CNCN Ally
← Back to blog
Sourcing Basics

How to Pay Chinese Suppliers Safely in 2026

CN Ally Team·March 22, 2026

The safest way to pay a Chinese supplier is a bank wire to a verified company account, staged as deposit plus balance tied to inspection. Here's how to spot payment fraud, verify bank details, and protect every transfer.

The safest way to pay a Chinese supplier is a bank wire to a verified company account, never to a personal account, split into a deposit that triggers production and a balance released only after a passed quality inspection. Every other precaution flows from that structure: verify the account before you wire, tie each payment to a document rather than a date, and use platform escrow or a letter of credit when the order is too large to absorb a deposit loss.

Most payment problems in China sourcing are not bank problems. They are trust problems disguised as bank problems. The supplier is real, the goods are real, and then one email changes the bank details. Or the "factory" was never a factory and the personal account you paid was the business plan all along. This guide covers how these scams actually work, how to verify beneficiary details before every wire, how to structure deposits and balances so your exposure stays small, and what to do in the first hours if you suspect fraud. For a full rundown of payment terms (T/T, L/C, open account and which to choose), read our companion guide on payment terms with Chinese suppliers; this one is about payment safety.

If paying a supplier you have never met makes your hand hover over the send button, CN Ally can verify the supplier, the account, and the paperwork for you before money moves.

Why payment safety is a "before you pay" problem

A wire transfer is a one-way door. Domestic payments can often be reversed or disputed for days. An international wire to China settles into the beneficiary's account, and once the money is moved onward, no chargeback mechanism pulls it back. Your bank can ask the receiving bank for a recall, but that is a request, not a right, and it works only while the funds are still sitting in the account.

So your protection must happen before you pay. Verification tells you who you are paying; structure decides how much is exposed at any moment. No payment method in the world protects you from paying the wrong person, so when a supplier proposes an arrangement, ask two questions: am I certain who receives this money, and how much is at risk if everything after this point goes wrong?

The five red flags hiding in payment instructions

Most supplier payment fraud follows a small set of patterns.

Red flag · What it looks like · What it really means

  • 100% payment upfront: New supplier demands full payment before production · No real factory needs this; either distress or fiction
  • Personal account: Beneficiary is an individual, not a company · You paid a person, not a counterparty; no contract, no recovery path
  • Account switch: Quote from Company A, payment instructions to Company B · Sometimes a genuine group structure, more often order laundering or fraud
  • Rush discount: "Pay everything today and I lock the price" · Real price locks are written into the PI; urgency that collapses your verification window is a tell
  • Mid-order change: Production underway, new crisis, balance now please · A supplier monetizing a crisis by reordering your payment terms

Standard practice for a first order with a real manufacturer is a deposit, typically around 30%, with the balance due against documents or inspection. A supplier who cannot accept any staged payment from a new overseas buyer is telling you something about their own viability.

The account switch deserves one careful distinction. Some genuine trading groups route payments through a related export company, and that arrangement is verifiable: the relationship should appear in the company's registration, and the supplier should explain it in writing without changing the story. If the explanation shifts between messages, treat it as fraud.

How the "bank account changed" email scam actually works

This is the scam that catches experienced buyers, not just beginners. The supplier is real. The relationship is real. The invoice is real. Then an email arrives, inside the existing thread, with new bank details. Everything looks legitimate because most of it is legitimate.

The FBI classifies this as business email compromise (BEC), and its own guidance describes the mechanism: criminals impersonate a vendor or hijack a real email account and redirect wire transfers to overseas bank accounts. Per the FBI's IC3, BEC schemes have cost victims billions of dollars in fraud losses over the last five years. It works in China sourcing for structural reasons: buyers expect to wire large sums to foreign accounts, time zones delay voice verification, and a finance department sending banking details from a new address does not feel strange until it is too late.

There are two routes in. Sometimes the supplier's actual mailbox is compromised, so the email arrives from the genuine address. Sometimes the attacker registers a lookalike domain, swapping a single letter or adding a suffix. Either way, the telling detail is the same: the only thing that changed is where the money goes.

The defense is one habit: never accept new payment instructions from email alone. When account details change, or when they first arrive, verify through a second channel. Call the supplier's listed phone number, message a known contact on another platform, or confirm through a channel established before the transaction. The FBI's advice for exactly this scenario is to use secondary channels to verify requests for changes in account information. Keep the supplier's verified phone number in a file that predates the transaction, because an attacker who controls the thread controls the phone numbers inside it. Dial the number from your own records, not the signature block of the email that announced the change.

The beneficiary check: verify the account before you wire

Before the first wire of any relationship, run this twenty-minute check. The entity on the contract, the license, the bank account, and the storefront you talk to must all be the same party.

Match the names. The account name on the proforma invoice should read exactly like the registered company name on the business license. Not close, not an abbreviation, not the parent company or the "export office." Exact. Ask for a scan of the business license and compare it character by character.

Reject personal accounts outright. A company account is non-negotiable for a production payment. If the beneficiary is an individual, stop.

Verify the bank details themselves. Check that the SWIFT code matches the named bank and branch. Ask the supplier for a bank-issued account confirmation; legitimate suppliers produce these routinely. If the account sits in a different city or country from the factory, ask for a written explanation and check whether it appears in the company's registration.

Verify through an independent channel. Message the supplier on a second platform, or call, confirming the exact account number and beneficiary name you intend to pay. This is the control that defeats the account-switch scam, because the attacker usually controls only the email.

Send a test payment. Before wiring the deposit to a new supplier, send a nominal amount first and confirm receipt by phone. The wire fee stings a little; for a five-figure deposit, it is cheap insurance that the account number you typed is the account they control.

Re-verify before every transfer, not just the first. Relationships change, suppliers change banks, and a compromised mailbox can wait months before sending altered instructions.

Deposit and balance practices that keep your exposure small

Verification answers who gets paid. Structure answers how much is at risk. The standard that real Chinese manufacturers already work with is a deposit that triggers production plus a balance released against documents, not dates.

The workhorse arrangement is a deposit of around 30%, paid after the proforma invoice is finalized and the account verified, with the balance due only after a passed third-party quality inspection and a copy of the bill of lading or forwarder receipt. Write the trigger into the PI: "balance payable after passed pre-shipment inspection and presentation of BL copy." Vague phrases like "balance before shipment" turn goods disputes into payment disputes.

Two timing details matter. First, book the inspection before you pay the deposit. The inspection date is leverage while you still hold the balance; once the money is gone, it is a favor. Second, define exactly which document triggers the balance. A passed QC report plus the bill of lading copy means the goods exist, passed your standards, and are in the shipper's hands. Nothing looser should move the larger payment.

For orders involving tooling or custom molds, stage further: roughly 30% against the tooling agreement with mold ownership written as yours, 40% against approval of a physical first article, and 30% after passed QC plus the shipping documents. The first article is the cheapest moment to discover the mold is wrong. After full payment, every defect becomes a negotiation you conduct from a weak position.

Where escrow-type protection fits in

When buying through Alibaba, Trade Assurance is the most practical protection available. Your payment is held by the platform and released only when you confirm receipt of conforming goods, with a dispute mechanism if the shipment is wrong or never arrives. It is not magic: the dispute process works slowly, and it arbitrates what was shipped, not what you wished was shipped. Specify quality standards in the order contract before relying on it.

PayPal fills a narrower niche. Buyer protection and instant arrival make it fine for samples and tooling deposits, but fees punish scale and most formal factories will not accept it for production orders.

For large first orders, typically above $50,000, an irrevocable letter of credit remains the strongest instrument. The bank guarantees payment against presentation of specified shipping documents, so the supplier is paid only for proving it shipped what was agreed. The friction is real: bank fees, document scrutiny where one discrepancy can delay payment, and paperwork many small factories cannot handle. For a large order with an unfamiliar supplier, the friction is the point.

Note what Trade Assurance, PayPal, and L/C share: they all assume you are paying the right party. Escrow protects you from the supplier misbehaving. It does not protect you from paying an impostor. Run the beneficiary check first, regardless of instrument.

What to do if you suspect fraud

Decide the sequence now, while you are calm, because panic causes the delay that kills recovery.

Hour one: call your bank. Ask for the fraud or wire department and request a recall or hold on the transfer. Wires can sometimes be recalled, but only while the funds are still in the receiving account, and criminals move them fast. Ask your bank to contact the receiving bank. Then file a report at the FBI's Internet Crime Complaint Center, ic3.gov, regardless of the amount. Speed matters more than anything else you do after.

Preserve everything. Save the full email headers of the fraudulent message, the original proforma invoice, the wire confirmation, and every chat record. Do not keep negotiating inside the email thread that may be compromised; if the mailbox was hijacked, the attacker is reading your panic. Switch to a phone number or contact you verified independently.

Then use the paper trail. Send a formal demand letter to the entity named on your proforma invoice. If the supplier is a still-operating Chinese company, a complaint to SAMR, the market regulator, carries weight: it lands on the company's public record, and Chinese companies take that seriously. For meaningful amounts, engage a local lawyer.

Be honest about expectations. Full recovery after a completed fraudulent wire is the exception. It depends on timing, the payment method, and whether the funds are still available. That is precisely the argument for everything above: the cheapest moment to stop payment fraud is before the money moves, and the second cheapest is the hour after you notice.

How a sourcing agent fits into payment safety

Most of the practices above share a bottleneck: they require a person on the ground in China. Verifying a business license means reading Chinese registration records. Verifying a bank account means calling a finance department that may not speak English. Inspecting goods before the balance is released means standing in the factory. An agent's value in payments is not handling your money. It is doing the verification you cannot do from a keyboard.

In practice, the agent confirms the supplier's registration and export history before you engage, cross-checks the beneficiary name against the license before every wire, and releases the balance only after a passed inspection they commissioned. CN Ally works this way: supplier verification, factory audits, and QC inspections feed into a single payment-safe workflow. If you want payment terms structured around real documents before you commit to an order, email hi@cnally.com.

An agent is a layer of competence, not magic: for a first order with a new supplier, its price is small next to the deposit it protects.

Your payment-safety routine

Run this before your first order and before every large release.

Before the first wire:

  • Business license obtained and name matched exactly to the PI and the bank account
  • Beneficiary is a company account, not a personal account
  • Bank details verified through an independent channel, not just email
  • PI signed with explicit balance triggers (passed QC + shipping documents), not vague dates
  • Inspection booked before the deposit is paid

Before the balance wire:

  • Account details re-verified; any change since the deposit re-confirmed by phone
  • Passed inspection report in hand, goods verified against your specifications
  • Bill of lading copy or forwarder receipt received
  • Amount matched to the PI, with no new line items that appeared by email

If anything feels wrong at any stage: stop the payment, verify through an independent channel, and only then decide whether to proceed. A delayed payment costs a few days. A wrong one costs the entire amount.

Frequently asked questions

What is the safest way to pay a Chinese supplier?

A bank wire to a verified company account, structured as a deposit of around 30% plus a balance released after a passed quality inspection and shipping documents. On Alibaba, Trade Assurance adds platform escrow; for large first orders above roughly $50,000, an irrevocable letter of credit is the strongest instrument.

Is it safe to pay a Chinese supplier by bank transfer?

Yes, provided the account is verified first. Wires are safe and traceable; the risk is paying the wrong account. Confirm the beneficiary name matches the supplier's registered company exactly, never pay a personal account, and verify details through an independent channel before wiring.

Can I get my money back if a Chinese supplier scams me?

Possibly, but only with immediate action. Call your bank's fraud department within hours to request a recall, file a report at ic3.gov, and preserve all evidence. Recovery depends on whether the funds are still in the receiving account. Full recovery after the money has been moved onward is rare.

Should I ever pay a Chinese supplier 100% upfront?

No, not for a first order. Standard practice is a deposit with the balance tied to inspection and shipping documents. A new supplier demanding full payment upfront is one of the strongest fraud indicators in China sourcing.

How do I verify a Chinese supplier's bank account?

Match the account name exactly against the business license and the proforma invoice, confirm the SWIFT code belongs to the named bank, ask for a bank-issued account confirmation, and re-confirm the details by phone or a second platform before wiring.

What is the "bank account changed" email scam?

A fraud in which criminals, through a compromised or lookalike email address, send altered payment instructions inside a genuine-looking thread so your wire goes to their account. The FBI classifies it as business email compromise. The defense: never accept changed payment instructions from email alone; always re-verify through an independent channel.

Need help sourcing this kind of product?

Our team handles supplier verification, QC inspections, and logistics every day.

Get a Free Quote

Ready to source smarter from China?

Tell us what you want to source. We'll reply with vetted factory options and pricing within 24 hours — free, no obligation.