China Company Due Diligence Checklist: A Practical Template for KYB

Before onboarding a company from China Mainland, it is not enough to collect a business license and confirm that a company with a similar English name exists. Your team needs to identify the exact legal entity, understand who owns or controls it, review relevant risks and document why the relationship is acceptable.

This China company due diligence checklist provides a practical KYB template for compliance, onboarding, procurement and risk teams. Use it for customers, suppliers, merchants or other counterparties, adjusting the depth of review to the relationship and applicable requirements.

Quick Answer: What Should a China Company Due Diligence Checklist Cover?

Start with the exact Chinese legal name and Unified Social Credit Code (USCC). Then verify registration status, ownership, beneficial owners, representatives, business activities and relevant risk records. Compare the findings with the proposed transaction and document outstanding issues before making a decision.

A registered company is not automatically an approved counterparty. Company identity, ownership, operating capability and financial crime risk are different questions and require different evidence.

What Is China Company Due Diligence?

China company due diligence is the process of collecting and assessing information about a China Mainland entity before and during a business relationship. KYB, or Know Your Business, focuses on understanding the business, its ownership and control, the people acting for it, and the risks associated with the relationship.

A small domestic supplier, a high-volume merchant and a complex cross-border corporate group will not require identical review. Define the purpose, exposure, jurisdictions and required approval level before choosing the checks.

China Company Due Diligence Checklist

1. Identify the Exact Legal Entity

Obtain the company's full Chinese legal name and 18-character USCC. Record any English name or trading name separately and verify that it refers to the same entity. A website, marketplace storefront or group brand may not be the legal contracting party.

Compare the name and USCC on the license with the company record and the proposed contract. A different name is not automatically fraud: it may reflect a former name or a different group company. Resolve the difference before proceeding.

2. Check Current Registration Status

Review the company's current registered status using the National Enterprise Credit Information Publicity System (GSXT) or another suitable source. Record the original Chinese status, source and date; translations may differ across providers.

Active registration, cancellation and revocation are not interchangeable. An abnormal operations listing is a separate regulatory indicator, not a company registration status. Check whether an abnormal listing is current or historical and why it occurred.

3. Compare the Business License with Company Records

Review the license image and compare the name, USCC, legal representative and other relevant fields with the available company record. A document can be outdated, altered or misused even if the named company exists. Keep document-quality issues separate from company-record mismatches.

For a document-led onboarding workflow, explore the CN eKYB API, which supports business-license OCR and company-record verification. An API result is an input to review, not a substitute for your approval policy.

4. Review Registered Details and Changes

Record the establishment date, registered address, legal form, registered capital and business scope. Check relevant historical changes in company name, address, representative and shareholders where available.

Registered capital is not the same as verified cash on hand or proof of financial strength. An old incorporation date alone does not establish that a business has relevant operational experience.

5. Identify Shareholders and Ultimate Beneficial Owners

Map direct shareholders and, where appropriate, investigate corporate shareholders through the ownership chain. Identify the natural persons who ultimately own or control the company under the rules applicable to your organization and jurisdiction. Consider control through arrangements other than share ownership.

Document ownership percentages, intermediate companies, sources, dates and gaps. Public information may be incomplete or delayed. Do not present an unresolved ownership chain as proof that no beneficial owner exists. The FATF guidance on beneficial ownership of legal persons provides a useful risk-based reference.

6. Verify the Legal Representative and Authority

Confirm the registered legal representative and identify the person who signs the agreement or opens the account. The legal representative, beneficial owner and day-to-day contact may be different people.

If someone else acts for the company, obtain appropriate evidence of authority, such as a documented authorization, and check it against your policy. A company chop or signature should not be treated as self-authenticating.

7. Understand the Business and Operating Footprint

Compare the company's declared activities with its website, products, customers and expected transaction pattern. Check the registered address and establish whether a separate office, factory or warehouse is connected to the entity.

Registered business scope is useful context but does not by itself prove manufacturing capability, product compliance or actual operations. Where material, use independent inspection, additional documents or direct verification.

8. Review Annual Reports and Public Disclosures

Check available GSXT annual reports and compare reported information over time. The reports can provide historical context, but company-reported information should not automatically be treated as independently audited.

China's enterprise information disclosure rules provide for annual reporting and identify circumstances in which an entity may be listed for abnormal operations. Investigate the specific reason, period and any subsequent remediation.

9. Investigate Legal and Regulatory Records

Review available litigation, judgments, enforcement, administrative penalties and other relevant records. Establish the entity's role, the date, subject matter, amount where available, and whether a matter remains unresolved.

One lawsuit or penalty does not automatically establish misconduct or make a company unsuitable. Repeated similar disputes, material enforcement activity or unexplained recent actions may justify deeper review. Absence of a search result is not proof that no proceedings exist.

10. Screen Sanctions, PEPs and Adverse Media

Screen the company and relevant owners, controllers and representatives against the lists and sources appropriate to your jurisdiction and risk policy. Consider sanctions, politically exposed person (PEP) exposure and adverse media as separate categories.

Investigate potential hits using identifiers and source context. A name match is not necessarily a true match, and a clear name search does not resolve every ownership-based or transaction-specific restriction. QCC AML Screening can support a wider screening workflow.

11. Check Licenses, Certifications and Payment Details

Where the activity is regulated, confirm the relevant permits, their holder, scope, issuing body and validity. A business license does not replace a sector-specific permit or a product certification.

Compare the contracting entity with the invoice and payment beneficiary. A different beneficiary, including an offshore affiliate, is not automatically improper, but the relationship and authorization should be understood and independently confirmed before payment.

12. Assess the Relationship and Set a Review Schedule

Bring the evidence together with the expected activity: transaction purpose, countries, value, payment route and anticipated volume. Record whether the relationship fits the company's profile and identify unresolved questions.

Assign a risk level and an approver according to your policy. Establish a periodic review date and event-based triggers such as ownership changes, new sanctions exposure, material enforcement or changes in payment instructions.

Practical China KYB Review Template

Copy the following template into your own onboarding form or case-management system. Mark each item as verified, discrepancy identified, pending or not applicable, and record the evidence and review date.

Company and Relationship

• Chinese legal name and USCC:
• English or trading name, if applicable:
• Registration status, source and date checked:
• Purpose of relationship, products or services, countries and expected transaction volume:
• Contracting entity and proposed payment beneficiary:

Ownership, People and Operations

• Direct shareholders and ownership percentages:
• Beneficial owners and other relevant controllers; ownership-chain gaps:
• Legal representative, authorized signatory and evidence of authority:
• Registered address, operating location and verification evidence:
• Business activities and applicable licenses:

Risk Review and Decision

• Annual reports, abnormal operations and significant changes:
• Litigation, enforcement and regulatory findings, including outcome or status:
• Sanctions, PEP and adverse media screening: subjects, sources, date and alert disposition:
• Unresolved discrepancies, information gaps and compensating controls:
• Risk rating and rationale:
• Decision: approve, approve with conditions, escalate, or decline:
• Reviewer, approver, decision date and next review date or trigger:

Use only the information necessary for the review and retain evidence in accordance with your privacy, security and retention policies.

Where to Find China Company Information

GSXT is an official source for publicly disclosed enterprise information. Search by Chinese name or USCC and check the relevant registration, disclosure and risk sections. Availability, access requirements and the amount of information displayed can vary.

Supplement public information with company-provided documents, relevant official regulators, court or enforcement sources where accessible, and independent checks. A commercial provider can help organize records and ownership relationships, but source coverage, update times and limitations should still be assessed.

For more on the official registry, see the China business registry search guide.

When Should You Escalate a China Company for Enhanced Due Diligence?

Escalate when the potential impact or uncertainty exceeds the limits of your standard process. Examples include:

• The USCC, company name or contract entity cannot be reconciled.
• Ownership is opaque, changes are unexplained or a controlling person cannot be identified.
• A potential sanctions match or ownership-based restriction remains unresolved.
• Significant enforcement, recurring disputes or material regulatory findings require context.
• The business model, payment route or transaction value is inconsistent with the stated purpose.
• A required license or signatory authorization cannot be verified.

Escalation is a review decision, not a finding of wrongdoing. Obtain additional evidence, apply the relevant policy and record the final rationale.

How Often Should a China Company Be Reviewed?

There is no single review interval suitable for every relationship. Set a schedule based on applicable obligations and risk, then supplement it with event-triggered checks. A low-risk, low-volume relationship may require a different review cadence from a complex ownership structure or high-value cross-border activity.

Monitoring can help identify relevant changes, but alerts still need investigation. Record what changed, when it became known, the decision and who approved it. QCC Ongoing Monitor supports continuing review of company changes.

Frequently Asked Questions

Is a business license enough for China company due diligence?

No. It is an important identity document, but it does not by itself establish beneficial ownership, operating capability, sanctions exposure or the authority of the person you deal with.

Can I search a Chinese company using its English name?

An English name can help identify candidates, but it may be translated inconsistently or shared with a brand. Confirm the exact Chinese legal name and USCC before completing your review.

Does an abnormal operations listing mean a company has been deregistered?

No. An abnormal operations listing and registration status are separate. Review the listing's reason and current status as well as the company's registered status.

Does a shareholder list always identify the beneficial owner?

No. Shareholders can be companies or nominees, and control can exist through other means. Further ownership and control analysis may be necessary.

Can one checklist satisfy every KYB requirement?

No. Applicable obligations and appropriate checks depend on your business, jurisdiction, relationship and risk. Adapt this template to your internal policy and obtain specialist advice where needed.

Build a More Complete China KYB Review

A practical China company due diligence checklist connects verified identity to ownership, people, business activity and transaction risk. The decision should show both what was checked and what remains unresolved.

QCC can support your workflow through KYC and KYB verification, company reports, beneficial ownership analysis, AML screening and ongoing monitoring. Explore the services to build a review process suited to your counterparties and risk policy.