How to Verify an Indian Supplier — The Complete Due-Diligence Playbook for US Buyers

The single most expensive mistake a US buyer can make sourcing from India is wiring a 30% advance to a factory that turns out to be a middleman, a shell entity, or a real factory operating well below the capacity it claimed on WhatsApp. Every year we take on US-buyer engagements that begin with a $30,000-$120,000 loss on a first Indian order to an un-verified factory. In every case, five hours of due-diligence work at the outset would have prevented it. This is the exact protocol we run on every new factory added to our network — it is public because the base checks are things a US buyer can and should do independently.

The protocol is organised into five layers: (1) legal-entity verification, (2) financial-health verification, (3) operational-capacity verification, (4) social-compliance verification, and (5) supervised sample round. Each layer surfaces a different failure mode. A supplier can pass legal-entity checks and still be a shell; can pass legal + financial checks and still lack capacity; can pass all four and still fail an ethical audit. All five run in parallel on a real programme; on average the protocol takes 5-7 working days.

Layer 1: Legal-entity verification

The first layer costs nothing and is entirely public-record. Its purpose is to establish that the supplier is a real, legally-constituted, tax-registered Indian business, not a trader or freelance broker operating from a coworking address. Skip this and every subsequent layer is meaningless.

GST registration

Every Indian business with turnover above ₹40 lakh (₹20 lakh for services, ₹10 lakh for special-category states) must be registered under the Goods and Services Tax (GST) regime. GST registration produces a 15-character GSTIN. Cross-check the GSTIN on the Government of India GST portal (gst.gov.in → Search Taxpayer → Search by GSTIN/UIN). The public record shows: legal name, trade name, constitution of business (Proprietorship / Partnership / LLP / Private Limited / Public Limited), date of registration, principal place of business (with the actual pin-code and address), taxpayer status (Active / Cancelled / Suspended), and the last-filed return date.

Three specific things to flag. First, taxpayer status: if it is anything other than 'Active' the engagement stops there. Second, last-filed return date: if the supplier has not filed GST returns in the last three months they are either dormant, in financial distress, or non-compliant — all reasons to pause. Third, the principal place of business address should match the factory address the supplier gave you. If it doesn't, the supplier is trading from one address and manufacturing at another (or, more commonly, is a trader rebadging someone else's factory).

PAN and Company Master Data (MCA)

If the supplier is a Private Limited or LLP entity, the Companies Act 2013 requires them to file annual accounts and a director filing on the Ministry of Corporate Affairs (MCA21) portal at mca.gov.in. Search Company Master Data by CIN or company name. Public record shows: date of incorporation, paid-up capital, authorised capital, active status, list of current and past directors with their DIN (Director Identification Number), registered address, last annual-filing date, and (with a paid ₹100 request) a director's DIN-linked list of every other Indian company they are a director of.

The director cross-reference is the single most useful piece of the entire MCA record. If your supplier's director appears as a director of 6, 8 or 12 other companies — several with matching addresses — you are looking at a trader network, not an integrated factory. If a company was incorporated 8 months ago with paid-up capital of ₹10,000 you are looking at a shell. Legitimate 20-year manufacturer directors typically appear on 1-3 companies (the operating entity, an export-house entity, sometimes a holding entity).

For non-corporate entities (Proprietorship / Partnership), the PAN card matches the trade name declared on GST. Compare the PAN name to the invoice header, the letterhead and the bank account beneficiary name. Discrepancies here are the single most common indicator of a factory-broker relationship where the invoice is issued by an entity different from the entity manufacturing the goods.

IEC — Import Export Code

Any Indian entity exporting goods requires an Import Export Code (IEC) issued by the Directorate General of Foreign Trade (DGFT). IEC is a 10-digit code linked to the entity's PAN. Verify at dgft.gov.in → Services → IEC → View Your IEC. Public record confirms: IEC status (Active / De-activated), branch details, and RCMC (Registration Cum Membership Certificate) associations with EPCH (Export Promotion Council for Handicrafts), Powerloom / Cotton / Wool / Silk / Textiles Export Promotion Councils, and other product-category export councils.

If a supplier claims to export directly but has no IEC — or has an IEC in de-activated status — they are exporting via a third-party export house. Not a disqualifying red flag on its own, but it means your PO ships under someone else's IEC and your commercial documents (bill of lading, invoice, packing list, certificate of origin) will name that export house, not your supplier. Adjust your compliance stack accordingly.

Layer 2: Financial-health verification

Legal existence does not equal financial viability. A GST-registered Private Limited factory with 45 workers can still be in financial distress and go silent halfway through your 90-day production cycle, leaving you without goods and without the deposit. Two checks matter here.

Bank reference cross-check

Ask the supplier for their primary bank's name, branch, and the beneficiary account name. Send a formal Bank Reference request (a one-page letter, on your company letterhead, addressed to the branch manager, asking for confirmation that the named account has been in operation for a stated number of years and is in good standing). Every Indian bank has a standardised bank-reference response format; it takes 5-10 working days. This confirms: the account exists, the beneficiary name matches, the account has been operational (usually banks confirm 3+ or 5+ years), and there are no reported irregularities.

Additionally verify that the supplier's bank account beneficiary name matches the GST-registered legal name. If the supplier is 'ABC Exports Pvt Ltd' on GST and the bank account is in the personal name of the director, you are being asked to wire to a personal account — a specific compliance-and-tax-avoidance red flag that international buyers should refuse. Wire to registered corporate accounts only.

Trade references

Ask the supplier for two contactable trade references — either overseas buyers they have shipped to in the last 24 months, or shipping-line / freight-forwarder relationships. Contact both references directly (not via the supplier). The specific questions we ask: 'How many shipments did they do for you in the last 12 months?' 'Any late-delivery issues?' 'Any quality-rejection issues?' 'Would you re-order from them today?' If a supplier cannot produce two contactable references — or produces references who describe a single small order two years ago — pause the engagement. Real export-active factories produce a list of references without hesitation.

Layer 3: Operational-capacity verification

Legal + financial + trade references pass, but the factory turns out to be 6 people in a rented shed sub-contracting your order out to three unverified sub-factories. This is the single most common capacity-verification failure. Two anchors here.

Physical factory visit

A physical factory walk-through is the only reliable capacity check. Not a video call, not photos, not a WhatsApp status. Ask the supplier to book a factory visit; observe (1) the physical square footage against the claimed unit-throughput math, (2) the machinery inventory against the process steps required by the SKU, (3) worker headcount at the time of the visit against payroll-supported headcount claimed by the supplier, (4) inventory on the floor (raw material, in-progress, finished goods, dispatch) — factories that show only clean-empty floors are typically sub-contracting.

If a physical visit is not possible in the first-order timeframe, commission a third-party factory audit via SGS India, Intertek India, Bureau Veritas India, TÜV SÜD India or QIMA. Standard audit report cost: $350-$700 depending on factory size and audit scope. Turnaround: 5-10 working days. The report includes photos, floor-space measurements, machinery inventory, headcount and a capacity opinion. This is the fastest scalable substitute for a physical visit.

Capacity math cross-check

Ask the supplier for a signed capacity declaration: monthly production capacity for your specific SKU at your specific spec, and current book of committed capacity for the next 90 days. Cross-check against the physical audit — a 2,000 sq ft factory with 12 workers producing (per the supplier) 30,000 units/month of hand-finished brass décor is arithmetically implausible. The single most reliable capacity red flag is a supplier who claims capacity numbers that do not divide sensibly into their claimed workforce size.

Layer 4: Social-compliance verification

Any US retail programme selling into Walmart, Target, Costco, Home Depot, Bed Bath & Beyond (or their equivalents in specialty and DTC) requires social-compliance certification. The three certification schemes that matter for India: amfori BSCI (European origin, widely accepted globally), Sedex SMETA (UK origin, widely accepted), and SA8000 (highest standard, less common). Ask the supplier for their current audit report, verify the certification body (Intertek / SGS / Bureau Veritas / TÜV SÜD / STR), verify the audit date (must be within 12 months for BSCI; 24 months for Sedex), and verify the audit rating (BSCI rating A/B/C/D/E — accept only A or B; Sedex SMETA — accept only reports with zero critical non-conformities).

If a supplier has no current social-compliance audit but the operational and capacity checks pass, an initial audit can be commissioned (Intertek / SGS / Bureau Veritas) at $700-$1,500 turnaround 10-15 working days. Bringing a promising un-audited factory into audit compliance is a legitimate strategy — factories rarely refuse an audit their potential US buyer is paying for.

For garden and handicraft SKUs additionally verify: GoodWeave certification (child-labour-free rugs and carpets), Fairtrade certification if the buyer's programme requires it, FSC (Forest Stewardship Council) for wood-based products, GOTS (Global Organic Textile Standard) for organic-cotton textile, and GRS (Global Recycle Standard) for recycled-content SKUs. Every certification has a public search facility on the certification body's website — always verify the certificate number, don't trust a PDF supplied by the factory.

Layer 5: Supervised sample round

Layers 1-4 confirm what a supplier is on paper. The sample round confirms what they actually produce and how they behave commercially. On every new-factory engagement we run three sample-round diagnostics.

Sample fee behaviour

Ask the supplier to quote a sample fee. Legitimate export factories quote a sample fee (typically $30-$120 per SKU for lighting/décor, higher for furniture) that covers material + labour + one round of iteration. Factories that offer 'free samples' either (a) are absorbing the cost against expected bulk-order margin, which shifts the risk profile of the engagement, or (b) are traders passing off someone else's samples as their own. Sample-fee behaviour is a surprisingly reliable proxy for legitimate manufacturer versus middleman.

Iteration behaviour

Send the first sample back with two clearly-specified changes (one dimensional, one finish). Legitimate factories with in-house sample departments turn the second round in 2-3 weeks. Sub-contracting brokers take 4-6+ weeks because they cannot control their downstream factory's queue. Iteration turnaround is the single fastest way to tell manufacturer from middleman.

Documentation behaviour

On the second-round approval, ask for the sample technical file — bill of materials, dimensional drawing, finish specification, packaging drawing. Legitimate factories produce this file within 5-10 working days. Middlemen produce nothing (because they don't have it themselves) or produce a PDF that visibly came from a different factory's file. Documentation depth is the final structural indicator of manufacturer-vs-middleman.

The 7-day protocol

Layers 1-2 (legal + financial) run in parallel Days 1-5. Layer 3 (capacity) runs Days 3-10 with a third-party audit. Layer 4 (social compliance) runs Days 5-15 depending on whether a current report exists. Layer 5 (sample round) runs Days 5-45 depending on category complexity. The parallelisation is why an experienced buyer-side sourcing team can complete supplier verification in 3-4 weeks on a new factory versus 8-12 weeks in-house.

The three questions to ask before wiring the first advance

First: is the GST-registered legal name identical to the invoice header, the letterhead and the beneficiary bank account? A discrepancy on any one of these three is a hard stop.

Second: does the physical audit (or factory visit) confirm the production capacity claimed in the capacity declaration? Arithmetically implausible capacity is a hard stop.

Third: has the supplier accepted the buyer's NDA, the no-factory-kickback clause and the design-IP clause? Suppliers who redline these three clauses are telling you they have plans for your design outside your programme.

Any single hard-stop reason is enough to pause the engagement. Two of the three and the supplier is not viable. The verification protocol above sounds burdensome; it is not — it is a fraction of the cost of a bad first order.

How Asia Sourcing runs this on your behalf

Every factory in our 1,000+ vetted network has completed all five layers of verification. Layer 1 (legal-entity) and Layer 2 (financial-health) are re-run annually. Layer 3 (capacity) is re-run every 6 months on production-active factories. Layer 4 (social-compliance) is re-run at each audit-renewal cycle. Layer 5 (sample round) is re-run at every new-SKU launch. This is what a buyer-side sourcing agent's due-diligence stack looks like — it is what separates a shortlist you can wire against from a shortlist you cannot.

US buyers who want the verification protocol run for them on a shortlist of 3-5 factories in a target cluster can engage this as a one-off — pricing is transparent, it is not billed as a percentage of the eventual PO, and the report is yours whether or not you proceed to a programme.

See /india-supplier-verification-for-usa for the US-focused verification service page. See /services/factory-verification-india for the general service. Related reads: /ask for the FAQ answers; /trends/india-sourcing-agent-vs-buying-agent on choosing the engagement model; /trends/complete-guide-sourcing-products-india for the end-to-end sourcing playbook; /clusters for cluster-specific manufacturing context.

Programme scenarios — three common verification profiles

Scenario A — first-time US importer, single-cluster brief

Boston-based specialty retailer, first India programme, 6 SKUs of ceramic tableware from Khurja cluster, target $28,000 first-order value. Verification stack: legal-entity + financial-health run in parallel Days 1-5, third-party audit at Intertek Delhi Days 3-10 ($480), no existing BSCI certification so audit commissioned Days 5-15 ($750), sample-round Days 5-30. Total verification cost $1,600 or 5.7% of first-order value; drops to 0.7% amortised over a 5-programme lifecycle. Verification cleared at Day 30, PO issued Day 35. First container ship Day 145.

Scenario B — repeat US buyer, adding a factory to the network

New York DTC brand with $850K annual India programme adds a Firozabad glass factory for a new hand-blown-lighting SKU. Verification stack collapses because the buyer has infrastructure — GST + MCA + IEC checks run Day 1, factory audit via existing Intertek relationship Days 2-8, BSCI verification via existing Sedex-portal access Day 2, sample round Days 5-25. Total incremental verification cost $520. Because the buyer already has a US-side compliance stack, the new-factory addition takes 4 weeks not 10-12.

Scenario C — hospitality FF&E procurement, multi-factory single project

Marriott Autograph 220-key property, 22 factories across 6 clusters (Jodhpur, Moradabad, Kashmir, Panipat, Delhi NCR, Jaipur). Verification stack runs across 22 parallel tracks — full legal-entity check on every factory (approximately $200 per factory in Intertek audit fees when bundled), BSCI or Sedex verification on every factory (some already current, some commissioned), sample-round on every specified SKU (approximately $75-$150 per SKU × 380 SKUs). Total verification stack cost approximately $28,000-$36,000 across the programme — 1.2-1.5% of the $2.4M programme value. Fully-verified factory list delivered week 6 of the design-development sprint.

Cost & timeline breakdown

Aggregated cost of the 5-layer protocol on a first-programme engagement: legal-entity checks $0 (public record); financial-health checks $80-$180 (bank-reference postage + international courier + attorney review); third-party audit $350-$700 (Intertek/SGS/BV factory audit); social-compliance audit $700-$1,500 (only if factory lacks current BSCI/Sedex); sample-round development fee $150-$500 across shortlisted factories. Total range on a first-programme with no existing certifications $1,280-$2,880; typical mid-programme $1,600. Timeline aggregated: 3-5 working days for parallel layers 1-2, 5-10 working days for layer 3 (audit), 10-15 working days for layer 4 (if commissioned), 4-6 weeks for layer 5 (sample-round). Total 5-8 weeks — front-loaded before PO, protecting the eventual programme value.

Worked example — a real 5-day verification

A US home-décor buyer briefs us on a Moradabad brass factory recommended by a trade-fair contact. Day 1: pull GSTIN from the letterhead; verify on the GST portal — active, filed returns through last quarter, principal place of business Moradabad Cluster Zone. Pull PAN; verify director list on MCA — Private Limited, 12 years old, two directors, each named as director of one other holding entity. Green so far. Day 2: request bank reference. Send the standard bank-reference letter to the branch manager at ICICI Moradabad. Ask supplier for two contactable trade references — one UK buyer, one Australian buyer. Day 3: contact both references — 'Yes, shipped 8 containers over 3 years, no quality issues, would re-order.' Green. Day 4: commission Intertek factory audit — $520, 4-day turnaround. Audit report arrives Day 8 — 6,500 sq ft facility, 42 workers on payroll, machinery inventory consistent with capacity declaration, in-progress inventory on floor, BSCI B-rating current. Green. Days 5-30 sample round on 4 SKUs — first article delivered Day 22, one iteration to lock finish. Programme starts against the verified factory. Cost of verification protocol: $520 audit + $140 bank charges + $200 courier / admin ≈ $860. Cost of the alternative (a bad first order): $28,000.

Frequently asked — Indian supplier verification

How long does the full 5-layer verification actually take?

5-10 working days for layers 1-4 running in parallel; 30-45 days for the sample-round layer overlapping. On a first-programme timeline, expect the verification to complete within the first 6 weeks of engagement — well before PO stage.

Can I run this verification on my own, without a sourcing agent?

Yes for layers 1-2 (all public record). Yes for layer 3 with a third-party audit at Intertek / SGS / BV. Yes for layer 5 (sample round) if you have design-and-QC capability. Layer 4 (social compliance) is easier via an agent because agent relationships with certification bodies produce faster turnaround. Independent US buyers do run this protocol on their own — the process is public and repeatable.

What percentage of Indian export factories pass all five layers?

In our vetted network experience, approximately 60-70% of factories that pass initial screening pass all five layers. Approximately 20-25% fail on capacity verification (layer 3). Approximately 10-15% fail on social-compliance (layer 4). Fewer than 5% fail on legal-entity (layer 1) — those factories rarely reach initial screening.

Do I re-run this protocol on repeat orders?

Not fully. Legal + financial are refreshed annually. Social compliance re-verified at each audit-renewal cycle. Sample rounds re-run at each new-SKU launch. Capacity re-verified every 6 months on production-active factories.

What does the protocol miss?

It cannot detect a factory that passes all five layers today and then experiences a management change or financial reversal 8 months later. The mitigation is quarterly relationship touch-points and quality data (defect rates, on-time-delivery) tracked programme-over-programme.

Send a written brief with your category, target retail price, MOQ and required certifications to hello@asiasourcing.co.in. See /usa for the full US-buyer operational overview, /ask for the AI-search FAQ knowledge base, and /start-a-project to attach CAD or reference images directly.