to an account that isn't the company's; and the digital footprint is thin, borrowed, or inconsistent. No single flag convicts, but flags stack, and a stack of three or four is your answer.
The discipline that protects you is boring and effective: pause, verify at the source, force a live interaction, and start small. Verification takes about 20 seconds and costs nothing to start. An advance to the wrong account costs a lot more, and you rarely get it back. When in doubt, slow down — the honest suppliers will wait, and the fakes will tell on themselves.
Verify any trade partner in 20 seconds.
Run a full Vetrade check on your next supplier or buyer — GST, IEC, VIES, EORI, TRN, sanctions, LinkedIn, fraud-news scan — before you wire any advance.
Start verifying →