How to Verify a Business Online Before You Pay, Wire, or Reply
Use this checklist when a new vendor, marketplace seller, or invoice sender wants money fast and the relationship started online.
Online business verification is less about finding one magic proof and more about checking whether the whole picture holds together. Fraud attempts often collapse when you compare the email domain, website, support details, payment instructions, and public footprint side by side.
Step 1: Separate the message from the business
A believable email does not make the sender legitimate. Start by independently locating the business website, main phone number, and official contact channels before replying or paying.
Never verify a business only through the contact details contained in the message that asked you for money.
Step 2: Compare the sender domain with the official web domain
Invoice fraud and business email compromise often rely on domains that are close enough to look right at a glance. One extra hyphen, word, or country suffix can be the entire scam.
Official: procurement@company.com
Spoofed: procurement@company-group.coStep 3: Verify payment changes through a second channel
Unexpected changes to bank details, invoice recipients, or payment timing should always be verified through a channel you looked up yourself. This is one of the most effective defenses against BEC-style fraud.
For high-value payments, make dual verification a policy rather than a judgment call.
Step 4: Check whether the website behaves like a real business site
Legitimate businesses can have plain websites, but the basics should still align: coherent company name, stable navigation, policy pages, contact details, and a domain that fits the brand.
- ✓Look for a consistent company name across the homepage, footer, and legal pages.
- ✓Check whether the contact page lists a real location, support path, or corporate details.
- ✓Review whether the site history and domain age make sense for the business story being told.
Step 5: Search for complaints and scam language
Before doing business with a new company, search the company name together with terms like complaint, scam, refund, or unpaid invoice. This should not be your only check, but it often surfaces patterns that the business will not mention itself.
Step 6: Treat unusual payment methods as a deal-breaker
If the business insists on gift cards, cryptocurrency, or a rushed wire transfer without established controls, stop and re-verify everything.
Step 7: Document the verification trail
For expensive purchases or vendor onboarding, keep notes on who you verified, when you verified them, and which official sources you used. That makes fraud easier to catch and internal review easier to defend.
Check the business and its official site together
Use the business report to review public entity context and then inspect the linked website before paying or replying.
Analyze BusinessSources used for this guide
About HowSafeIsThis Editorial Team
Research and Editorial Team
Original reporting and explainers focused on link safety, business verification, public-source research, and plain-English threat guidance.
Share or challenge this guide
If you found it useful, share it. If you found a gap, send a correction so the page can be improved.
How this article stays useful
Pages are tied to source links, methodology notes, and a correction path so they can be revised when the evidence changes.