Blog
Two telephone handsets beside a card cast one solid and one fragmented shadow.

September 18, 20265 min readАдминистратор

The payment company is real. Is the person messaging you?

A practical sequence for checking the entity, contact person and payment instructions behind an attractive offer.

The company exists. Its licence appears in a register. The logo matches. All of that can be true while the offer comes from an impostor. Before a deposit, integration or document upload, verify a chain of distinct claims: the organisation, representative, specific service and recipient of funds. One authentic link does not authenticate the others.

Check the entity and the connection separately

A real company can be impersonated. The UK Financial Conduct Authority warns that clone firms may copy genuine names, registration details and websites while changing contact information. Its guidance is UK-specific, but the distinction between a genuine entity and a genuine contact is useful more widely. FCA guidance on clone firms.

Create a short verification record containing the exact legal name, registration reference, official website, contact channel and proposed contractual role. If the service claims regulated status, check the appropriate official register and the relevant permissions. A corporate registration entry and a financial-service permission answer different questions.

Then establish the relationship independently. Navigate to the official source yourself rather than using a link inside the unsolicited message. Ask the organisation to confirm the person, offer and payment instructions. A second account controlled by the same unknown contact is not an independent check.

Read the destination, not just the display name

In the hypothetical offer, the sender’s display name matches the company. The actual email domain contains an extra word, and the payment beneficiary is unrelated. Neither detail should be explained away by the quality of the presentation.

Ask for clarification through the verified organisation’s channel. Do not send identity documents, login information or a test deposit while that question remains unresolved. A trial payment can lose real money and does not establish that later transactions will be safe.

The FBI recommends examining addresses and URLs carefully and independently confirming payment requests, particularly changes to account details. Urgency is a reason for caution, not a reason to skip the check. FBI business-email-compromise guidance.

Separate commercial security from a recruitment demand

A commercial contract may describe a fee or reserve with a defined purpose and release conditions. That is different from an unknown recruiter asking a candidate to pay to obtain work or unlock earnings. The US Federal Trade Commission explicitly warns against paying to get a job or to receive supposed earnings. FTC guidance on job scams.

Do not let familiar payment-industry vocabulary blur the distinction. A label such as “activation balance” does not explain who owns the funds, why they are required, when they can be returned or which agreement governs them. A word like “refundable” is a promise that needs a verified counterparty and clear terms.

For a proposed business payment, write down the purpose, amount, currency, beneficiary, contractual basis and release conditions. Ask who can approve the commitment internally. If any critical element changes, reopen the check instead of treating the earlier verification as permanent permission.

A two-person pause that actually works

In our example, the commercial lead wants to proceed quickly, while finance notices the beneficiary mismatch. The useful response is a temporary stop with one specific task: confirm the destination through the established official contact. The second reviewer should inspect the evidence, not merely click an approval button beside the first person’s conclusion.

Keep the result simple: verified and suitable for the agreed next step; unresolved and waiting for clarification; or rejected because the explanation failed. Verification reduces uncertainty. It does not guarantee future performance or make every contractual condition acceptable.

Verify the permission actually being claimed

A register number answers a limited question. The record may distinguish legal entity, trading name, permitted activities, current status and territory. Match these to the proposed service and contracting party. If interpreting the entry requires expertise you do not have, obtain a competent assessment rather than relying on a familiar regulator logo.

Prepare a verification record that finance can use: where the official contact came from, when the representative’s authority was confirmed, which offer version was discussed and who should receive payment. A sales presentation and registry screenshot may be supporting documents, but they do not replace an independent verification route.

Substitution can happen at the end

Suppose negotiations went well and the contract was reviewed. An hour before payment, an updated invoice arrives with new bank details. Verify the change through a previously confirmed channel. Do not authenticate the email using the phone number supplied in that same email. The second reviewer should see the difference between the old and new beneficiary and the evidence supporting it.

Urgency, a small initial amount and a promise of easy reimbursement do not reduce the need for verification. Internally, make it possible to pause without punishing someone for disrupting a commercial deadline. Otherwise the most careful checklist will lose to we already agreed this. If the offer involves personal accounts, concealed payment purposes or access to another person’s bank account, involve the responsible compliance specialists before taking further action.

If money or information has already been sent

Stop further transfers and contact your bank or payment provider immediately through an official channel. Preserve the conversation, transaction references and original instructions. If account access may be affected, follow the provider’s account-security process. Use the relevant local reporting route, and be wary of strangers promising recovery for another upfront payment.

A credible counterparty can tolerate a careful question. The most valuable habit is making verification a normal part of the process before urgency, familiarity or a small initial amount makes the decision feel harmless.

Sources

  1. 1.fca.org.uk/consumers/clone-firms-individuals
  2. 2.fbi.gov/how-we-can-help-you/common-frauds-and-scams/business-email-compromise
  3. 3.consumer.ftc.gov/articles/job-scams

Comments · 0

No comments yet — be the first.

Log in · log in to leave a comment.