A supplier may look convincing on Facebook, Viber, WhatsApp, a trade fair, or a polished website — but in the Philippines, a “legitimate-looking” business is not the same as a legally registered and reliable supplier. Before you send a down payment, issue a purchase order, share sensitive documents, or sign a long-term supply agreement, you should verify the supplier’s legal identity, permits, tax registration, authority to transact, and track record. This guide explains how to check if a business is legitimate in the Philippines, what documents to ask for, which government offices to verify with, and the red flags that often appear before supplier fraud happens.

What “legitimate business” means in the Philippines

A legitimate supplier is not just someone who has products, a bank account, and a business page. For practical due diligence, you want to confirm at least four things:

Legal existence — the business is properly registered with the correct agency.
Authority to operate — it has the required local permit and, if applicable, special licenses.
Tax registration — it is registered with the Bureau of Internal Revenue (BIR) and can issue proper invoices.
Capacity and reliability — it can actually deliver the goods or services it is offering.

Different business types are verified differently:

Supplier type	Main registration agency	What to check
Sole proprietorship	DTI	Business name registration, owner’s identity, business scope
Corporation or partnership	SEC	SEC registration, latest General Information Sheet, status, authorized officers
Cooperative	CDA	Certificate of Registration, operating status, authority of officers
Foreign company doing business in the Philippines	SEC and other agencies	SEC license to do business, resident agent, local tax and permit registrations
Contractor	PCAB/CIAP	Valid PCAB license and classification
Food, drug, cosmetic, medical device supplier	FDA	License to Operate and product registrations, when applicable
Importer/exporter	BOC and other agencies	BOC accreditation/CPRS registration and import permits, when applicable
Government supplier	PhilGEPS	PhilGEPS registration, Platinum status if required, updated eligibility documents

The most common mistake is assuming that one document is enough. A DTI certificate, SEC certificate, or Facebook business page does not automatically mean the supplier is fully compliant, authorized for your transaction, or financially capable of delivering.

Legal basis: why supplier verification matters

Supplier verification is not just “being careful.” It directly affects contract enforceability, tax compliance, liability, and your ability to recover money if something goes wrong.

Under the Civil Code of the Philippines, a valid contract generally requires consent, object, and cause. Once a contract is perfected, Article 1159 provides that obligations arising from contracts have the force of law between the parties. If a supplier commits fraud, acts negligently, delays delivery, or violates its obligation, Article 1170 allows liability for damages.

In practical terms, this means your purchase order, supply agreement, quotation acceptance, email confirmation, or signed contract may become important evidence later. The clearer your documents are, the easier it is to prove what the supplier promised.

For corporations, the main law is Republic Act No. 11232 (2019), the Revised Corporation Code of the Philippines, available through the official Lawphil copy of RA 11232. Corporations and partnerships are registered with the Securities and Exchange Commission (SEC), and you can check or request company records through SEC systems such as SEC eSEARCH and related SEC online services.

For sole proprietorships, business name registration is handled through the Department of Trade and Industry (DTI) Business Name Registration System. DTI itself explains that a business name registration gives a business legal identity, but the business still needs a Business/Mayor’s Permit to actually operate. You can start with the DTI BNRS services page and the DTI BNRS FAQ.

For electronic transactions, Republic Act No. 8792 (2000), the Electronic Commerce Act, recognizes electronic documents and electronic signatures when properly authenticated. This is useful because many supplier transactions now happen by email, PDF quotation, online invoice, e-signature, messaging app, or digital purchase order. The law is available through the official Lawphil copy of RA 8792.

If a supplier deceives you into paying money through false pretenses, the facts may also raise possible criminal issues under Article 315 of the Revised Penal Code on estafa, depending on the evidence. The Revised Penal Code text is available through Lawphil’s copy of Act No. 3815.

Step-by-step guide to verify a supplier before paying

1. Ask for the supplier’s complete legal details

Before checking portals, ask for the supplier’s basic information in writing:

Registered business name
Trade name or store name, if different
Business type: sole proprietorship, corporation, partnership, cooperative, or foreign entity
SEC, DTI, CDA, or other registration number
BIR Tax Identification Number (TIN), if they are willing to provide it for contracting purposes
Registered business address
Warehouse, factory, or operating address, if different
Name and position of the person you are dealing with
Official email address and landline, not just a mobile number
Bank account name for payment
Copies of permits and licenses relevant to the transaction

The name on the quotation, invoice, contract, bank account, and government registrations should match or be clearly explained. For example, if the Facebook page says “ABC Packaging Supplies,” but the DTI certificate says “Juan Dela Cruz Trading,” the quotation should clearly state that ABC Packaging Supplies is the trade name of Juan Dela Cruz.

2. Check whether the business is DTI, SEC, or CDA registered

For sole proprietorships: check DTI

A sole proprietorship is owned by one person. The DTI business name certificate registers the business name, but it does not create a separate corporation. The owner remains the person behind the business.

Use the DTI BNRS Search to check whether the business name appears. Review:

Exact business name
Owner’s name, if shown or provided in the certificate
Territorial scope, such as barangay, city/municipality, regional, or national
Validity period
Business descriptor or nature of business

A DTI registration alone is not enough. DTI’s own FAQ states that a Business/Mayor’s Permit is still needed to operate. This matters because a supplier may have registered a name but never completed local permitting.

For corporations and partnerships: check SEC

Corporations, partnerships, and One Person Corporations are registered with the SEC. You may request or check company records using SEC eSEARCH or other official SEC portals. The SEC also operates eSPARC for company registration applications.

Ask for and compare:

SEC Certificate of Incorporation or Certificate of Registration
Articles of Incorporation or Articles of Partnership
Latest General Information Sheet (GIS)
Latest audited financial statements, if relevant to a large transaction
Board resolution or secretary’s certificate authorizing the person to sign
SEC status, especially if the company is delinquent, suspended, or revoked

A common red flag is a person using a corporation’s name but signing only in a personal capacity, or using a company that exists but is not clearly connected to the transaction.

For cooperatives: check CDA

Cooperatives are registered with the Cooperative Development Authority (CDA). CDA maintains a Cooperative Masterlist and provides registration services through its official website.

Ask for:

CDA Certificate of Registration
Articles of Cooperation and By-laws, if needed
Certificate of Compliance, when relevant
Board resolution authorizing the transaction
Valid ID and authority of the cooperative representative

A cooperative can be legitimate but still lack authority for a specific transaction if the person signing is not properly authorized.

3. Verify the Business/Mayor’s Permit with the LGU

The Business/Mayor’s Permit is issued by the city or municipality where the business operates, usually through the Business Permits and Licensing Office (BPLO).

Check:

Name of business
Registered address
Line of business
Permit year
Official receipt number
Whether the permit covers the branch, warehouse, or store you are dealing with

Business permits are usually renewed yearly. A supplier showing a permit from two years ago should be asked for the current permit or renewal receipt.

For high-value purchases, call or email the BPLO of the city or municipality shown on the permit. Some LGUs can confirm basic permit details, while others may require a written request or personal verification.

4. Check BIR registration and invoice capability

A legitimate supplier should be able to issue proper invoices or receipts. Ask for a copy of the BIR Certificate of Registration, commonly called BIR Form 2303, and check:

Registered name
TIN
Registered address
Tax type
Line of business
RDO or Revenue District Office
Whether the business is VAT or non-VAT, if relevant

The BIR’s official services include the Online Registration and Update System (ORUS), and BIR explains that the Certificate of Registration is issued to juridical persons upon compliance with registration requirements through its official registration services.

Be careful when a supplier says:

“We do not issue invoice, but we can give acknowledgment receipt.”
“Pay to my personal GCash only.”
“Invoice will follow after full payment.”
“We use another company’s invoice.”

Those are not automatically fraud, especially with microbusinesses, but they increase tax, accounting, and recovery risk.

5. Verify special licenses if the industry is regulated

Some suppliers need more than DTI, SEC, BIR, and LGU documents.

Supplier activity	Extra verification
Construction, fit-out, renovation, engineering works	Check PCAB license through the PCAB license verification portal
Food, drugs, cosmetics, medical devices, health products	Check FDA License to Operate and product authorization through the FDA eServices Portal
Importation	Check BOC accreditation or registration; BOC states that only accredited or registered importers can transact with BOC for import clearance through its BOC accreditation page
Government procurement	Check PhilGEPS registration and uploaded eligibility documents through PhilGEPS
Direct selling or multi-level marketing	Check DTI’s relevant systems, including the DTI Seal of Legitimacy Information System for covered businesses
Online selling or e-commerce	Check business registration and online merchant details; the Internet Transactions Act, RA 11967 (2023), applies to covered B2B and B2C internet transactions, available through Lawphil’s copy of RA 11967

If the product is safety-sensitive — such as medicine, supplements, cosmetics, bottled water, electrical equipment, construction materials, or food ingredients — do not rely only on the supplier’s assurance. Ask for the license number and verify it with the relevant agency.

6. Match the documents against the real-world business

Fraud often happens when documents are real but the person using them is not authorized.

Check consistency across:

Registered name
Business address
Email domain
Contact numbers
Bank account name
Delivery address
Warehouse location
Invoice header
Contract signatory
Official receipts
Purchase order acknowledgment

For a corporation, payment should ideally go to a bank account under the corporation’s name. If payment is to an individual, ask why and document the explanation. For a sole proprietorship, the owner’s personal name may appear because the business is not a separate juridical person.

7. Confirm the representative’s authority

The person chatting with you may be a sales agent, reseller, employee, broker, or impersonator.

For corporations, ask for:

Secretary’s certificate
Board resolution
Corporate ID
Official email confirmation from the company domain
Signed quotation on company letterhead
Direct confirmation from the company’s published phone number

For sole proprietorships, ask for:

Owner’s valid government ID
Authorization letter if a representative is transacting
Proof that the bank account belongs to the owner or business

For larger transactions, include a warranty in the contract that the signatory is duly authorized to bind the supplier.

8. Check reputation, litigation signals, and delivery history

Government registration proves existence, not reliability. A registered supplier can still fail to deliver.

Do practical checks:

Search the business name, owner name, and mobile number online.
Check reviews, but treat anonymous reviews carefully.
Ask for past clients and completed projects.
Request sample invoices, delivery receipts, and certificates of completion with sensitive data redacted.
Visit the office, warehouse, or store when the amount is substantial.
For imported goods, ask for import documents, product certificates, and customs release documents where appropriate.
For construction or technical work, check completed project photos, PCAB classification, and references.

For a high-value first transaction, consider starting with a smaller test order.

Documents to request before working with a Philippine supplier

Document	Why it matters	Watch out for
DTI Certificate, SEC Certificate, or CDA Certificate	Confirms legal registration	Name does not match quotation or invoice
Mayor’s/Business Permit	Confirms local authority to operate	Expired permit or different address
BIR Form 2303	Confirms tax registration	Refusal to issue invoice
Official quotation	Establishes price, specs, taxes, delivery terms	Vague product description
Secretary’s certificate or authorization letter	Confirms signatory authority	Agent cannot show written authority
Valid government ID of owner/representative	Helps confirm identity	ID name does not match documents
Special license, if applicable	Required for regulated industries	License expired or covers a different activity
Sample invoice and delivery receipt	Shows normal documentation process	“Invoice after full payment only”
Bank account proof	Confirms payee identity	Personal account for corporate supplier
Written contract or purchase order	Preserves remedies if there is a dispute	No delivery date, warranty, refund, or dispute clause

Practical timelines and bottlenecks

Verification step	Typical time needed	Common bottleneck
DTI BNRS search	Same day	Similar names causing confusion
SEC record search or document request	Same day to several days	Paid access, incomplete records, old GIS
CDA masterlist or regional confirmation	Same day to several days	Older lists or regional office referral
BPLO permit confirmation	Same day to a few working days	LGU requires written request or personal visit
BIR COR review	Same day if supplier provides copy	BIR may not freely confirm taxpayer details to third parties
PCAB license verification	Same day online	License may be expired, suspended, or only for a limited category
FDA authorization check	Same day to several days	Product and establishment authorization are different
Site visit or warehouse check	1–3 days locally	Fake address, shared office, or inaccessible warehouse
Reference checks	1–5 days	Supplier gives only friendly or unverifiable references

The biggest bottleneck is not usually government search. It is mismatched information: a different registered name, old permit, personal payment account, incomplete authority, or an address that cannot be verified.

Red flags before paying a supplier

Be extra careful when several of these appear together:

The supplier pressures you to pay immediately because “stocks are almost gone.”
The price is far below market without a clear reason.
The business refuses to provide registration documents.
The bank account is under a different person or company.
The supplier only uses a prepaid mobile number and free email address.
The address is a residential unit, virtual office, or unverified warehouse.
The business permit is expired or from a different city.
The invoice will allegedly be issued by another company.
The representative cannot show written authority.
They refuse video call, site visit, pickup, or third-party inspection.
They give inconsistent names across chat, quotation, invoice, and bank details.
They ask you to split payments across several personal accounts.
The documents look edited, blurry, cropped, or inconsistent in font and spacing.
They claim to be “SEC registered” but only show a DTI certificate, or vice versa.

One red flag does not always mean fraud. A small supplier may have imperfect paperwork. But if the supplier wants a large advance while refusing basic verification, the risk is high.

How to structure payment safely

For new suppliers, avoid paying 100% upfront unless the amount is small and the risk is acceptable.

Safer structures include:

Small test order first Use a low-value order to test quality, documentation, and delivery.
Milestone payments Pay partial amounts upon document submission, production, inspection, delivery, and acceptance.
Payment to registered account only Pay the account matching the registered business or owner.
Use purchase orders and written acceptance Clearly state quantity, specifications, price, taxes, delivery date, warranty, and penalties for delay.
Inspect before final payment For high-value goods, inspect at the warehouse, use a third-party inspector, or require delivery before balance payment.
Use escrow or documentary trade arrangements when appropriate For large import or cross-border transactions, consider bank-supported arrangements instead of direct full prepayment.

What to put in the supplier contract or purchase order

A simple written agreement can prevent many disputes. Include:

Full legal name of supplier
Registration number and address
Name and authority of signatory
Exact goods or services
Quantity, specifications, model numbers, and quality standards
Delivery date and place
Price, VAT or non-VAT treatment, and payment schedule
Required invoices and receipts
Inspection and rejection procedure
Warranty or replacement terms
Liquidated damages or penalties, if appropriate
Refund terms
Confidentiality and data protection obligations, if you will share customer or business data
Governing law and venue
Dispute resolution process

For electronic contracts and email approvals, keep the full thread, attachments, timestamps, payment confirmations, delivery records, and screenshots. Under the Electronic Commerce Act, electronic documents may have legal effect when properly authenticated.

Data privacy when asking for documents

Supplier verification often involves IDs, permits, bank details, signatures, and contact information. Handle these carefully.

The Data Privacy Act of 2012, RA 10173, protects personal information in government and private systems. The National Privacy Commission explains the law through its official Data Privacy Act page.

A practical rule is: ask only for documents reasonably needed for due diligence, keep them securely, limit access to people involved in the transaction, and do not post or forward IDs casually. If a supplier sends an ID, you may mark your stored copy “for supplier verification only” and keep it in a secure folder.

Special notes for foreigners dealing with Philippine suppliers

Foreign buyers often face extra difficulty because they cannot easily visit the supplier or verify local offices.

Before sending funds from abroad:

Check whether the supplier is Philippine-registered or only a foreign entity selling into the Philippines.
Ask for apostilled or authenticated documents if you must rely on foreign public documents in the Philippines.
Use written contracts with clear governing law, venue, and dispute resolution.
Confirm whether the person signing has authority under Philippine corporate documents.
Avoid paying to personal remittance accounts unless the supplier is clearly a sole proprietor and the owner matches the documents.
For large orders, use a local inspection agent, freight forwarder, lawyer, accountant, or trusted representative to verify the warehouse and documents.

The DFA uses an online apostille appointment system for Philippine documents through the DFA Apostille Application and Appointment System. Documents from countries that are parties to the Apostille Convention generally use apostille rather than embassy “red ribbon” authentication, while documents from non-apostille countries may need consular authentication.

What to do if you already paid and suspect the supplier is fake

Act quickly and preserve evidence.

Save all communications
- Chat messages
- Emails
- Quotations
- Payment receipts
- Bank transfer confirmations
- Delivery promises
- IDs and permits sent
- Screenshots of pages and posts
Send a written demand State the amount paid, promised delivery date, breach, and specific demand: delivery, refund, or replacement.
Contact the payment channel or bank Ask whether the transaction can be flagged, recalled, frozen, or documented for investigation. Success is not guaranteed, but early reporting helps.
Report to the relevant platform If the supplier used a marketplace, social media page, or e-commerce site, report the account with documents.
Check the proper legal route
- For a money claim of up to the current small claims threshold, the Supreme Court’s rules may allow a small claims case in first-level courts. The Supreme Court has announced that the small claims threshold is ₱1,000,000, with simplified procedures under the Rules on Expedited Procedures in First Level Courts, discussed in the Supreme Court announcement on expedited procedures.
- If there was deceit from the beginning, the facts may support a criminal complaint for estafa under Article 315 of the Revised Penal Code.
- If checks were issued and dishonored, other rules such as BP 22 may become relevant.
- If the supplier is regulated, report to the relevant agency: DTI, SEC, FDA, PCAB/CIAP, BOC, LGU, or PhilGEPS depending on the facts.
Avoid public accusations without evidence Public posts can create defamation or cyberlibel risk if statements are inaccurate or excessive. Stick to documented facts when reporting to authorities or platforms.

Frequently Asked Questions

How do I check if a business is registered in the Philippines?

Identify the business type first. Sole proprietorships are checked through DTI BNRS, corporations and partnerships through SEC records, and cooperatives through CDA. Then check the Mayor’s Permit with the LGU and the BIR Certificate of Registration from the supplier.

Is a DTI certificate enough to prove a supplier is legitimate?

No. A DTI business name registration gives legal identity to a sole proprietorship’s business name, but DTI itself states that a Business/Mayor’s Permit is still needed to actually operate. You should also check BIR registration, invoice capability, address, and delivery history.

How do I verify an SEC-registered company in the Philippines?

Ask for the SEC registration number, Certificate of Incorporation or Registration, Articles, latest GIS, and authority of the signatory. You can search or request documents through SEC systems such as SEC eSEARCH and compare the company name, address, officers, and status against the documents provided.

Can a supplier use a personal bank account?

Sometimes, especially for sole proprietorships, because the owner and business are not separate juridical persons. But for corporations and partnerships, payment to a personal account is a serious red flag unless there is a clear, written, and verified explanation. The safest practice is to pay only the registered business or verified owner.

What if the supplier is registered but has no Mayor’s Permit?

That means the supplier may have legal registration but may not be locally authorized to operate at that place of business. This is especially risky for warehouses, stores, manufacturing, food handling, construction, and regulated activities.

How can I verify a construction supplier or contractor?

Check the contractor’s PCAB license through the official PCAB license verification portal. Under RA 4566, as amended, contractors generally need a PCAB license before engaging in contracting business. Also check the license category, validity, classification, and whether the license covers the type and size of work.

How do I check if an online seller is a real business?

Ask for the registered legal name, DTI or SEC registration, Mayor’s Permit, BIR Form 2303, official invoice, and payment account matching the business. Check whether the same name appears across the website, social page, quotation, invoice, and bank details. For covered e-commerce transactions, RA 11967 also strengthens rules for online merchants and platforms.

Should I ask for the supplier’s BIR TIN?

For formal contracting and tax documentation, it is normal to request tax registration details, especially BIR Form 2303. Handle TINs and IDs carefully because they are personal or sensitive business information. Use them only for legitimate verification, accounting, and contracting purposes.

What is the safest way to pay a new supplier?

Use a small test order, milestone payments, payment to the registered account, clear purchase orders, inspection before final payment, and proper invoices. Avoid full upfront payment to an unverified supplier, especially if the bank account name does not match the business documents.

What can I do if a supplier took my money and disappeared?

Preserve all evidence, send a written demand, contact your bank or payment provider, report the account to the platform, and evaluate civil or criminal remedies. Depending on the amount and facts, you may consider small claims, a civil action, or a criminal complaint for estafa if there was deceit.

Key Takeaways

A legitimate supplier should have consistent registration, permit, tax, address, payment, and authorization details.
DTI, SEC, or CDA registration proves legal identity, but it does not by itself prove reliability or full authority to operate.
Always check the Mayor’s Permit, BIR registration, and special licenses for regulated industries.
Match the registered name against the quotation, invoice, contract, bank account, and person signing.
Avoid large upfront payments to first-time suppliers unless verification is complete and the risk is controlled.
Keep written contracts, purchase orders, invoices, receipts, chat logs, and delivery records.
For foreign or high-value transactions, use stricter verification, authenticated documents, inspection, and safer payment structures.