Key Takeaways
Ask a buyer in Europe or North America what they fear about paying a Chinese supplier, and the answer is usually that the supplier takes the deposit and disappears. That happens. But the more common loss, and the one that moves fastest, is different: the money never reaches the supplier at all.
This guide is about payment execution rather than payment structure. Deposit percentages, balance triggers and trade terms are covered in payment terms and incoterms. What follows is about the moment money leaves your account, and how to make sure it lands where you intended.
The pattern behind almost every payment fraud
The mechanics vary but the shape is consistent: something changes, it is urgent, and the change is designed to be verified through the same channel that announced it. Once you see the pattern, it is easier to recognise in the moment.
- A change of bank details arriving mid-order, usually shortly before a payment is due.
- Urgency — the account is being audited, the old account is frozen, the shipment will be delayed unless payment is made today.
- A beneficiary that does not match the supplier: a personal name, a company in another province, a different country.
- A channel switch from email to messaging app, or from the platform to a private conversation.
- A screenshot instead of a confirmation, or a document that looks right but differs from the previous version in small ways.
- Instruction to keep it quiet, or a reason why you should not call the usual number.
The specific mechanics worth knowing
Intercepted invoices
The supplier is real, the order is real, and the fraud sits in the middle. An email account is compromised, or a lookalike domain is registered that differs by one character, and a revised invoice with new bank details arrives inside a genuine-looking thread. The transfer goes to a third-party account; the supplier later asks for a payment you believe you have already made.
Lookalike domains and addresses
One letter changed, a different top-level domain, or a display name that matches the real contact while the actual address does not. The warning usually comes too late — after the invoice has been paid. It is worth checking the full address rather than the display name on any payment-related email.
Personal accounts and third-party beneficiaries
A serious supplier invoices in the name of its legal entity, to an account in that entity’s name. A request to pay an individual, or a company with no apparent relationship to the supplier, removes most of your recourse regardless of whether the supplier is honest.
The genuine supplier whose mailbox is compromised
This is the case that surprises buyers: the supplier is legitimate and has no idea. Their email was accessed, and the invoice you received was modified in transit. Treating the supplier as the fraudster wastes the hours that matter most.
A five-minute check before any payment
This does not require technology or a consultant. It requires stopping for five minutes and answering six questions:
- Who exactly receives the money? The legal entity name, not the contact name.
- What is this payment for? Which order, which invoice number, which milestone.
- Does the beneficiary name match the supplier documentation? Business licence, contract, proforma invoice — all three should agree with the account name.
- Has anything about the payment details changed since the last payment? If yes, stop and verify through a separate channel.
- Does the amount and exchange rate match what was agreed?
- Has the trigger actually been met? Goods inspected, documents received, milestone reached.
If any answer is unclear, the correct action is not to proceed carefully — it is to stop and verify. Verification that uses the same channel as the instruction is not verification.
What to verify on a first payment
- A proforma invoice on the supplier’s letterhead, with company name, registered address and registration number.
- A beneficiary account name identical to the company name on the registration documents.
- A receiving bank in the country where the supplier operates.
- A phone or video confirmation using a number you found yourself, never a number supplied in the payment email.
- For a first order, a small test transfer confirmed as received before the full amount is sent.
- A traceable payment method, with a documented trail, rather than an informal transfer.
If the money has already gone
Speed dominates everything else, and the window is measured in hours rather than days:
- Contact your bank immediately and report it as a possible fraudulent transfer, asking for whatever recall or freeze process is available.
- Stop every further payment. Victims are frequently asked for a release fee, a tax payment or an account-unfreeze charge. Do not send more money to rescue the first payment.
- Preserve everything: invoices, bank details, transfer receipts, email headers, messaging conversations, phone numbers and screenshots. Do not delete the thread because you are angry with it.
- Notify the real supplier, because their mailbox or an employee account may also be compromised and they need to know.
- Report it to your own jurisdiction’s fraud reporting channel and, where relevant, to the platform the supplier was found on.
Why this is a local problem as much as a remote one
A buyer in another timezone can spend a day exchanging messages about whether an account change is genuine. Someone local can make a phone call, or walk into the office, and ask the question directly — and can also tell whether the person answering is surprised, which is the most useful signal in the whole exchange.
That is not a service that replaces your payment controls. It is a way of resolving a specific uncertainty quickly, at the moment when speed determines the outcome.
How ApplianceChain helps
We do not hold funds, we do not receive payments on a buyer’s behalf, and we do not take responsibility for a transfer. What we can do is resolve the specific question that payment fraud depends on: whether a change is real. When an account change arrives, we can confirm it with the supplier directly, in person or by a number we already held, and tell you what we found.
We treat any change of payment details as an anomaly to be verified rather than an instruction to be followed — which is the habit that prevents most of these losses.
Based On Your Situation
What This Means For You
Common Questions