Supplier Due Diligence in the Philippines: Registry Checks, Site Visits and Payment Safeguards

First establish what kind of entity you are dealing with

Before asking for anything, work out which of three registers holds your counterparty, because the entity type changes both where you verify and who is liable. Two things give it away: the suffix on the legal name (Inc., Corp. or OPC means an SEC-registered juridical person) and whether the BIR Form 2303 shows a corporation or an individual. A letterhead saying Inc. with a 2303 in a person's name means you are dealing with a person, not a company.

• Corporations, including the One Person Corporation and partnerships, register with the SEC under the Revised Corporation Code (RA 11232, effective February 2019).
• Sole proprietorships register a business name with the DTI; each registration runs 5 years and liability rests on the individual.
• Cooperatives register with the CDA and are common in coconut, seaweed and mango supply chains, usually exporting through a processor.
• Unregistered intermediaries with a wallet QR code and a social media page are not suppliers; they are exposure.

Layer one: three free lookups, thirty minutes

Layer one is online and largely free, takes 5 to 10 minutes per company, and typically eliminates three to four of every ten names on a long list. Step-by-step screens are in the SEC company search walkthrough.

On the SEC side, check existence and status. Section 177 of the Revised Corporation Code sets the annual reporting duty for the General Information Sheet (GIS) and audited financial statements (AFS); a company that misses filings three times within five years is placed under delinquent status and can ultimately have its registration revoked. Delinquent does not mean fake, but it does mean loose governance and probably missing paperwork, so lower the deposit. To see directors, shareholders and paid-up capital you request certified copies of the GIS and AFS through the SEC Express System, a paid service whose fees and turnaround follow SEC's current schedule.

On the DTI side, check validity and territorial scope. A business name registered only at barangay or city scope is a poor fit for a national supply or export contract. On the BIR side, read the registered activities. Form 2303 lists the tax types and the line of business; a self-declared manufacturer registered only for trading is almost certainly a trader.

Layer two: the eight documents, and the 48-hour test

Send the list once and give 48 hours. A supplier that returns six or more within two days is usually a real operating business; one that explains, delays and drips documents out is not. Individual documents can be faked, so the value is in cross-checking: the legal name, registration number and address must match across all eight. Two spellings or two addresses is a question that needs a written answer.

A practical shortcut on permits: verify the number in the issuing agency's own portal rather than trusting the scan. Food and cosmetics establishments and products appear in the FDA verification portal, coconut exporters in the Philippine Coconut Authority registry, and food facilities shipping to China in the registration system of the General Administration of Customs of China. A name you can find on an official list beats any PDF a supplier emails you.

Addresses and premises: the trader that looks like a factory

Three addresses have to line up: the SEC registered address, the address on BIR Form 2303 and the address on the Mayor's Permit, plus whatever you can see of the premises on a map or on site. A mismatch is not automatically wrong, since a registered office and a plant are often in different cities, but the supplier must be able to say which is which and where the plant holds its own local permit. If that answer is vague, brokerage is being packaged as manufacturing.

Four things you can do without travelling. Put the permit address into a map and street view and see whether the frontage is an office tower, a shophouse or an industrial shed. Look at roof area and truck access on satellite imagery against the monthly capacity claimed. Check whether the company is an economic zone locator, since PEZA registrants hold a PEZA certificate and sit inside a controlled gate, and zone directories are public. Ask for the lease or title copy and confirm the tenant is the same legal entity.

The line-of-business field is a cheap lie detector. A Mayor's Permit usually states manufacturing, trading, services or retail, and Form 2303 lists registered activities. A genuine OEM factory will say manufacturing in at least one of them. If both say trading only and the supplier still insists it runs three production lines, book the site visit; what to look at on the day is in the factory inspection guide.

When the Mayor's Permit and the BIR 2303 both say trading only and the supplier still claims three production lines, a broker has been dressed up as a manufacturer — you negotiate factory prices and receive resold goods with resold accountability. Let us align the three addresses and the activity fields before you book a plant visit →

Layer three: half a day on site, five looks and three questions

Video first, travel second. Ask for one continuous live walk from the gate to the finished goods store, no cuts and no edits; twenty minutes exposes most of the problems. A polished corporate film, close-ups only, or a refusal to film the signboard and the time clock each count as a red flag. If the video passes, schedule the visit at two companies a day, plant in the morning, warehouse and container loading after lunch.

Then ask three questions in person, because the answers carry more information than the file: what was the most recent customer rejection and how was it handled; what was the longest lead time in the last peak season; who else runs on this line right now. Vagueness or irritation tells you what the documents will not. Bring three things: your specification sheet, the last quotation, and your inspection standard, plus an interpreter who knows the trade vocabulary.

Seven checks before the money moves

These seven are the last gate. No written answer, no payment; and check seven has no exceptions at all.

On check seven: the most common loss in Philippine sourcing is not quality, it is business email compromise. An attacker sits inside the email thread for weeks and sends one message at the payment milestone announcing new bank details. Three hard rules follow. Verify any change of account by calling a phone number you already had, never the one in the new email. Send a small first transfer and have the beneficiary name confirmed. Never pay a personal account or a personal e-wallet. Payment channels and the paperwork on the buyer side are in how to pay a Philippine supplier from China.

Twelve red flags, and how to count them

Use these as a counter rather than a verdict: one red flag means cutting the deposit and adding inspection, three means stopping.

• Payment accepted only into a personal account or personal e-wallet.
• Beneficiary name differs from the registered name, explained away as the owner's spouse handling finance.
• Refusal to provide BIR Form 2303, or a TIN with no certificate behind it.
• A prior-year Mayor's Permit with no current one available.
• SEC status delinquent or revoked with no account of remediation.
• Claims to manufacture while both the permit and 2303 say trading only.
• A quotation far below the market accompanied by a demand for full prepayment.
• A free email domain unrelated to the company name.
• Pressure tactics: expiring prices, capacity about to be taken by another buyer.
• Bank details or the invoicing entity changing right before payment.
• A bill of lading naming a different shipper with no clear agency relationship.
• Refusal to do a live video walk, offering retouched photos and trade fair pictures instead.

Positive signals are worth as much. Suppliers that volunteer the GIS and AFS, disclose which steps are subcontracted, accept third-party inspection as a payment condition, and quote lead times as a range rather than a promise are usually the ones that perform. A supplier willing to name its own uncertainty tends to beat one that agrees to everything.

Three tiers: match the depth to the exposure

Set the depth from two variables: how much of your cash flow one order represents, and how dependent you will be on this supplier. A first trial order does not need strategic-supplier treatment, but layer one and the seven pre-payment checks are non-negotiable at every tier.

Bring in professionals whenever the contract is large, contains exclusivity, allocates tooling or intellectual property, needs security, or requires you to set up a Philippine entity to sign. How to design the trial order and tie inspection to payment is in samples and trial orders in the Philippines; if you intend to delegate finding, auditing and following up to a third party, read how to choose a sourcing agent in the Philippines first.

Yixing works this sequence on the ground: cross-checking public registry information and document consistency, and arranging factory and producing-region visits with interpreters, see sourcing visits and market entry support. If you have decided to sign and import through your own Philippine entity, the corporate filings, tax registration and annual reporting side is at corporate compliance and document management.

This article is general information and not legal, tax or investment advice. Registry portals, document requirements and processing times cited here come from SEC, DTI, BIR, Bureau of Customs and FDA public materials and differ by office and period, so follow current official announcements. Consult a licensed lawyer or accountant on your own case.