A supplier you have been negotiating with in good faith sends bank details, and the beneficiary is a person — or a company whose name does not match the one on the quote. Sometimes there is a mundane explanation: a small factory routing through its owner, a Hong Kong receiving entity, a trading arm with a different registered name. Sometimes the email account has been taken over and the details belong to a thief. The two situations look identical in an inbox, and the difference is the whole order value. This guide covers why the request happens in Chinese trade specifically, the checks that separate the survivable reasons from the fatal one, and how paying the verified company through evidence-gated milestones removes the guesswork.
The negotiation went well, the sample was right, and then the invoice arrives with bank details that stop you: the beneficiary is a person's name, not the company's. Or it is a company you have never heard of, in Hong Kong, with no obvious relation to the factory you chose. Everything else about the deal is unchanged. Whether you send that wire is now the single most important decision in the order.
Why this happens in Chinese trade at all
The request is common enough that it cannot all be fraud, and it isn't. Three legitimate patterns produce it.
Small factories sometimes collect through the owner's personal account, because moving money in and out of a company account brings administration and tax consequences they prefer to avoid. That choice sits between them and their authorities; the part that concerns you is that a payment to an individual makes your trade harder to evidence later.
Larger exporters often receive through a related company in Hong Kong — a trading arm holding foreign currency outside the mainland's controls. The name mismatch here is structural, not evasive, and half of Chinese export trade runs this way.
And some suppliers genuinely operate under two names: the manufacturing entity and the sales entity, registered separately, with the quote on one letterhead and the bank account under the other.
The reason it should still stop you cold
The fourth pattern produces the same email: the supplier's mailbox has been compromised, and the "updated" bank details belong to the attacker. This is the standard business email compromise, and it is aimed precisely at the moment you are expecting to pay. The message arrives in the real thread, from the real address, often mid-conversation. The classic versions carry an urgent reason — the company account is "under audit", "frozen for tax review", "being changed" — and a personal or unfamiliar beneficiary.
Nothing inside the email can prove which pattern you are in, because in the fraud case the email itself is the compromised artefact. That is the whole difficulty: the survivable reasons and the fatal one are indistinguishable on the page.
The checks that actually separate them
Verify through a channel the email cannot have touched. Call the number from the supplier's website or your earlier records — not from the email signature — or video call your contact and have them read the account details back. A real supplier with a real Hong Kong arm will confirm without friction; they field this question weekly.
Match the beneficiary to a registered entity. For a mainland company, ask for their business licence and check the registered name against the beneficiary. For a Hong Kong receiving company, the Companies Registry is searchable; a genuine trading arm usually shares directors or an obvious history with the factory. A beneficiary that matches no entity anyone will name is your answer.
Put it in the contract. If the receiving entity differs from the manufacturer, name both, and state that payment to the named account discharges your obligation to the manufacturer. A supplier who resists connecting the two names on paper is telling you the connection may not survive scrutiny.
And treat any mid-order change of details as hostile until proven otherwise. Bank accounts do occasionally change; thieves rely on that. The verification is the same — out-of-band, against records you already held — and it is covered alongside the other schemes in how to avoid supplier fraud.
If the explanation is the small-factory one — the owner's personal account, for tax reasons — the fraud checks may all pass and the commercial problem remains: your payment trail points at an individual, your VAT and customs paperwork gets harder, and any later dispute starts from "you didn't even pay the company". It is reasonable to make a company account a condition of the order. Suppliers who want the business find one.
Where a payment structure removes the guesswork
Every check above is a manual defence run under time pressure, usually with a production slot at stake. A payment structure can carry some of that weight instead.
Tranchio structures a cross-border order into milestones. You commit the whole order value up front, and each tranche is released only against agreed evidence — a signed purchase order, an inspection report, a bill of lading — together with your approval. The payout destination is agreed when the order is funded and cannot be quietly swapped mid-order by whoever controls an inbox: changing it requires the supplier to propose and you to accept, with both destinations shown side by side. Tranchio is not a bank and does not hold your money. It gates each release against the evidence and keeps a tamper-evident record of what was approved and when. Payment execution is handled by a licensed provider, which moves the funds at the point a milestone is cleared. That payment execution goes live at launch; no provider is engaged yet and no funds move through the platform today.
For China orders this pairs naturally with the Hong Kong to China corridor, where the receiving- entity question is part of the corridor's ordinary furniture. The supplier receives every tranche in full and pays nothing; fees fall on the buyer, with the schedule on the pricing page.
Ahead of the licensed provider going live, access is invite-only. The habit to take now costs nothing: the beneficiary name is part of the deal, not an administrative detail — verify it out-of-band, tie it to a registered entity, and treat every change as a decision, never as an update.