Cross-Border Due Diligence

How to Verify a U.S. Company Before You Sign

A practical, step-by-step framework for foreign investors, international counsel, and offshore counterparties to independently verify an American company, its ownership, and its risk exposure before signing or wiring funds.

Fortaris Capital Advisors · June 11, 2026 · 11 min read

A stack of U.S. corporate and legal documents — a contract, a certificate of incorporation, and a bound ledger — on a dark desk under a warm lamp.
Verifying a U.S. company means working the documentary record — registration, ownership, litigation, and sanctions — before you sign.

The short answer

To verify a US company before signing a contract, confirm its legal registration with the secretary of state, identify its beneficial owners, search federal and state litigation and UCC filings, check regulatory and licensing records, and screen all parties against OFAC sanctions lists. Where stakes are high, corroborate the company's physical operations and management through independent on-the-ground checks.

Why Verifying a U.S. Company Is Harder Than It Looks

For a foreign investor, lender, or counterparty, the United States can appear deceptively transparent. There are public registries, an open court system, and an aggressive financial regulator. In practice, the information is fragmented across fifty-one separate jurisdictions, sits in databases that do not talk to each other, and is easy to misread without local context. A company that looks substantial on a polished website and a single state filing may be a recently formed shell with no assets, no track record, and undisclosed owners.

The cost of getting this wrong is not theoretical. The FBI's Internet Crime Complaint Center (IC3) has reported business email compromise and related fraud losses in the billions of dollars annually, much of it involving wires sent to entities the victim never independently verified. Cross-border transactions concentrate that risk: distance, time zones, unfamiliar corporate forms, and the difficulty of pursuing a US defendant from abroad all favor the bad actor.

Knowing how to verify a US company before signing a contract is therefore a discipline, not a single lookup. The sections below set out the sequence a sophisticated buyer, investor, or counsel should follow, from the cheapest public-record checks to the on-the-ground corroboration reserved for higher-stakes deals.

Step One: Confirm the Legal Entity Exists and Is in Good Standing

US companies are not registered with a single national body. They are formed at the state level, so the first task is to identify the state of incorporation and pull the entity's record from that state's secretary of state (or equivalent) business registry. Most states offer free online entity search. Delaware, where a large share of US public companies and many private ones are incorporated, is a common home even for businesses that operate elsewhere.

From the state record, confirm three things: that the entity exists under the exact legal name on the contract, that its status is active or in good standing rather than dissolved, suspended, or forfeited, and the formation date. A company formed weeks before a major transaction deserves heightened scrutiny. Note the registered agent and the principal address, and watch for entities sharing a registered-agent address with hundreds of unrelated shells.

  • Match the contracting party's exact legal name, including LLC, Inc., or LP suffix, to the state record
  • Confirm active or good-standing status and the original formation date
  • Identify the state of incorporation, which may differ from where the company operates
  • Note the registered agent and principal office; flag mass-registration addresses
  • Where the entity claims to be public, cross-check filings on the SEC's EDGAR system

Step Two: Identify Who Actually Owns and Controls It

State formation documents rarely disclose the human beings behind a US company, particularly for LLCs. Beneficial ownership, meaning the natural persons who ultimately own or control the entity, is the single hardest fact to establish and the one that matters most when fraud, sanctions evasion, or undisclosed conflicts are in play.

The federal Corporate Transparency Act created a beneficial ownership reporting regime administered by FinCEN, but the resulting registry is not a public database; access is restricted and the rules have shifted, so it should not be relied on as an open verification tool by a foreign counterparty. Practical ownership verification still comes from a combination of corporate filings, the company's own representations under the contract, litigation records that name principals, property and business records, and direct investigation. Where ownership cannot be satisfactorily established, that gap is itself a material finding that belongs in your risk assessment before you sign.

Step Three: Search Litigation, Judgments, and UCC Filings

A company's legal and financial history is one of the most revealing data sets available, and the US court system makes much of it accessible. Federal civil and bankruptcy litigation is searchable through PACER, the judiciary's electronic records system. State court coverage is uneven and must be searched county by county in the jurisdictions where the company operates, which is where local knowledge matters.

Run the entity and its known principals through these records to surface patterns: repeat breach-of-contract defendants, fraud allegations, unpaid judgments, and bankruptcies. Separately, search Uniform Commercial Code (UCC) financing statements at the state level. UCC filings show which lenders hold security interests in the company's assets, telling you whether the assets you are relying on are already pledged to someone else. A clean website and a balance sheet encumbered by undisclosed UCC liens are not the same company.

  • Federal civil, criminal, and bankruptcy dockets via PACER
  • State and county civil records in every jurisdiction where the company operates
  • Judgment and lien searches, including tax liens
  • UCC financing statements to reveal existing security interests in assets
  • Patterns across the principals personally, not only the entity
Close-up of a hand reviewing a corporate registry document with a pen.
Each public-record check builds the picture; where stakes are high, independent on-the-ground corroboration confirms it.

Step Four: Check Regulatory, Licensing, and Industry Records

Many US businesses operate in regulated sectors, and those regulators maintain records you can use to verify both legitimacy and conduct. For securities and investment firms, the SEC's Investment Adviser Public Disclosure and FINRA's BrokerCheck disclose registration status and disciplinary history. For banks and money-services businesses, federal and state financial regulators publish licensing and enforcement actions. Professional services, construction, healthcare, and many other fields require state licenses that are searchable online.

Confirm that the company holds the licenses its business requires, that those licenses are current, and that there are no recent enforcement actions, consent orders, or revocations. The absence of a required license, or a pattern of regulatory discipline, is a direct signal about how the company conducts itself. Industry-specific registries, import/export records, and government contracting databases such as SAM.gov can further corroborate that the business actually does what it claims to do.

Step Five: Screen for Sanctions, OFAC, and Watchlist Exposure

For any cross-border deal, sanctions screening is not optional. The US Treasury's Office of Foreign Assets Control (OFAC) administers sanctions programs and publishes the Specially Designated Nationals and Blocked Persons (SDN) List, which is freely searchable through OFAC's Sanctions List Search tool. Dealing with a sanctioned party can expose a foreign counterparty to secondary sanctions and severe penalties, and US sanctions liability is generally strict, meaning intent is not a defense.

Screen the company, its principals, its beneficial owners, and any affiliated entities against the SDN List and OFAC's consolidated and sectoral lists, and recheck before closing because designations change. Note OFAC's 50 Percent Rule: an entity owned 50 percent or more, directly or indirectly, by one or more blocked persons is itself treated as blocked even if it does not appear on any list by name. This is precisely why beneficial ownership work in Step Two and sanctions screening here are inseparable. Screening should extend beyond OFAC to other relevant watchlists and, where appropriate, to politically exposed person (PEP) and adverse-media review.

  • Search OFAC's SDN and consolidated lists for the entity, principals, and owners
  • Apply the OFAC 50 Percent Rule to ownership chains, not just named parties
  • Re-screen immediately before signing or wiring, as designations change
  • Extend screening to PEP status and adverse media for higher-risk counterparties

Step Six: Corroborate the Business on the Ground

Public records establish what a company is on paper. They do not confirm that it operates, employs the people it claims, occupies the premises it lists, or generates the revenue it represents. For higher-stakes transactions, document review must be paired with independent corroboration: confirming physical premises, verifying that listed executives are real and hold the roles claimed, checking that key customer or supplier relationships exist, and discreetly assessing reputation through references and market sources.

This is where the difference between a database report and genuine due diligence becomes decisive. The ACFE's Report to the Nations has consistently found that occupational fraud schemes run for a meaningful period before detection and that a median scheme causes substantial loss, with a significant share never recovered. The earlier a misrepresentation is caught, the cheaper it is. On-the-ground verification, conducted discreetly so as not to disturb a live negotiation, is the step most often skipped by foreign parties and the one that most often surfaces the decisive fact.

Step Seven: Verify Payment Instructions and the Signing Authority

The final verification failures are often the most expensive and the most preventable. Two checks belong immediately before money or signatures move. First, confirm that the individual executing the contract has authority to bind the entity, by reference to corporate resolutions, the operating agreement, or board authorization rather than a job title in an email signature. Second, independently verify wire instructions through a known, pre-established channel, never by replying to the email that delivered them.

Business email compromise works precisely by inserting fraudulent payment instructions into a legitimate-looking transaction at the last moment. The FBI has repeatedly identified BEC as one of the costliest cyber-enabled fraud categories, with cumulative reported losses in the tens of billions of dollars. A thirty-second call to a previously verified phone number defeats most of it. Treat any late change to banking details as a red flag requiring fresh, out-of-band confirmation.

Building This Into a Defensible Process

The seven steps above scale to the size of the deal. A modest commercial contract may warrant entity, litigation, and sanctions checks plus payment-instruction verification. A capital investment, acquisition, or long-term supply relationship warrants the full sequence, including beneficial ownership and on-the-ground corroboration, with the findings documented in a written report you can rely on later if something goes wrong.

Documentation matters for two reasons. It forces discipline, ensuring no step is quietly skipped under deal pressure, and it creates an evidentiary record that supports your decision and any future claim. For foreign principals and their counsel, the practical obstacles, distance, language, fragmented US records, and the difficulty of acting quickly across time zones, are exactly why this work is often delegated to a specialist.

Fortaris Capital Advisors built its International and Cross-Border Due Diligence practice around this problem: independently verifying American companies, their executives, and their ownership for foreign investors and counsel, led at the Managing Director level and grounded in federal investigative and forensic-accounting experience. Whether the work is run in-house or with a partner, the principle holds. Verify before you sign, document what you find, and treat any gap you cannot close as a finding in its own right.

Key takeaways

  • US companies are registered state by state, not nationally; always start by confirming the exact legal entity, its good-standing status, and its formation date with the relevant secretary of state.
  • Beneficial ownership is the hardest and most important fact to establish; the FinCEN registry is not a public tool, so ownership must be built from filings, litigation, and direct investigation.
  • Sanctions screening is mandatory in cross-border deals: search OFAC's SDN list and apply the 50 Percent Rule to ownership chains, re-screening before close.
  • Public records prove what a company is on paper; on-the-ground corroboration of premises, executives, and operations is the step most often skipped and most often decisive.
  • Verify signing authority and confirm wire instructions out-of-band before funds move; business email compromise targets exactly this last-minute window.

Frequently asked

Is there a single national registry to verify a U.S. company?

No. US companies are formed at the state level, so there is no single federal company registry. You verify legal existence through the secretary of state in the state of incorporation, then layer on federal sources such as PACER for litigation, EDGAR for public-company filings, and OFAC for sanctions screening.

How can a foreign investor find out who really owns a U.S. company?

Beneficial ownership is difficult to establish because state LLC filings rarely name the humans behind the entity. The federal FinCEN beneficial ownership registry is access-restricted, not a public database. Ownership is typically built from corporate filings, contractual representations, litigation records naming principals, and direct investigation.

What is the OFAC 50 Percent Rule and why does it matter?

Under OFAC's 50 Percent Rule, any entity owned 50 percent or more, directly or indirectly, by one or more sanctioned persons is itself treated as blocked, even if it is not named on any sanctions list. This is why sanctions screening must follow the ownership chain, not just the named counterparty.

What is a UCC search and why should I run one before signing?

A Uniform Commercial Code financing statement search, run at the state level, reveals which lenders hold security interests in a company's assets. It tells you whether the assets you are relying on are already pledged to someone else, an essential check before lending to or transacting with a US company.

How do I avoid wire fraud when paying a U.S. counterparty?

Always confirm the person signing has authority to bind the entity, and independently verify wire instructions through a known, pre-established phone number, never by replying to the email that delivered them. Treat any last-minute change to banking details as a red flag requiring fresh out-of-band confirmation.

When is professional due diligence worth it versus doing the checks myself?

Entity, litigation, and sanctions checks can be started from public sources. A specialist becomes worthwhile when stakes are high, ownership is opaque, on-the-ground corroboration is needed, or you require a documented, defensible report, particularly for cross-border deals where distance and fragmented records make self-service verification impractical.

Sources & further reading

  • U.S. Treasury, Office of Foreign Assets Control (OFAC)Administers US sanctions programs; publishes the SDN List, the consolidated Sanctions List Search tool, and guidance on the 50 Percent Rule.
  • FBI Internet Crime Complaint Center (IC3)Annual Internet Crime Reports documenting business email compromise and cyber-enabled fraud losses in the billions of dollars.
  • ACFE Report to the NationsThe Association of Certified Fraud Examiners' biennial global study on occupational fraud, including median losses, scheme duration, and detection rates.
  • FinCEN (Financial Crimes Enforcement Network)Administers the Corporate Transparency Act beneficial ownership reporting regime; the resulting registry is access-restricted, not a public database.
  • U.S. Courts PACER and SEC EDGARPACER provides public access to federal civil, criminal, and bankruptcy dockets; EDGAR provides public-company registration and disclosure filings.

Related practice

International / Cross-Border Due Diligence

When the matter is real, Fortaris brings federal-grade investigative judgment to it — led by a Managing Director, in confidence.