Chinese Supplier Changed Bank Account

Why last-minute account changes require verification

A payment-detail change alters where the buyer's money goes, even if the product and amount are unchanged. Last-minute timing can reduce the chance that finance staff perform normal checks.

Treat the change as a new approval event. Stop the transfer until the identity, authority and commercial reason are independently confirmed.

Legitimate reasons an account may change

A supplier may change banks, currency accounts, export entities, corporate structure or payment providers. A mainland factory may also move overseas sales to an established Hong Kong affiliate.

Legitimate reasons should produce consistent documentation. Ask when the change became effective, which legal entity owns the new account and why the original order documents must change.

Email-account compromise and invoice interception risk

Business email compromise can use a spoofed domain or a genuinely compromised supplier mailbox. The attacker may study a real order and insert changed wiring instructions at the expected payment time.

The FBI Business Email Compromise guidance warns that messages can appear to come from a known source. A familiar thread, correct product detail or real invoice number is therefore not enough.

Do not verify through the same email thread alone

If the mailbox or thread is compromised, asking for confirmation in that thread only reaches the same attacker. Do not use a new phone number, link or contact supplied in the change message.

Open an older order record, contract or verified company page and use a contact method established before the change.

Independently contact a previously known person

Call a person you have dealt with before and ask them to state the old and new beneficiary names, bank countries and reason for the change. For a material transfer, involve another known manager or finance contact.

Record the date, person, number used and questions answered. Independent confirmation is stronger when the channel was not introduced by the change request.

Compare old and new beneficiary details

Use the bank-account name mismatch guide when the entities differ.

Request signed company confirmation

Ask for a bank-change letter identifying the supplier, order, old beneficiary, new beneficiary, effective date, reason and authorized signatory. Request the appropriate company stamp where used.

A letter can also be forged, so compare it with official records and confirm it through the independent contact. Documentation supports the trail; it does not replace verification.

Review the revised PI or contract

The revised order document should state the new beneficiary and explain whether payment to it satisfies the buyer's obligation to the contracting supplier. Check that product, amount, currency and other terms were not changed unintentionally.

Keep the earlier version. Do not accept a standalone bank-detail image that leaves the original PI pointing to another account.

Confirm company relationships

If the new account belongs to an affiliate, Hong Kong company, trader or payment provider, identify each legal entity and its role. Request registration and relationship evidence suitable for the transaction.

Verify the Chinese supplier through the business licence guide and document who remains responsible for delivery, rework, refund and warranty.

Small test payment limitations

A test transfer may confirm that the account accepts funds, but it does not prove that the account belongs to the supplier, that the supplier controls it or that the main payment will be safe.

Attackers can acknowledge a small payment to build confidence. Complete the same identity and authority checks regardless of transfer size.

What to save as evidence

• Original and revised payment messages with full sender details
• Old and new PI or contract versions
• Old and new beneficiary and bank-country details
• Signed and stamped change confirmation
• Business records for each involved entity
• Notes from independent calls or meetings
• Internal approval and reviewer identity
• Bank transfer confirmation if payment is ultimately approved

Store evidence outside the supplier email account or marketplace chat so it remains available if access changes.

Step-by-step account-change checklist

Follow the same sequence for deposits and final balances. Do not shorten the process because production or pickup is urgent.

High-risk warning signs

• Urgent last-minute change before deposit or final balance
• New bank country with no documented company structure
• Personal account or unrelated third party
• Changed or lookalike email domain
• Refusal to provide company registration or authorization
• Pressure to bypass normal finance approval
• Several account changes or split payments
• Explanation cannot be confirmed by a previously known person

Describe these as high-risk inconsistencies, not proof of fraud. Hold payment until independently confirmed.

What to do when the explanation is unclear

Do not pay while a material inconsistency remains unresolved. Ask for a clean PI, verified company relationship and independent confirmation. Escalate to your bank, legal adviser or qualified local professional as appropriate.

If money has already been sent and diversion is suspected, contact your financial institution immediately and follow the reporting guidance in your jurisdiction. Preserve all communications.