Why German suppliers are unusually verifiable
Germany has one of the most complete public corporate records in the world. The Handelsregister holds the legal entity, address, capital, formation date, filing history and every managing director, and it is publicly searchable. The Bundesanzeiger publishes insolvency proceedings. VIES validates German VAT numbers against the tax authorities in real time. All of it is free.
Almost nobody outside Germany uses it. That is why supplier fraud against international buyers is frequently attempted against German suppliers specifically: the reputation is strong enough to bypass scrutiny, and the buyer usually has not heard of handelsregister.de.
The three free checks that catch most of it
Search the legal entity on handelsregister.de
Search under Handelsregisterbekanntmachungen - HRB for corporations, HRA for partnerships. You get the legal name, registered address, registered capital, formation date and all managing directors without paying for the document. The test is simple: the legal entity name on the invoice must appear in the register. If the seller trades as "TechnoPrecision GmbH" but the invoice says "Techno Precision International FZE", and only the latter is registered, you have a problem. If the company was formed in the last six months and is claiming a twenty-year production history, you have a different problem.
Validate the VAT number through EU VIES
The EU VIES service checks a German USt-IdNr. against the German tax authorities live and free. Two things to check: that the number validates at all, and that it validates to the legal entity you are dealing with. A valid VAT number belonging to a different company name is a serious signal, and it is a common opening move in a fraud attempt. Note that German VAT exemption rules mean not every German company has a USt-IdNr. - small businesses and exporters frequently do not - so a missing number is a question to ask, not a failure.
Confirm the bank account name matches the legal entity exactly
This is the check that catches the most damage. The account name on the payment instructions must match the registered legal entity name, character for character. Legitimate German manufacturers invoice from their registered entity and accept standard bank transfer or letter of credit. A request to pay a personal account, a "logistics partner", a "consultant", a different company, or to pay in cryptocurrency is disqualifying on its own, regardless of how well every other check passes.
Checks 4 to 12
| # | Check | How | What it catches |
|---|---|---|---|
| 4 | Bundesanzeiger insolvency search | Free search at bundesanzeiger.de for insolvency, liquidation and rejected applications | Financial distress. A rejected insolvency application is a public, damning signal |
| 5 | Impressum compliance | Every German commercial website must publish an Impressum under TMG §5 with legal entity, address, register number and managing directors | A company claiming to be an established manufacturer with no Impressum is not operating within German law |
| 6 | Geschäftsführer verification | Confirm the person emailing you is named on the register, or is an authorised representative of a named director | Impersonation, and a "sales manager" with no corporate existence |
| 7 | ISO certificate validation | Take the certificate number and check it directly with the issuing body - TÜV, DNV, SGS, Bureau Veritas, DEKRA, TÜV Rheinland. Check the scope, the accredited body and the expiry date | Fabricated, expired or out-of-scope certificates. A number that does not validate is decisive |
| 8 | EORI number check | Ask for their EORI number and validate it against the EU database. A German exporter needs one for intra-EU dispatch | Non-exporters presenting as exporters; the number encodes the country and registration validity |
| 9 | Physical address verification | Check the registered address against satellite and street imagery. Is it an industrial site consistent with the claimed capability? | The common pattern of a residential address, a coworking space, or an unrelated company at the same address |
| 10 | Domain and email age | Check the domain registration date. Assess whether the contact email is on the corporate domain or a free provider | A 6-month-old domain claiming 30 years of history; a "manufacturer" communicating only via Gmail |
| 11 | Capability consistency | Ask for the equipment list, the number of CNC machines or production lines, current workload, and a video walkthrough of the floor | Resellers and brokers presenting themselves as manufacturers. A genuine factory will show the floor on request |
| 12 | Reference and payment terms | Ask for two references in your region. Normal German terms are 30-50% deposit with balance on delivery for first orders, or irrevocable letter of credit. A full prepayment request is a red flag | Pressure tactics and the absence of any trading history worth citing |
Behavioural red flags that have nothing to do with documents
Perfect documentation does not mean a legitimate transaction. These are behavioural signals, and they are frequently present in cases where every register check passes:
- Unusual urgency - "we only have capacity this month", "the price expires today", "we can hold this price for 24 hours". German Mittelstand manufacturers are rarely under this pressure and it is almost always manufactured.
- Quotes far below market - a price 30-50% below every comparable machine or component is not a bargain, it is a signal that the machine does not exist or the specification is not what it appears.
- Reluctance to name the legal entity - a supplier that will not state its registered name, address or register number is telling you something.
- Refusal of a video walkthrough - a real factory is proud of its floor. A supplier who cannot or will not show you the machines has a reason.
- Free sample - agreeing to a free sample of a component before any payment is a common opening gambit to get your address and specifications for a follow-up fraud attempt.
- Pressure on Incoterms - insisting on DDP or unusual terms when the seller is unfamiliar, to move the risk onto you before the goods exist.
- Emails that avoid the company domain - the legal entity is being kept at arm's length from the communication.
- Third-party logistics payment request - a "delivery agent" or "shipping partner" who will receive the money instead of the manufacturer.
What to do when a check fails
- Stop the payment, not the conversation. A supplier who has failed a check will usually respond to the concern with more documentation. That is fine - the check still stands.
- Do not send any further personal or technical data. Drawings, volumes and specifications have value to a competitor and to a fraud attempt.
- Verify the address independently. Do not use contact details the supplier provided for the purpose of verifying the supplier. Use the register data.
- For a high-value order, have it verified properly. Our EUR 299 verification covers the register and insolvency review, Geschäftsführer confirmation, ISO certificate validation with the issuing body, address and facility verification, and a structured capability interview - in 3-5 business days, reported whether or not it is convenient.
- For a first order above roughly EUR 50,000, consider an irreversible letter of credit or a documented staged payment with inspection before the balance. The cost of an LC is small relative to the exposure on a capital machine.
If you have a supplier you are unsure about, send us the company name, website and contact, and we will tell you what we find. EUR 299, 3-5 business days, and the report says no when the answer is no.
Related reading
- What our EUR 299 supplier verification covers
- GmbH check: HRB number and verifying a German company
- Is online-handelsregister.de legitimate?
- How to verify German suppliers
- Verifying German supplier certifications
Frequently asked questions
How do I check if a German company is real?
Search the legal entity name on handelsregister.de, which is free and shows the registered address, capital, formation date and all managing directors. Then validate the VAT number through the EU VIES service. Then confirm the bank account name on the payment instructions matches the registered legal entity exactly. Those three checks are free, take about fifteen minutes together, and catch the large majority of problem suppliers. Add a Bundesanzeiger insolvency search and an ISO certificate validation with the issuing body for anything above about EUR 10,000.
What does a Handelsregister extract show?
It shows the registered legal entity name, legal form, registered address, register and register number, registered capital, date of formation, the complete filing history, and all current managing directors. It is the authoritative record of who the company legally is. The search itself is free; the extract document carries a small per-document fee. Search under Handelsregisterbekanntmachungen with HRB for corporations and HRA for partnerships, not the Vereinsregister which covers associations.
How do I check if a German supplier is a scam?
Run the three free checks: register search, VIES VAT validation, and bank account name match. Then look for behavioural signals that no document can address - manufactured urgency, a price 30-50% below market, refusal to name the legal entity, refusal of a video walkthrough, an offer of a free sample before any payment, communication only from a free email provider, and any request to pay a third party or in cryptocurrency. A valid register entry does not mean a legitimate transaction, so both halves matter.
Is ISO 9001 certification proof a German supplier is reliable?
Not really, and it should be treated as a baseline rather than an assurance. ISO 9001 is common, inexpensive and, in some jurisdictions, obtainable without a genuine audit. ISO 13485, IATF 16949 and AS9100 carry substantially more audit burden and a named regulatory consequence, so they are far stronger signals. Always validate the certificate number directly with the issuing body, because a fabricated or expired certificate number is a common element of supplier fraud.
What is a Whelk GmbH in supplier verification?
A Whelk GmbH is a company with no genuine business activity, formed for the purpose of being used - typically to receive payment, or to give a fraudulent operation the appearance of a German legal entity. The pattern is a recently formed company with a generic industrial-sounding name, limited filings, no visible facility, and a payment request. It is a useful mental model: if the company exists but has no business, the register will show a short history and thin filings, which is the signal to look for when the register search returns a real entity.