How to Check if a Company Is Legit: A Step-by-Step Guide (2026)

Before you take a job, pay an invoice, sign a supplier contract, or buy from an online store, one question decides everything: is this company real? Fraudsters now register shell entities, clone genuine websites, and generate convincing documents with AI, so a business that looks legitimate is easier to fake than ever.

This guide shows you exactly how to check if a company is legit, whether you are a consumer protecting your money or a business vetting a partner. It covers the free checks anyone can run, the official registries to search, the warning signs of a scam, and when to escalate to an automated Know Your Business (KYB) check.

Quick answer: how to check if a company is legit

To verify that a company is legit, run these checks in order:

• Confirm registration. Search an official government business registry to confirm the company legally exists.
• Match the details. Check that the address, contact information, and trading name all line up.
• Verify licenses. For regulated sectors (finance, healthcare, moving, crypto), confirm authorization with the relevant regulator.
• Read independent reviews. Look beyond the company website for third-party reviews and complaints.
• Scan for red flags. No operating history, opaque ownership, or pressure to pay fast are warning signs.
• Escalate if you are a business. Onboarding a vendor or partner calls for a full KYB check with ownership and sanctions screening.

Business vs consumer: which checks apply to you

The core question is the same, but the stakes and the depth differ. Use the split below to decide how far to go.

Steps 1 to 6 below apply to everyone. Step 7 (automated KYB) is where businesses go further, because manual checks do not scale across many partners or satisfy regulatory record-keeping.

How to check if a company is legit in 7 steps

Step 1: Confirm the company is officially registered

A legitimate business is registered with a government authority. This is the single most reliable signal, and most registries are free to search.

• Search the relevant national or state business registry (see the country table below) for the exact legal name.
• Confirm the registration number, incorporation date, and current status (active, dissolved, or struck off).
• Watch for companies registered in one jurisdiction but operating in another, which can be legitimate but warrants a closer look.

Step 2: Verify the address and contact details

Fake companies often hide behind incomplete or untraceable contact information.

• Check that a physical business address exists and is not only a PO box or a virtual office.
• Call the listed phone number and confirm a person or business line answers, not a personal mobile only.
• Be cautious when the only contact is a free email account (gmail, outlook) rather than a company domain.

Step 3: Confirm licenses and regulatory authorization

Regulated industries must appear on official registers. If a company claims to offer regulated services and is not listed, treat that as a serious warning.

• Financial firms: check the regulator’s register (for example the FCA FS Register in the UK, or FINRA BrokerCheck for US brokers).
• Movers, contractors, and healthcare providers: confirm the license or bond with the state or national licensing body.
• Crypto and payment providers: verify registration before sending any funds or personal data.

Step 4: Review the website and digital footprint

A real company builds a consistent presence over time. A thin or brand-new footprint is a flag.

• Look for HTTPS and a valid certificate (the padlock in the browser), a clear privacy policy, and terms of service.
• Check the domain age with a WHOIS lookup. A domain registered days ago paired with big claims is suspicious.
• Scan for poor grammar, stock-only imagery, missing company details, and a mismatch between the domain and the brand name.

Step 5: Read independent reviews and third-party ratings

Do not rely on testimonials hosted on the company’s own site.

• Check Google, Trustpilot, the Better Business Bureau (BBB), and industry-specific review sites.
• Assess whether review volume and timing match the company’s stated history, and whether the content is specific rather than generic.
• Search the company name alongside terms like scam, complaint, or refund to surface problems quickly.

Step 6: Check ownership, financials, and legal history

For higher-value decisions, look under the surface.

• Identify the people behind the business, including directors and ultimate beneficial owners (UBOs).
• Review filed accounts or financial statements where public registries provide them.
• Search for lawsuits, enforcement actions, or sanctions listings tied to the company or its owners.

Step 7: Run an automated KYB check (for businesses)

If you are onboarding partners at any scale, manual checks are slow and hard to audit. A Know Your Business (KYB) check automates registration, ownership, and screening in one workflow, with a record trail for compliance.

• Verify registration against official registries across many jurisdictions at once.
• Identify UBOs and screen the business and its owners against sanctions, watchlists, and PEP data.
• Apply ongoing monitoring so status changes and new risks are flagged after onboarding, not just at the start.

How to check if a company is legally registered (official registries by country)

Government registries are the most authoritative way to confirm a company legally exists. Start with the country where the business is incorporated.

If a company cannot be found in any registry and offers no explanation, do not proceed until you can confirm its legal status through another reliable source.

How to verify an online store or website is legit

Online-only businesses need extra scrutiny because a professional-looking storefront can be built in hours.

• Confirm HTTPS, a real returns and refund policy, and visible company details in the footer or terms.
• Check the domain age and cross-check the brand on independent review platforms and social media.
• Be wary of prices far below market, payment only by wire, crypto, or gift card, and countdown-timer pressure tactics.
• Verify contact details resolve to the same registered company name, not an unrelated entity.

Red flags that a company is fake or a scam

Any single item below can be innocent. Several together mean stop and verify before you commit money or data.

• No verifiable business registration in any official registry.
• Address is only a PO box, a virtual office, or a residential address.
• Contact is limited to a mobile number or a free email account.
• Website is brand new, thin, or contains repeated grammar and spelling errors.
• No operating history and no public track record you can confirm.
• Reviews are all five-star, posted in a short window, or vague and generic.
• Pressure to pay quickly, especially by wire transfer, crypto, or gift card.
• The company refuses to share documentation when you ask for it.
• Payment details or bank name do not match the registered company.
• Guaranteed returns, unusually high profits, or offers that seem too good to be true.
• The domain name does not match the brand, or uses a slight misspelling of a known brand.
• Ownership is hidden, or the people behind the business cannot be identified.

Manual checks vs automated KYB verification

Manual checks are fine for a one-off decision. For businesses onboarding partners repeatedly, automated KYB is faster, broader, and auditable.

How Shufti verifies company legitimacy

Shufti helps businesses confirm that the companies they onboard are real, correctly registered, and free of hidden risk, without slowing down the process.

• Business verification (KYB): checks registration and legal status against official registries across 240+ countries.
• UBO identification: uncovers the individuals who ultimately own or control the business.
• AML and sanctions screening: screens the company and its owners against sanctions lists, watchlists, and PEP databases.
• Document verification: validates supporting company documents and flags manipulation.
• Ongoing monitoring: re-checks partners over time so new risks are caught after onboarding.