Due Diligence on Chinese Suppliers: A Practical Framework

Due diligence on a Chinese supplier is not a single check. It is a five-phase process: desktop research, document verification, a remote audit, an on-site audit, and ongoing monitoring. Each phase costs more and takes longer than the last, which is the point. You run the phases in order and stop as soon as the remaining risk no longer justifies the next phase.

Most importers do this backwards: they wire a deposit to a factory they found online, then try to verify the supplier after something goes wrong. This guide is the correct order of operations for buyers about to place a meaningful first order. If checking every detail yourself sounds like too much, this is precisely what CN Ally's supplier verification and factory audit service handles from inside China.

What due diligence actually means when you buy from China

In Western procurement, due diligence often means a credit report and a few references. In China it has to mean more: the company on your proforma invoice may not hold the bank account, and the "factory" in the photos may be a trading office subcontracting everything elsewhere.

Serious guides split this into hard due diligence (documents, registries, court records) and soft due diligence (reputation, communication consistency). Hard checks tell you whether the company is real and legally scoped for your product. Soft signals tell you whether the relationship will survive the first problem.

The mistake is treating due diligence as a flat checklist. A flat checklist cannot answer the real questions: how much of this does a $3,000 order need versus a $300,000 order? That is why this guide is organized in phases. You do Phase 1 for every supplier. You do Phase 4 only when the order value, the risk, or a failed earlier phase demands it.

The five phases at a glance

The whole framework on one table. Everything below explains how to execute each phase and when the next one is worth it.

Phase · What you verify · Typical time · Typical cost · Stop rule

• 1. Desktop research: Public footprint, name consistency, registry lookup · 2–4 hours · Free · Continue if anything looks off or unverifiable
• 2. Document verification: Business license, USCC, scope, bank account, certificates · 1–3 days · Free to a few hundred dollars · Continue if documents fail cross-checks or raise doubts
• 3. Remote audit: Facilities, equipment, capacity via live video and document pack · 1–2 weeks to arrange and run · A few hundred dollars via a third party · Continue if you cannot confirm factory status or capacity
• 4. On-site audit: The factory itself: equipment, workers, systems, records · 1–2 weeks to book; visit takes a half to full day · Around $300 per man-day, usually one man-day · Continue only if the audit finds issues you need fixed and re-verified
• 5. Ongoing monitoring: That nothing important changed since onboarding · 30 minutes quarterly; annual re-check · Free to a few hundred dollars a year · This phase never fully ends

The costs in this table come from published third-party rates. A standard factory audit runs around $300 per man-day all-inclusive for the main industrial cities, most audits fit within one man-day, and the written report arrives one to two business days after the visit (Maple Sourcing). A basic product inspection runs $200–350 per man-day (Statrys). Anything priced dramatically below those bands deserves skepticism.

Phase 1: Desktop research (do this for every supplier)

Phase 1 is free and takes an evening. It filters out the obvious problems before you spend a dollar or reveal your product plans to anyone questionable.

Start with the company's registered identity. Get the full Chinese company name and the 18-character Unified Social Credit Code, then look the company up in China's National Enterprise Credit Information Publicity System, the government business registry. A supplier who only offers an English trade name, or stalls when asked for the registration number, has given you your first data point: legitimate companies have no reason to hide details that are public record.

On the registry result, check four things: status (should be active), business scope (should plausibly cover what you are buying), establishment date (compare it against the "15 years of experience" claim), and the legal representative's name (it should match every later document).

Then check the public footprint. Search the Chinese name alongside 诈骗 (scam) or 投诉 (complaint), and compare how the company presents itself across Alibaba, Made-in-China, and its own site. Inconsistent names, addresses, or product ranges across platforms are a classic soft signal of a shell operation.

Finally, test responsiveness with two questions that require looking something up: the exact USCC, and the legal representative's name as printed on the license. A real company answers both in a day. If Phase 1 reveals a revoked license, a bogus scope, or a company that does not exist under the name you were given, stop. There is no Phase 2 for a supplier that failed Phase 1.

Phase 2: Document verification (the paper trail must close)

Phase 2 turns the registry lookup into a full document cross-check. The goal is simple: every piece of paper should describe the same company. When documents disagree, the disagreement itself is the finding.

Ask for four documents: the business license, customs registration or export documentation if they claim to export directly, product certifications for your destination market, and any audit or ISO certificates. Then verify each against its issuer. License details go back to the registry. Certificates get checked with the certification body by number, company name, and validity date, and product certifications should be issued to the actual manufacturer.

The highest-stakes check is the bank account. Wire fraud often works by substituting bank details mid-negotiation: the supplier is real, the negotiation is real, and the payment lands in a fraudster's account. Before your first transfer, confirm the beneficiary name matches the registered company name exactly. For a large first order, call the supplier on a verified phone number, not the one from the email containing the bank details, and confirm the account verbally. Legitimate exceptions exist (a related trading company handling foreign exchange), but understand and document the reason before money moves, never after.

Also verify who you are dealing with. The company name on the proforma invoice, the contract, the license, and the bank account should all match, and so should the factory address. When the contract entity differs from the one you negotiated with, ask for the relationship in writing. Subsidiaries, distributors, and export agents are normal in China trade, but only when disclosed.

Our companion guide covers the full document protocol, from requesting the license to spotting forgeries: How to Verify a Chinese Supplier: The 12-Point Checklist. Phase 2 costs nothing but time if you do it yourself, or a few hundred dollars through a verification service. Continue to Phase 3 when the paperwork looks clean but you still have not seen a factory.

Phase 3: Remote audit (seeing without traveling)

Live video walkthroughs and third-party remote audit services let you inspect a factory from your desk, and the results beat most buyers' expectations, as long as you understand the limits.

Start with the document pack. Before any video call, ask for production records, a list of major equipment, workforce numbers, and recent audit reports. Cross-check these against earlier claims: does the equipment list match the quoted capacity? Traders answering on behalf of a factory often stumble here, because they are forwarding questions to someone else.

Then run a live tour, never a pre-recorded one. Ask the factory to show specific things in real time: the workshop floor during working hours, machine nameplates on key equipment, raw material stock, the warehouse, and the quality inspection area. Ask an operator a question about the process and see how naturally the answer comes. A staged tour looks rehearsed; a real factory looks slightly chaotic even through a screen.

Be honest about what remote cannot prove. Video confirms a facility exists and looks operational. It does not confirm the facility belongs to your supplier, that the records describe what you just saw, or that subcontracting is not doing the real work off-camera.

Phase 3 takes one to two weeks to arrange and run, and a third-party live audit costs in the low hundreds of dollars. Continue to Phase 4 when the order value is large, the product is complex or regulated, the remote findings were inconclusive, or the supplier refused a remote audit outright. Refusal of a reasonable audit request from a serious buyer is one of the strongest negative signals in this entire framework.

Phase 4: On-site audit (when the money justifies the trip)

An on-site factory audit is the most expensive single step and the most decisive. Somebody independent walks the floor, checks the equipment, reviews the records, interviews workers, and writes you a report. For a first order in the tens of thousands of dollars or more, it is usually the best money in the whole framework.

Book before any deposit moves. Once production starts, an audit loses leverage, because switching factories mid-order is expensive. The visit typically takes half a day to a full day, with the written report arriving within one to two business days (Maple Sourcing). At roughly $300 per man-day and one man-day for a standard audit, the total is a few hundred dollars plus any travel surcharge for remote factory locations.

Pick the audit type that matches your actual risk. A capability audit checks equipment, capacity, and processes. A quality-system audit checks how the factory manages quality internally. A social compliance audit checks labor practices against standards like amfori BSCI or SA8000. A buyer of children's products needs different assurance than a buyer of unbranded hardware.

Read the report the way an auditor reads it. A clean pass means the factory can do the job. A conditional pass means it can do the job if specific gaps are closed first, and those conditions are the most valuable part of the report: a quality-system gap fixed before the deposit, an in-process check during production, capacity for your delivery date confirmed in writing. A fail means what it says.

If you want the full breakdown of what auditors inspect, see Factory Audits in China: What They Cover and Why They Matter. Phase 4 is where CN Ally's factory audit service does its heaviest lifting: independent auditors on the ground, a written report in English, and follow-up verification when conditions need re-checking.

Phase 5: Ongoing monitoring (due diligence never fully ends)

Most buyers treat due diligence as something you do once, before the first order. That is when it matters most, but it is not when it ends. Suppliers change ownership, business scope, and bank accounts. A verification done two years ago may not describe the company you are paying today.

Set a light cadence. Quarterly, spend thirty minutes re-checking the registry entry: still active, no abnormal-operation listings, no ownership or scope changes. Annually, do a fuller re-verification before renewing terms or increasing order value. Re-verify immediately on three triggers: changed bank account details, changed company name or legal representative, or sudden unexplained changes in pricing or behavior.

Put audit rights and a change-notification clause in your contracts: the supplier must tell you about changes to the registered entity, ownership, or bank account. These clauses cost nothing to add and are difficult to negotiate in after a problem appears.

Keep everything in one place: the due diligence file. For each supplier, keep a folder with the registry screenshots, the license copy, the bank account confirmation, certificates with their verification references, audit and inspection reports, and a log of when each check was done and what it found. A dated, complete file turns due diligence from a one-time scramble into an asset, and makes your annual re-check a thirty-minute exercise.

When you can stop early

The phases run in order, but you do not owe the framework all five for every supplier. These stopping rules are the part most guides skip.

For small trial orders of a few hundred to a couple of thousand dollars, Phases 1 and 2 are usually enough. The maximum loss is bounded, and an on-site audit would eat an absurd share of the order. From roughly $2,000 to $10,000, add Phase 3: cheap insurance, and the phase that catches the "trading company pretending to be a factory" pattern that document checks miss.

From $10,000 to $50,000, Phase 4 enters the picture. A few hundred dollars for an on-site audit against a five-figure order is straightforward math. If the supplier refuses a reasonable audit at this order size, treat the refusal as the answer and walk away. Above $50,000, or for regulated products such as children's products, food contact items, or certified electronics, run the full framework. At this level you are vetting a long-term partner, so Phase 5 monitoring starts immediately.

There is one override to all of this. If any phase produces a hard failure, a revoked license, a bank account in a different name with no credible explanation, a forged certificate, a refused audit, you do not proceed to the next phase. You stop. Due diligence that continues past a failed check is theater.

Your supplier due diligence file: the minimum viable dossier

For every supplier you onboard, keep a folder with dated copies of the following. To turn these records into a scored evaluation you can compare across suppliers, use a supplier scorecard alongside the dossier.

Document · Where it comes from · Refresh trigger

• Registry lookup screenshot and USCC: Government registry · Annually, and on any entity change
• Business license copy: Supplier, cross-checked with registry · On re-registration or scope change
• Bank account confirmation: Written confirmation plus verbal check on a verified number · Every change of bank details
• Product and system certificates: Issuing certification bodies, verified by number · On expiry
• Audit and inspection reports: Your auditor or inspection firm · Before each major order
• Contract and proforma invoices: Your records · Each order
• Check log: You: date, phase, finding, decision · Every check

Frequently asked questions

Can I do it myself, or do I need an agent?

Phases 1 and 2 are entirely doable yourself: the registry is public, the document cross-checks are mechanical, and the bank account verification is a phone call. Phase 3 is doable if you know what to ask for on a live tour. Phase 4 benefits from an independent auditor, because a supplier's own staff will never show you the unflattering corners of the factory. A sourcing agent in China earns its fee where local presence, language, and audit experience matter.

What is the difference between due diligence and a factory audit?

A factory audit is one tool inside due diligence, specifically Phase 4. Due diligence is the whole process: identity verification, document checks, remote verification, the on-site audit, and ongoing monitoring. An audit without the surrounding phases tells you the factory looks good today but says nothing about whether the company on your contract is the company you audited.

How much should it cost?

For a typical small-to-mid importer, a thorough first-supplier process runs from nothing (Phases 1 and 2 done yourself) to under $1,000 including a remote and an on-site audit. Against a $20,000 first order, that is roughly five percent of one order to avoid the most common ways that order goes wrong.

Is Alibaba verification enough?

No. Marketplace badges confirm the supplier passed a platform's onboarding check at some point. They do not verify the entity on your contract, the bank account you are wiring to, or current operational status. Treat platform verification as a starting signal and run your own phases on top of it.

Start with the phase your order size demands

Due diligence fails in two ways: skipped entirely, or applied without proportion. A $500 audit on a $500 order is accounting, not due diligence. Skipping every check on a $50,000 order is not saving money; it is an unpriced bet.

Pick your starting phase from the order value bands above, run the phases in order, and stop early only when the checks pass, never when they get inconvenient. Keep the file. The second time you onboard a supplier, the whole framework takes half the time, because you already know exactly what you are looking for.

If you would rather have the verification, audits, and monitoring handled from inside China, reach out at hi@cnally.com.