How to avoid supplier-payment fraud when importing from China

Importing from China usually goes smoothly, but the moment money has to leave your account for a stranger's bank in another country, the risk profile changes. Supplier-payment fraud is one of the most common ways East African importers lose real money, and it rarely looks like fraud while it is happening. This guide explains how the corridor is exploited, the checks that protect you, and what to do when something feels off.

Why this corridor attracts fraud

The Kenya-to-China payment route has three features fraudsters love. First, distance: you will probably never meet your supplier or recognise their voice, and everything happens over email, WeChat, or a sourcing platform. Second, speed pressure: shipping schedules and "the price is only good today" create constant urgency. Third, finality: once an RMB transfer clears into the wrong account, getting it back is slow, uncertain, and sometimes impossible.

Fraudsters rarely break anything technical; they exploit trust and habit. The good news is that the same things that make the corridor risky also make fraud detectable, because almost every scam depends on one of a few moves. Once you know them, you can spot them.

The three moves behind almost every scam

Most supplier-payment fraud in this corridor reduces to one of three patterns. Learn these and you will recognise the rest.

Impersonation

Someone pretends to be a supplier you trust, or a factory you are evaluating. They may register a lookalike email domain (swapping rn for m), copy a real company's catalogue, or hijack a genuine email thread and reply as your contact. The goods may not exist at all. The aim is to get a deposit or full payment sent before you realise the person you are talking to is not who they claim to be.

Account switching

This is the most dangerous pattern because it targets a relationship you have already vetted. You have ordered from this supplier before and everything is normal. Then, close to payment time, a message arrives: "Our usual account is under audit, please pay this new account instead." The new account is often in a different bank, sometimes a different name. The order and the supplier are real, but the payment instruction has been intercepted or spoofed, and the new account belongs to the fraudster. Treat every change of banking details as hostile until proven otherwise.

Advance-fee bait

Here the hook is an unusually good deal: deeply discounted stock, a "cancelled order" dumped cheap, or a shipment that needs only a small "release fee" up front. Each fee unlocks the next, and the goods never come. If you have to pay money to receive money or goods you have not yet seen, slow down hard.

Verify the supplier exists before you discuss money

Before any payment conversation, confirm you are dealing with a real, registered business. Do this for new suppliers, and redo it whenever something material changes.

• Ask for the full registered Chinese name (not just the English trading name) and the business licence number. The English name is often just marketing.
• Cross-check the registered name against the stated location and the name on any invoice. Many legitimate factories trade through a separate export company, which is fine, but you should see that relationship documented.
• Confirm the entity actually exports your product category, and confirm it through more than one channel: a working landline, a company-domain email (not a free Gmail or QQ address for a "factory"), and a verifiable address.

You do not need a private investigator, you need consistency. Fraud usually shows up as small contradictions between what you are told, what is on the paper, and what you can independently confirm. For larger orders, a low-cost third-party verification before you commit funds is money well spent.

Match the beneficiary to the invoice, every single time

This is the single most important check, and the one most people skip under pressure. The name on the bank account you are paying (the beneficiary) must match the company on the invoice.

• The beneficiary name should be the supplier's company, not a personal name and not an unrelated third party.
• The beneficiary's country should make sense. A supplier asking you to pay an account in an unrelated country, with no explanation, is a serious flag.
• The currency and amount should match the invoice. Watch for invoices that quietly change account details between the quotation and the final version.
• If the supplier insists payment go to an "agent" or a "personal account because the company account has a problem", stop. That sentence is account switching in plain sight.

When the beneficiary does not cleanly match the invoiced company, assume the instruction is compromised and make them prove otherwise first.

Treat sudden bank-detail changes as hostile

A change of banking details is the highest-risk event in the transaction. Build a fixed rule for it and never break the rule under pressure.

1. 1Do not act on the new details in the message that delivered them; assume that channel may be compromised.
2. 2Contact the supplier on a channel you trusted from before the change: a number you have used previously, or a contact you verified independently. Do not use the phone number or email signature in the change request itself, because fraudsters supply their own.
3. 3Ask a person at the supplier to confirm the new account details by voice. Read the numbers back, and confirm who controls the account and why it changed.
4. 4Only proceed once the change is confirmed through that independent channel, and keep a record of who confirmed it and when.

This one habit blocks most account-switching fraud: the fraudster controls the message but not your pre-existing relationship.

Resist urgency, because urgency is the weapon

Almost every successful scam includes a reason you must pay right now: the container is leaving, the price expires today, the factory needs the deposit before the holiday. A genuine business can almost always absorb a short delay for verification; a fraudster cannot, because delay is exactly what exposes them. Make it a rule: new urgency arriving together with a payment instruction is a reason to slow down, not speed up. Pressure plus a payment request is a pattern, not a coincidence.

Keep your documents, because paper is your defence

If something goes wrong, the difference between recovering funds and losing them often comes down to what you can produce. Keep a clean file for every order.

• The proforma and final invoice, with the beneficiary details visible.
• The purchase agreement or order confirmation, and the product specifications.
• The full message history where details were agreed, including any change requests.
• Your record of the independent verification you did before paying.

Good documents also speed up legitimate payments: a reviewer can confirm everything matches in one pass.

What to do the moment you spot a red flag

If something does not add up, treat it as a stop signal.

• Pause the payment. Do not send "just the deposit to be safe" while you investigate; a deposit to a fraudster is still gone.
• Re-verify the beneficiary against the invoice, and the supplier through a known channel, using the bank-detail-change steps above.
• If you cannot resolve the contradiction, do not pay. Walking away from a suspicious deal is far cheaper than chasing a lost transfer.

Why a human review step before payout protects you

Automated, instant transfers remove the one thing that catches fraud: a moment where a person looks at the details and asks whether they make sense. This is built into how Malipay works. Malipay does not hold your funds; a licensed partner settles the payment. Before any payout, a real person in Nairobi reviews the request and verifies the beneficiary against your documents. A mismatched account name or switched details is exactly what the review is there to catch before the money moves.

You also see the Rate of the Day before you commit, with a flat service fee and no hidden margin in the exchange rate, so you can check the full cost against your invoice up front. If a payment cannot proceed, there is a defined return-of-funds path rather than money disappearing into a queue. The safety does not cost you speed: once a request is reviewed, payment is typically sent within about five minutes.

Your pre-payment checklist

Run this before every transfer. It takes minutes and prevents losses that take months to chase.

• The supplier is a real, registered business, confirmed through more than one channel.
• The beneficiary name matches the company on the invoice; it is not a personal or unrelated third-party account.
• The beneficiary country and currency fit this supplier, and the amount and invoice number match.
• No bank details changed recently. If they did, I confirmed the change by voice on a channel I already trusted.
• There is no manufactured urgency pushing me to skip checks.
• I have saved the invoice, agreement, and message history for this order.

Frequently asked questions

What is the single most common way importers lose money in this corridor?

Account switching. The order and supplier are genuine, but a fraudster intercepts or spoofs the payment instruction and substitutes their own account, usually with an urgent excuse. Verifying any change of banking details through a known, independent channel stops most of it.

A supplier asked me to pay a personal account instead of the company account. Is that ever normal?

Treat it as a red flag. Legitimate exporters are paid into a company account that matches the invoiced business. Confirm any request to pay an individual, an "agent", or an unrelated third party directly with the supplier through a channel you already trust, and approach it with caution even then.

How does a human review help if the documents themselves could be fake?

Review does not rely on documents alone; it checks whether everything is consistent. A reviewer confirms the beneficiary matches the invoice, that details have not been switched, and that nothing contradicts what you supplied. Many scams fail at that check, because the fraudster controls the message but cannot make the account name match the real company.

Does adding a verification step mean my payment will be slow?

No. The review is done by a real person before payout, and once a request is reviewed, payment is typically sent within about five minutes. The check protects you without making a legitimate payment slow.

Before you send your next payment

Fraud in this corridor wins through speed, trust, and finality. You take those weapons away by slowing down on bank-detail changes, matching every beneficiary to its invoice, verifying suppliers independently, and refusing to be rushed. Build those habits once and they protect every order.

When you are ready to pay a Chinese supplier with a real person verifying the beneficiary before any money moves, start a request and check the Rate of the Day first.