CNCN Ally
← Back to blog
Supplier Verification

How to Check If a Chinese Company Is Legitimate

CN Ally Team·March 29, 2026

You can check whether a Chinese company is legitimate in about fifteen minutes, for free, using China's official company registry. Here is how to look up the USCC, read the business license, and decode what the government database actually tells you.

The fastest way to check if a Chinese company is legitimate is to ask for its 18-digit Unified Social Credit Code and look it up on China's official company registry, the National Enterprise Credit Information Publicity System. If the company shows up as active, with a matching legal name, a matching business scope, and no listings on the abnormal-operations or serious-violation lists, it is a real registered business. That check is free, takes about fifteen minutes, and rules out the most common fraud setup: a company that simply does not exist.

This article is the registry and legal layer of supplier verification, the deep companion to our twelve-point supplier verification checklist. CN Ally runs these registry checks on every supplier it screens, so the procedure below is the professional version, done by hand.

Start with the USCC, not the company name

The single most useful piece of paper in China sourcing is not the company website, the Alibaba profile, or even the factory photos. It is the Unified Social Credit Code: an 18-character government identifier assigned to every registered company in China. Names change, websites get rebuilt, English trading names are invented freely. The USCC does not change.

There is a reason the code outranks the name. Under Chinese company law, a company's registered name must be in Chinese, and that Chinese name is the only legally binding version. The English name on the invoice or the Alibaba storefront has no legal status. A supplier can present itself as "Shenzhen Brilliant Manufacturing Co." in English while being registered under a completely different Chinese entity, or under no entity at all. Ask for the Chinese legal name and the USCC together. A supplier that hesitates to provide either is not a supplier you continue talking to.

How the 18-digit USCC is built (and what it tells you)

The USCC is defined by the national standard GB 32100-2015: eighteen characters, digits plus uppercase letters, with a few visually confusing ones (I, O, S, V, Z) excluded. Each segment encodes something:

Positions · What it encodes · What you can learn

  • 1: Registration department · 9 = commercial/industrial registration, the normal case for suppliers
  • 2: Organization category · 1 = enterprise legal person; 2 = sole proprietor; 3 = cooperative
  • 3–8: Division of the registration authority · Which city/district the company is registered in
  • 9–17: Entity identification code · The unique serial assigned by the registry
  • 18: Check digit (ISO 7064 MOD 31-3) · A checksum that filters out typos and fabricated codes

Two practical uses. First, the leading digits reveal the entity type at a glance: a code starting with 91 is a standard enterprise; 92 means a sole proprietor, which matters if you expected a manufacturer. Second, positions 3 through 8 pin the company to a registration district. Compare that against the address on the license and the invoice. A company registered in inland Hunan but claiming to be a Shenzhen factory has explaining to do.

One caveat: the check digit only proves the code is well formed, not that the company is real. A scammer can copy a real company's USCC from a public source. Format validation is a typo filter. The real test is always the registry lookup, and then confirming the registry name matches the name on the contract and the bank account.

Reading a Chinese business license, field by field

A standard Chinese business license has nine fields that matter to a buyer. Suppliers usually send a scan early in a conversation, and you should ask for it if they do not. Here is what each field is and what to check.

统一社会信用代码 (Unified Social Credit Code). The 18-character ID. Copy it into the registry and confirm it resolves to the same company name. This is the field that kills most forged licenses: a fabricated license often fails here because the code either does not exist or belongs to a different company.

名称 (Company name). The registered Chinese name. It must match the registry character for character. Watch for companies whose Chinese name differs from every name on their invoices, certificates, and bank account; mismatched entity names across documents is a classic cover for intermediaries posing as factories.

类型 (Company type). The legal form, such as 有限责任公司 (limited liability company). Compare it against what the supplier told you about themselves.

法定代表人 (Legal representative). The person legally responsible for the company. If the person you talk to claims to be the owner but is not the legal representative, that is not automatically fraud, small companies have sales staff, but it is worth noting alongside everything else.

注册资本 (Registered capital). A "15-year factory with 400 workers" sitting on a tiny registered capital and a recent establishment date is telling you a story. China no longer requires paid-up capital verification the way it once did, so treat this as a consistency signal, not proof.

成立日期 (Establishment date). Compare against the company's claimed history on its website and marketplace profiles. Recently registered companies are not automatically scams, every factory started somewhere, but the claimed timeline has to be honest.

营业期限 (Business term). How long the license is valid for. An expired or near-expired license that was never renewed is a flag.

经营范围 (Business scope). The activities the company is legally licensed to conduct. If the supplier claims to be a factory but the scope only lists 贸易 (trade) or 批发 (wholesale) with no 生产 or 制造 (manufacturing/production), they cannot legally be your manufacturer. They might still be a fine trading company, see our factory vs. trading company breakdown, but know which one you are dealing with before you price.

住所 (Registered address). The official address. Cross-check it against quotes and invoices, and against satellite or street-level maps. A "factory" registered at a residential apartment or a serviced-office tower deserves a hard follow-up question.

Searching the GSXT registry, step by step

The National Enterprise Credit Information Publicity System, NECIPS, at gsxt.gov.cn, is China's official company registry, operated by the State Administration for Market Regulation (SAMR). It is the authoritative source. Everything commercial databases show about a company ultimately traces back to this system.

Here is the walkthrough:

  1. Go to gsxt.gov.cn. The national portal can be slow from overseas; if it stalls, try a provincial mirror under the GSXT framework, which carries the same core dataset.
  2. Enter the 18-digit USCC or the exact Chinese company name in the search field. Chinese names match character for character, so copy the name from the license rather than retyping it.
  3. Read the status field first. 经营状态 should read 存续, 在业, or 在营, all meaning the company is active and operating. If it reads 吊销 (revoked), 注销 (deregistered), or 迁出 (moved jurisdiction), the company is not an operating entity. Stop there.
  4. Confirm the registered name, address, legal representative, and business scope match the license copy the supplier sent you. Every discrepancy is a question to ask; unexplainable ones are flags.
  5. Check the three lists that matter most:
  • 经营异常名录 (abnormal business operations list). Companies land here for failing to file annual reports or for having a registered address that cannot be verified. It is not a death sentence; some companies clear themselves off it, but a current listing is a genuine flag.
  • 严重违法失信企业名单 (seriously illegal and dishonest enterprises list). This one is self-explanatory. A company on this list is not someone you wire money to.
  • 行政处罚 (administrative penalties). Fines and enforcement actions. One minor penalty years ago is context; a pattern of recent penalties is information.

Two practical notes. Some detailed views on the registry may ask for a mainland mobile number for verification, so you may not reach every tab from abroad. That is exactly where the commercial databases below earn their keep.

How to spot a fake business license

Forgery is common enough that reading the license is only half the job; the other half is deciding whether the license is real. These are the tells, in rough order of reliability.

The USCC does not resolve. Paste the code from the license into the registry. If it comes back empty or points to a different company, the license is fabricated. This is the decisive test.

The fields disagree with the registry. Everything matches except one or two fields, say the address or the legal representative. Scammers sometimes clone a real license and edit only the fields that matter to their story.

Template tells. Inconsistent fonts, uneven character spacing between fields, a blurry seal area, or a photo that looks like a photo of a screen rather than a scan. Legitimate suppliers send clean copies without fuss.

No QR code or wrong format. Recent licenses carry a QR code that resolves to the registry record. A license that looks like an older template with a recent issue date is worth a second look.

The license belongs to someone else. The sophisticated version: a real license, from a real active company, presented by a different entity. After the registry check passes, confirm the name on the invoice and the beneficiary name on the bank account match the registered name. The registry name, the contract name, and the bank beneficiary should all be the same entity, which is also the foundation of safe payment practice.

Tianyancha and Qichacha: what the commercial databases add

GSXT is the authority, but it is a government website in Chinese with occasional performance problems for overseas users. Tianyancha (天眼查) and Qichacha (企查查) are commercial databases that mirror and enrich registry data with faster interfaces, better search, and English-capable mobile apps. Both run freemium models: basics free, deep data paid.

What they add beyond the registry page:

  • Aggregated deep data in one place. Equity structure, shareholders, related companies, patents, trademarks, lawsuits, and administrative penalties without opening five government sites.
  • Social insurance headcount. One of the few data points that reflects real operational size. A company claiming 300 factory workers but showing near-zero social insurance enrollees is a shell or a ghost operation, no matter how good the license looks.
  • Relationship mapping. Which companies share shareholders, addresses, or legal representatives. Useful when you suspect the "three different suppliers" quoting you are one trading group.

Source · Cost · Best for · Limitation

  • GSXT (gsxt.gov.cn): Free · Authoritative registration facts · Chinese only, can be slow abroad, some views need a local mobile number
  • Tianyancha: Free / paid tiers · Deep data, English-capable app, relationship mapping · Commercial mirror, not the legal source of record
  • Qichacha: Free / paid tiers · Same registry mirroring, often smoother search · Same caveat; paid reports for full social-insurance data

Use the commercial tools for speed and depth. Settle disputes with the registry. If Tianyancha says the company is active and the registry disagrees, the registry wins.

The court and blacklist lookups most buyers skip

A company can be legally registered and still be someone you do not want to work with. Two official sources fill in the picture.

China Judgments Online (wenshu.court.gov.cn) publishes court decisions. Search the company's Chinese name to see its litigation history. One civil dispute is normal business; a pattern of contract-fraud cases or unpaid-supplier judgments is a different story.

China Enforcement Information Online (zxgk.court.gov.cn) tracks 失信被执行人, dishonest persons subject to enforcement, essentially court-declared deadbeats. A supplier whose legal representative or company appears here has ignored court orders. That is about as strong a negative signal as the registry system produces.

Credit China (creditchina.gov.cn) is the national public-credit platform. A 2025 State Council circular confirmed it as the unified disclosure platform for all public credit information, including lists of seriously dishonest entities. It aggregates the red and black lists across agencies, which makes it faster than visiting each agency system separately.

How to read what you find: patterns matter more than single entries. A single labor dispute from three years ago is noise. A cluster of quality-related lawsuits in the last eighteen months is signal.

What to do with what you find

Registry research is only useful if it produces a decision. Here is a compact rule set:

Finding · Verdict

  • Active status, name/scope/address consistent, clean lists, court record clean or minor: Pass to the next verification stage
  • On the abnormal-operations list, minor penalties, address discrepancy with a plausible explanation: Flag and keep checking; ask for the explanation in writing
  • Revoked or deregistered status, on the serious-violation blacklist, dishonest-debtor listing, license that does not resolve: Stop. Do not send a deposit.

One active-status company with clean lists is a real company. It is not yet a good supplier. The registry layer confirms existence and legal standing; capability, quality systems, and honesty are confirmed by audits, inspections, samples, and reference checks. That is the second half of the process, and it is where factory audits and pre-shipment inspections earn their fee.

Frequently asked questions

Can I check a Chinese company for free?

Yes. The GSXT registry at gsxt.gov.cn is free and authoritative. Tianyancha and Qichacha offer free tiers that mirror the registry data with friendlier interfaces. The core legitimacy check, active status, name match, scope, and blacklist lists, costs nothing. Paid reports add convenience and deep data like social insurance headcount, not different facts.

What if the supplier won't give me their USCC or business license?

Treat that as a disqualifying answer. Every legitimate Chinese company has a business license and knows its USCC; it appears on every invoice they issue. A refusal is not a cultural difference, it is the single most reliable early red flag in China sourcing.

Does a valid USCC mean the supplier is trustworthy?

No. A valid USCC means the company is legally registered. It says nothing about production capacity, quality systems, financial health, or honesty. The USCC check eliminates nonexistent companies and basic forgeries; capability and reliability are verified separately.

GSXT is in Chinese. How do I use it without reading Chinese?

The critical fields are numeric or binary: the 18-digit code, dates, and status terms you can learn as shapes (存续/在业 = active, 吊销 = revoked, 注销 = deregistered). Tianyancha and Qichacha both offer English-capable apps presenting the same registry data in a friendlier form. For a high-value order, a bilingual verification report costs a fraction of the order value.

Can a registered company still be a scam?

Yes. Shell companies hold real licenses with no production behind them, and the stolen-license scam presents a real company's credentials while you communicate with a different entity. That is why the registry name must match the contract name and the bank beneficiary name, and why capability checks like live video walkthroughs and third-party audits exist. Registration proves existence; it does not prove the people emailing you are the registered company.

What if the company isn't on GSXT at all?

Then it is not a legally registered Chinese company, and there is no scenario in which you wire it money. Double-check that you searched the exact Chinese name and the USCC from the license, typos happen, but a genuinely absent company ends the conversation.

Your fifteen-minute verification routine

Keep this routine and run it on every new supplier before any deposit leaves your account:

  1. Ask for the business license scan, the Chinese legal name, and the USCC.
  2. Decode the USCC segments for entity type and registration district.
  3. Look the company up on GSXT: confirm active status, matching name, scope, and address.
  4. Check the abnormal-operations list, the serious-violation list, and recent administrative penalties.
  5. Run the name through Tianyancha or Qichacha for deep data, especially social-insurance headcount if they claim factory scale.
  6. Check the court and Credit China listings for dishonesty or litigation patterns.
  7. Confirm the registry name will match your contract and the bank beneficiary name.

If anything in that sequence fails, stop and resolve it before talking about price. Legitimacy is the foundation every other sourcing step stands on. If you would rather have the registry work, the document cross-checks, and the on-site verification handled for you, talk to CN Ally or email hi@cnally.com.

Need help sourcing this kind of product?

Our team handles supplier verification, QC inspections, and logistics every day.

Get a Free Quote

Ready to source smarter from China?

Tell us what you want to source. We'll reply with vetted factory options and pricing within 24 hours — free, no obligation.