Most money lost to bad or fraudulent businesses doesn't happen because the checks don't exist. It happens because nobody ran them before the deposit went out. The fix isn't a longer checklist - it's a routine short enough that you'll actually do it every time, the same way you check mirrors before changing lanes without thinking about it as a "step."
Call it Name, Age, Face, Fund. Four checks, roughly ten minutes, done in the same order every time so it becomes automatic instead of optional.
Name: does the legal name match what's on the contract?
Look up the exact legal name printed on the estimate, invoice, or contract - not the brand name from the truck or the ad. Search it in your state's Secretary of State business-entity database. This single step catches the most common identity gap: a marketing name that's consistent and trustworthy-looking, paired with a contracting entity that's brand new, differently named, or registered somewhere unexpected. If the invoice payee is a third name that matches neither the brand nor the registered entity, stop here and ask why before doing anything else.
Two minutes.
Age: how old is the entity, and how old is the domain?
Pull the formation date from the same registry search you just did, and check the domain's registration date using the ICANN registration data lookup. Neither number needs to be old to pass - a brand-new company isn't automatically a problem. What you're looking for is whether the ages roughly match the story being told. A website claiming "trusted since 2010" on a domain registered eight months ago is a mismatch worth a follow-up question. A genuinely new company that's upfront about being new isn't a red flag at all - it's just a business you should scrutinize a little more carefully on the other three checks.
Two minutes.
Face: what does the public-facing record actually look like?
This is the step most people already do instinctively, just unstructured: reviews, complaints, and licensing where applicable. Read a spread of reviews rather than trusting the average alone, and specifically scan for complaint themes that repeat across different reviewers - a cluster describing the same specific problem is more informative than a low count of scattered one-offs. If the trade is licensed (contracting, electrical, cosmetology, and dozens of others vary by state), confirm the license number on the invoice matches an active record with the issuing board, under the same name from step one.
Three minutes.
Fund: how, and to whom, are you actually being asked to pay?
This is the step that catches fraud in progress, not just fraud in history. A payment request to a personal account instead of a business account, a sudden request to switch from card to wire or crypto, or pressure to pay the full amount upfront before any work starts are all worth pausing on regardless of how clean the first three checks came back. Legitimate businesses don't typically pressure customers into unusual payment methods or same-day urgency, and that pattern alone is worth treating as a hard stop.
Three minutes.
Why the order matters
Name before Age before Face before Fund isn't arbitrary - each step narrows what you're checking in the next one. You can't meaningfully check a domain's age until you know the correct legal name to search. You can't weigh a review pattern properly until you know whether the entity behind it is one year old or twenty. And the Fund check, the one most people's instincts already flag, lands last precisely because a fraudulent payment request often only looks obviously wrong once you already know the entity doesn't check out on the earlier steps - the two reinforce each other.
Making it a habit instead of a one-time effort
The habit only sticks if the threshold is consistent. Pick a number - $500 is a reasonable line for most household and small-business spending - and apply Name, Age, Face, Fund every time you cross it, with no exceptions for "this one seems fine" or "I'm in a hurry." The exceptions are exactly where the habit breaks down, because urgency is also the most common tool used to short-circuit exactly this kind of check. A ProofReports search compresses the Name, Age, and Face steps into a single lookup, which is useful when you're doing this routine for the fifth vendor in a week and want to keep it under ten minutes.
Re-running the habit after a rebrand
One easy way the routine gets skipped: you already vetted a company once, then they rebrand, change their invoicing entity, or you're referred to what looks like "the same company" under a slightly different name. Treat any name change as a full reset - run Name, Age, Face, Fund again from scratch, because a rebrand can quietly swap out the entity behind a familiar-looking brand.
The routine, recapped
- Name - exact legal name on the contract, checked against your state's business registry
- Age - entity formation date and domain registration date, checked for a story that matches
- Face - review themes (not just averages) and license status under the matching name
- Fund - payment method and account match the verified entity, no pressure toward unusual methods
Ten minutes, same four steps, every time you're about to send $500 or more to a business you haven't paid before. The habit isn't clever - it's just consistent, which is the part that actually prevents losses.
Why ten minutes is the right target, not a compromise
It's tempting to think a more thorough check would be strictly better, but a routine that takes forty-five minutes doesn't survive contact with real life - it gets skipped the first time you're in a hurry, which is exactly when you need it most. Ten minutes is short enough to survive a Tuesday afternoon with three other things going on, and long enough to catch the identity, timing, and payment mismatches that account for most of the damage. The goal isn't maximum diligence; it's a level of diligence you'll actually run every single time, without negotiating with yourself about whether this particular vendor "seems fine."
What to do when a step turns something up
Finding something off in Name, Age, or Face doesn't automatically mean walking away - it means asking a direct, specific question before moving to the next step. "I noticed this entity was registered pretty recently - can you tell me about that?" is a normal, reasonable question that a legitimate business answers without friction. How a company responds to that question is itself a fifth data point worth weighing alongside the other four: a clear, consistent answer is reassuring even if the underlying fact (new entity, lapsed filing, rebrand) would have given you pause on its own. Evasiveness, deflection, or irritation at being asked is a stronger signal than the original finding.
Keeping the habit going
The easiest way to keep any repeated routine going is to lower the friction of doing it, not to rely on willpower. Bookmark your state's business-entity search page. Save the ICANN lookup tool. Keep a running note of vendors you've already run through the routine so you're not repeating it unnecessarily on recurring payments to the same, already-verified business. The habit compounds - the second time you check a new vendor, you already know where to look, and the ten minutes shrinks toward five.
Sources
- ICANN registration data lookup — ICANN