Supplier Fraud Detection: Signals, Checks, and Response

• Banking detail changes mid-relationship, especially to accounts in different jurisdictions or under different names
• Invoices that drift from contract terms — rounding, added line items, changed entity names
• Financial statements that don't reconcile: revenue growth without asset or headcount growth
• Registered capital and reported production scale that are implausible together
• Requests to split payments across multiple entities or jurisdictions
• Auditor changes or qualified audit opinions in jurisdictions where that information is public

The strongest financial signal is inconsistency across sources: the revenue a supplier claims in its pitch deck should be supportable by the tax filings, customs export records, and bank references it can produce. Fraudulent operations can fabricate any single document; fabricating a consistent set across independent sources is far harder. Cross-source reconciliation is the core of financial due diligence.

• Systematic evasion of physical verification — rescheduled audits, restricted facility access, 'the factory is being renovated'
• Communication channel switching — moving from corporate email to personal messaging apps for commercial terms
• Personnel instability at key contacts — frequent changes in sales engineers or account managers who 'left the company'
• Asymmetric urgency — intense pressure on your payment deadlines, vague or shifting answers on delivery commitments
• Over-familiarity escalation — gift-giving, personal favors, or relationship framing that precedes payment requests
• Defensiveness at routine questions — treating standard verification as an insult or breach of trust

Fraudulent documents fail on detail. Certificates of origin with fonts that don't match the issuing chamber's templates. Test reports whose certificate numbers don't appear in the laboratory's verification portal. Bills of lading referencing vessel voyages that shipping schedules show elsewhere. Business licenses whose QR codes resolve to different company data than the printed page.

• Verify every certificate through the issuer's own portal or contact channel — never through contact details on the document itself
• Check document metadata where digital files are involved — creation dates, author fields, editing software
• Cross-reference vessel names and voyage numbers against public shipping schedules for transport documents
• Compare registry data (legal representative, address, scope) against what appears on company letterheads and stamps
• Test QR codes and security features on official documents against known-genuine specimens

1. 1Freeze pending payments quietly — no announcement, no confrontation; cite routine review if pressed
2. 2Preserve everything — export emails, chat logs, invoices, and documents to a controlled archive before the counterparty can alter shared portals
3. 3Verify through independent channels — registry pulls, bank confirmations, physical site checks via local investigators
4. 4Map the exposure — total funds at risk, goods in transit, tooling and IP held by the supplier, dependent orders downstream
5. 5Engage counsel in the relevant jurisdiction before any confrontation — cross-border fraud recovery is procedural, and early missteps forfeit remedies
6. 6Only then, decide: negotiate, terminate, or report — with evidence intact and options preserved

The instinct to confront immediately is the most expensive instinct in fraud response. Confrontation triggers evidence destruction, asset movement, and counterparty disappearance — often within hours. The disciplined sequence is silence, preservation, verification, and then action with counsel leading.