Your supplier's bank account doesn't match the company name? Stop.

The negotiation went well. The samples passed. The proforma invoice arrives, you scroll to the payment details, and something is slightly off: the beneficiary isn't the company you've been talking to.

It's a Hong Kong entity with a similar name. Or the boss's personal account, "faster for small orders." Or a completely different company — "our export arm."

This is the moment most China import money is lost. Not to fake factories with fake websites — to real suppliers, real negotiations, and a wrong bank account at the end. Sometimes it's the supplier playing tax games. Sometimes it's an employee running a side hustle on company time. And sometimes it's a hacker who's been reading the email thread for weeks, waiting for exactly this moment to send "updated bank details."

The three flavors of trouble

Flavor 1 — the hacked thread. Email compromise is an industry. Someone gets into the supplier's mailbox (or yours), watches the deal mature, then sends payment details from the real address at the real moment. The factory never sees your money and genuinely never scammed you. Try explaining that to your bank.

Flavor 2 — the personal account. "Wire to our manager's account, it's faster." In China, a company that invoices you must be able to receive payment as that company. A personal account means: no contract protection, no export documentation in your name, and no recourse when it goes wrong — you paid a person, not the entity you signed with.

Flavor 3 — the shape-shifting entity. A Hong Kong or offshore company with a name one word away from the factory's. Sometimes legitimate (many mainland factories use HK entities to receive foreign currency — it's common practice). Sometimes it's a shell that has nothing to do with the factory. The point: you can't tell which by looking. The name similarity is exactly what makes it work.

The rule that stops all three

Before any wire — first order or fifth year — the beneficiary gets verified against the registered entity. Not eyeballed. Verified: the account name matched character-for-character against the business registration, and if it's a related entity (an HK receiving arm), the relationship confirmed in writing on the contract, not in a chat message.

The short version

Beneficiary matches the registered entity, character for character. Related entities get documented on the contract, not promised in chat. Changed details get verified outside the email thread, every time, no exceptions for urgency — especially for urgency. This one habit kills the most expensive three minutes in importing: the ones between "send" and "sent."