How to Verify the Legal Entity Behind a Payment Provider

Ask for the full legal name, unique registration number and jurisdiction of incorporation. Compare those details with the website terms, draft agreement and invoice. Search the appropriate official corporate register yourself; an attachment supplied by a salesperson can be a useful lead, but it should lead to a record you can independently locate.

For a UK company, GOV.UK explains that public information includes the registered address, incorporation date, officers, previous names, insolvency information and document images. [1] These details help distinguish similarly named businesses and explain a genuine name change. Use the number as well as the name, and keep the date of your check.

Read the record in context. Companies House’s current guidance describes checks on filings and powers to enquire into suspected inaccuracies; it also explains limits to the information available. [2] Corporate registration helps establish the identity being claimed. It does not, by itself, establish permission to provide a particular financial service, authenticate the person contacting you or prove the business can meet your settlements.

A mismatch deserves a question rather than an immediate accusation. A trading name, former name or group relationship may explain it. Obtain the explanation and evidence before treating the names as interchangeable.

“Regulated” needs a subject and a scope. Which entity is regulated, by which authority, for which activity and in which territory? Ask the provider to identify the relevant record and explain how its role fits the service in your proposal. Then compare the claim with the official record.

In the UK, the FCA’s checking guidance distinguishes a firm’s status from the services it is permitted to provide. A firm may offer both regulated and unregulated services. For a payment or e-money agent, the guidance also directs users to check the principal and confirm which activities the agent is allowed to undertake. [3]

This gives a merchant useful questions, not a worldwide licensing test. A software gateway, an introducer and a business handling payment funds may have different roles. If the provider’s explanation depends on an exemption, an agency arrangement or cross-border permissions that you cannot assess, put that point to an appropriately qualified adviser. Do not convert a register entry into your own legal conclusion.

The FCA’s payment-provider guidance also notes that a brand can differ from the authorised or registered operating company and suggests checking the website footer or terms for the company name. [4] Follow that trail to the exact entity rather than stopping at the logo.

A US number can be useful without being the permission a merchant assumes it is. FinCEN’s MSB search is a federal registration information source under the Bank Secrecy Act. FinCEN expressly says it does not approve or endorse registered businesses, does not license them through that process, and does not vet the submitted information. It also warns against treating either listing or absence as a determination of legitimacy. [5]

A claim such as “FinCEN approved” therefore needs correcting before it enters your supplier assessment. Record what the source actually establishes: the registration information shown for that entity. Ask separately about any applicable state permissions and the role of other parties in the arrangement.

NMLS is another distinct system. Its policy guide explains that participating state agencies choose which authorities they manage there and that each legal entity has a unique company record, irrespective of its number of licensed jurisdictions or status. [6] An identifier alone does not answer whether a particular licence is current in a particular state. As a local example, the Texas Department of Banking directs users to NMLS Consumer Access to check whether a company is licensed to do business in Texas and to review past enforcement actions. [7]

These are named US examples. They do not establish that every processor requires the same registrations or that one state’s record supplies nationwide permission.

A genuine entity can be impersonated. The FCA warns that clone firms copy details from real firms, so a matching registration number cannot authenticate a sales conversation on its own. Use independently obtained contact details to check the relationship and the person’s authority. [3]

Pay particular attention when money or sensitive documents are requested. The FBI’s business email compromise guidance recommends independently looking up a company’s phone number and directly verifying payment requests or changes to payment procedures and account numbers. A familiar email thread can itself be compromised. [8]

Build this check into your normal supplier-payment controls. Record who confirmed the request, the independently sourced contact used and what was confirmed. An instruction to move quickly should not eliminate the check. If a fee beneficiary differs from the contracting party, ask for the documented reason and verify it through an established channel.

Use the provider’s confirmed secure process for application documents. Identity verification does not require handing a salesperson your bank password, a one-time code or unrestricted payment-system credentials.

Suppose a fictional website trades as Northbridge Pay. Its company number identifies Northbridge Technology Ltd. The draft agreement names Acquiring Services Ltd, and a setup invoice asks for payment to Billing Operations Ltd.

The right next step is to resolve the roles. Is Northbridge Technology the technology supplier or introducer? Is Acquiring Services the contracting payment provider? Is Billing Operations an authorised billing agent, and where is that arrangement documented? Which party owes settlement and who can answer for a missing payout?

Ask for one diagram or written explanation that joins those entities to your proposed service, then compare it with the agreement and schedules. Verify the relevant identity and permission claims, and confirm any claimed principal relationship through an independently obtained contact. An email saying “they are all in our group” leaves several practical questions unanswered.

There may be a satisfactory explanation for every name. Until you have it, record the gaps as open. Do not mark a fee as approved for payment simply because the invoice has arrived, or describe the arrangement as fraudulent simply because it uses more than one company. The table below is a working register for that investigation.

An early sales conversation may happen before an acquirer has reviewed your case. That creates a commercial decision: what work is being purchased now, what remains conditional and what happens if the final route is unavailable?

Request the milestones in writing. Identify when the acquiring party will be disclosed, who can confirm your exact product and customer markets, what the setup payment covers, and which refund conditions apply. Compare the answer with the actual agreement rather than relying on a general description of a successful onboarding process.

For example, technical preparation can be a defined piece of work even while underwriting remains incomplete. The merchant still needs to know whether the fee buys that work, a completed processing arrangement or something else. Those are different purchasing decisions. Ask a qualified adviser to assess unclear contractual rights before committing; this guide does not interpret the enforceability of a particular fee clause.

Keep approval of the provider’s identity separate from approval of your business. Establishing that the counterparties exist does not establish that your websites, products, payment flows and customer countries have been accepted.

Once the names line up, ask how the money moves. Who receives captured funds, who calculates deductions, who maintains the reserve record and which entity has the contractual settlement obligation? Make sure finance can connect that explanation to the reports and statements it will receive.

Words such as safeguarded, segregated, insured and reserve describe different questions. Their meaning and consequences depend on the actual entity, product, agreement and applicable rules. A provider’s registration certificate cannot answer all of them. Leave a claimed protection unconfirmed until the relevant evidence and any necessary specialist advice address your arrangement.

The practical trade-off is visibility. A modular arrangement may give your business access to useful specialist services, but you will have more relationships and handoffs to understand. A single brand can still use several legal entities. Judge the explanation, responsibilities and evidence you receive rather than assuming that either structure is inherently safer.

Payment Guide’s representative-verification badge concerns a representative’s identity and authority. It should not be read as a licence check, proof of financial strength or approval of your merchant application.

A folder of certificates becomes useful when each item answers a question. For every material gap, record the missing evidence, who will supply it and what your business will defer until it is resolved. A document can be genuine and still fail to answer the question being asked.

Suppose the corporate record matches and the sales contact is confirmed, but the settlement entity is absent from the draft. That is a narrower finding than “verification complete.” You can continue a preliminary product discussion while holding signature and payment until the settlement responsibility is explained.

Avoid converting the register into a numerical safety score. Five completed checks do not compensate for an unexplained recipient of funds. Decide which gaps are conditions for proceeding and which can be investigated during preparation. Keep commercial pricing, technical readiness and provider identity as separate conclusions so progress in one area does not conceal a blocker in another.

Repeat the relevant checks when the contracting company, acquiring partner, settlement party, invoice beneficiary or payment instructions change. Preserve the previous explanation and obtain the revised one. A relationship that was clear at onboarding can become unclear after a restructuring or partner replacement.

Use official change alerts where available; the UK company-information service includes a following service. [1] Alerts are a prompt to investigate the effect on your arrangement. They do not replace a review of the contract, new responsibilities or the authenticity of a payment request.

Keep the evidence date with each conclusion. If a register and the provider’s explanation disagree, ask the provider, principal or relevant authority to resolve the material discrepancy. Public information may lag a change. An unresolved discrepancy remains unresolved until you receive an answer that fits the actual service.