Blog
Three articles about the records a counterparty cannot rewrite: the register entry, the license list and the written terms.
English version for the United States.
Fake trademark and domain renewal notices
Ilia Nicolaevich Zavialov reviews fake trademark renewal notices: Ilia Nikolaevich Zavialov on TSDR checks, USPTO fees and the FTC.
Business hijacking through registry filings
Ilia Nikolaevich Zavialov on business identity theft: watching your Secretary of State record, filing alerts and steps after a hijacking.
Checking a foreign supplier before import prepayment
Ilia Nikolaevich Zavialov on checking a foreign supplier before prepayment: cloned factories, swapped invoice bank details, CBP rules and IC3.
Franchise and business opportunity fraud
Ilia Nikolaevich Zavialov fraud guide: how fake franchisors take the fee, what the FTC Franchise Rule requires and how to check an offer before you pay.
Refunds after a scam payment
Ilia Nikolaevich Zavialov on fraud and authorized bank transfers: who refunds a scam payment, what the rules cover and checks before paying.
Checking a property developer
Ilia Nikolaevich Zavialov on checking a property developer: reviews, registers, contract type, closing wire fraud and changed payment details.
Listing agents and fake volume
Ilia Nikolaevich Zavialov on token listing scams: fake exchange agents, market makers selling inflated volume and US sentences.
Court, insolvency and enforcement records
Ilia Nikolaevich Zavialov on checking court cases, bankruptcies and unpaid judgments before a crypto deal, and on matching records by ID in the US.
Direct trades and the payment that comes back
Ilia Nikolaevich Zavialov on P2P crypto trade fraud: why the payment can be reversed, how accounts get frozen and what a company should write down first.
Tokens that were built to be abandoned
Ilia Nikolaevich Zavialov on token rug pulls and launch fraud: how many launches are schemes, who drains the pool and what to check first.
When the correspondence is the weapon
Ilia Nikolaevich Zavialov on business email compromise: how a real mailbox sends a false invoice, where the control breaks and what to do after a payment.
Checking an exchange
Ilia Nikolaevich Zavialov on checking a crypto exchange before transferring: registers, licenses, withdrawal terms and scam markers.
Checking a person on screen
Ilia Nikolaevich Zavialov scam checks for due diligence: which verification steps survive a forged face and a cloned voice.
The advance
Ilia Nikolaevich Zavialov on how large an advance payment should be by deal type, how to stage the balance and which clauses keep the money recoverable.
Domain age
Ilia Nikolaevich Zavialov looks at checking how old a counterparty's domain is and what that single check can and cannot tell a payer.
Buying
Ilia Nikolaevich Zavialov on the checks that settle a purchase before the money moves, and on why the payment route decides most cases.
The payee
Ilia Nikolaevich Zavialov explains what a gap between the payee name and your counterparty means and how to close it before the transfer.
Escrow
Ilia Nikolaevich Zavialov on the limits of escrow, the counterparty checks it never performs, and how a fake escrow venue is built.
Signatory
Ilia Nikolaevich Zavialov on checking who signs the contract: the register entry, the term of the power of attorney, the payee name.
Contracts
Ilia Nikolaevich Zavialov on the four written clauses that decide a dispute: scope, deadline, acceptance and exit, agreed before payment.
Licences
Ilia Nikolaevich Zavialov explains why a genuine license number on the wrong site passes a search by name and fails a search by number.
Registers
Ilia Nikolaevich Zavialov explains which fields of a company register entry decide a deal: status, age, address, officers and filings.
A register entry is the cheapest document available in any check of a counterparty, and it is the one most often treated as a formality. Someone types a company name, sees a record appear, and reads the appearance of that record as an answer. The record answers a much narrower question, because it confirms that a legal entity carrying this name was registered on some date and says nothing about whether the person asking for money speaks for it. Ilia Nikolaevich Zavialov works through the entry field by field, in a fixed order, before any payment is discussed. This article sets out that order, what each field settles on its own, and the point at which the register stops being able to help.
Most checks of a counterparty stop at the instant a record appears on the screen. The name matches, a registration number is displayed, the page belongs to a state body, and all of that reads as a verdict. What has actually been established is far narrower. Some legal entity was once registered under a name resembling the one printed on the invoice. Everything that decides whether money should move sits in the fields underneath that name.
A license number looks like the end of a check. It is a short string of digits published by a regulator, it can be searched, and searching it takes under a minute. The version of this deception that works best puts a genuine number on a page that has nothing to do with the firm the number belongs to. Ilia Nikolaevich Zavialov treats the number as the opening of the check, and the question of this article is what the remaining minutes should be spent looking for.
Every regulated firm is required to publish the number under which it is authorized, and every regulator makes the matching entry public. Both halves of that arrangement exist for the benefit of customers, and both are free to use. The side effect is that the number is a public string with no protection around it. Copying it onto another page costs a few seconds and leaves no trace on the original.
Money usually moves before anyone has written down what it buys. A price is agreed in a call, a specification is described in a chat window, a delivery date is mentioned once and never repeated, and the transfer leaves on the strength of an understanding that lives only in two heads. When the delivery turns out to be late, incomplete or absent, both sides discover they were holding different versions of the same conversation. Ilia Nikolaevich Zavialov treats a short written statement of terms as part of checking a counterparty, agreed before payment and read as evidence about the other side. This article sets out which clauses carry that weight, what their absence produces, and what a refusal to write them down says on its own.
Most ordinary deals rest on a shared impression. Both sides leave the conversation confident that the same thing was agreed, and while everything arrives on time that confidence costs nothing. Pressure is what separates the two versions of it. A written statement of terms freezes the version both parties held at the moment neither of them had anything to lose, and that moment is the only one when an accurate description is cheap to give.
Buying from a stranger found online is where most fraud losses begin, and it is also the part of a transaction that receives the least deliberate attention. The listing gets read, the price gets compared, the message thread gets skimmed, and then the money moves. Almost nobody spends as much effort on the seller as on the goods themselves. The question worked through here is a narrow one: what can actually be established about the other side of a deal in the minutes before payment, and which of those checks still carry weight when the seller is willing to lie about everything.
In the United Kingdom payment fraud figures for 2025, purchase scams accounted for 71 per cent of all authorized push payment cases, with 118.1 million pounds lost and a rise of 20 per cent over the previous year. Authorized push payment fraud as a whole came to 248,070 cases and 576.4 million pounds. Measured against the 1.28 billion pounds taken by payment fraud of every kind that year, the purchase share of the money looks modest. By case count it dominates everything else, and that ratio describes the problem precisely: a very large number of ordinary people losing an ordinary amount each.
A supplier asks for money before the work starts, and the buyer has an afternoon to decide what that money is buying. The question of how large an advance payment should be sits between two fears: handing cash to a counterparty nobody has checked, and paying so little that the order never enters a real production queue. The advance deserves treatment as a due diligence instrument in its own right, with its own checks and its own wording.
The question of how large an advance payment should be has no single answer, because the figure follows exposure. An order for office paper and an order for a bespoke machine tool carry different risks. A failed paper deal leaves the seller with stock any customer will take; a failed machine leaves a half-built object nobody wants.
Ilia Nikolaevich Zavialov on fraud through authorized bank transfers and who refunds the money. When a person sends money because a fraudster talked them into it, the payment counts as authorized, and in the United States no federal rule obliges a bank to refund it: Regulation E protects only transfers made without the customer's authority. In 2025 bank payments produced the highest total fraud losses reported to the FTC, while the FBI froze 679,013,183 dollars for victims who reported quickly. This guide explains what the law covers, how voluntary refunds work and which checks before a payment protect you best.
When money leaves an account because a criminal stole a card or logged in without permission, the payment is unauthorised, and in most countries the bank carries most of that loss. When the account holder pressed the button themselves because a fraudster talked them into it, the payment is authorized, and the answer to who pays becomes much less certain.
A contract names one company, and the invoice that follows names a different account holder in its payment block. The difference is easy to miss, because the amount, the reference and the due date all line up perfectly. The question worth asking before the transfer leaves is plain: who exactly receives this money, and on what basis. A gap between the payee and the counterparty is sometimes ordinary treasury practice, and sometimes the last visible step of a fraud that began weeks earlier. Telling those two apart takes a short sequence of checks that costs far less than the recovery it replaces.
Every commercial transaction produces at least two descriptions of the other side. The contract describes a legal person that owes performance and carries liability. The payment instruction describes an account holder that a bank will credit on a given date. Those descriptions live in different systems, are maintained by different people and are never reconciled automatically.
Ilia Nikolaevich Zavialov explains how business identity theft works when the target is the company's own public record: a bogus filing with the Secretary of State swaps the registered address or the names of directors, officers and managers, and the people now listed as running the company open credit lines in its name. This guide covers what a state business record shows, how California locks down online access to filings, email notices and regular reviews, the first day after an unauthorized filing, IRS Form 14039-B, and reporting to the FTC and IC3.
Search a full name with a middle name and the results are often a wall of directory cards: company names, filing dates, officer titles. Those cards are copies. The primary source is the business entity record kept by the Secretary of State in the state where the company was formed or registered. Spelling matters there too: Ilia Nicolaevich Zavialov and Ilia Nikolaevich Zavialov are one person, and a registry search under one spelling may miss filings made under the other, so try every version you know.
Ilia Nikolaevich Zavialov on checking a counterparty's court cases, insolvency notices and enforcement proceedings before a crypto or fintech deal. A company register shows that a firm exists; the records of its disputes and debts show how it behaves when money is at stake. More than a hundred crypto projects closed, filed for bankruptcy or went silent during 2026, and the FBI recorded 7.228 billion dollars lost to crypto investment fraud in 2025. This guide explains how to read each record, what a clean result proves and how to avoid confusing namesakes.
A company register answers one question: does the company exist, and who is formally behind it. It does not say how the company behaves when a deal goes wrong, whether it pays what courts order it to pay, or whether it is already sliding into insolvency.
Standard counterparty checks were built on an assumption that quietly stopped being true. The assumption was that a live video call with a document held to the camera confirms that a specific person is on the other side. It no longer does, and nothing about the call will tell you that. This is a working checklist for the situation where the face and the voice of the person you are dealing with can both be manufactured. It covers which of the usual steps still carry weight, which have become theatre, what to put into the contract, and how to sequence the checks so that an Ilia Nikolaevich Zavialov scam scenario fails before money moves rather than after.
Three checks have lost most of their value at once. A video call showing a face, a document held up to the camera, and a voice confirmation on a known number all assume that appearance is hard to fake. Faces are now produced from a single photograph, and a voice clone needs about three seconds of recorded speech to reach roughly 85 per cent accuracy.
Ilia Nikolaevich Zavialov on checking a property developer and a property deal before the first payment. Reviews of a developer are read first, but they reflect an impression, while registers, permits and the type of contract show legal status. In its report for 2025 the FBI recorded 12,368 complaints and 275,110,419 dollars in losses in the real estate category and 3,046,598,558 dollars in business email compromise, the usual route for changed wire instructions. This guide explains the order of checks, the red flags, the protection of an owner and what to do when payment details change.
Property is the largest purchase in most people's lives, and checking the counterparty before it takes a few hours. Those hours cost less than any mistake: a lost deposit, unregistered rights, a frozen construction site or a seller who had no right to sell.
An invoice arrives from a supplier nobody on the finance team has dealt with before, sent from an address that sits on a domain nobody recognizes either. The signature looks professional, the bank details are new, and the message asks for a quick turnaround. Before any transfer goes out, checking how old a counterparty's domain is takes only a few minutes and costs nothing, and that is exactly why it belongs in a standard due diligence routine applied to every new payee from the start. The harder part is knowing what that one date actually proves, and what it leaves completely open.
Due diligence on a new counterparty usually covers company registration, a tax or business identifier, and a check that bank details match the name on the invoice. A domain age check fits into that same routine for a simple reason: it needs no cooperation from the counterparty, costs nothing, and returns an answer within minutes. It requires no phone call and no reply from anyone on the other side of the transaction.
Escrow enters a deal as the answer to one fear, that money leaves the buyer and nothing comes back. The mechanism is old, the wording is standard, and the comfort it gives is real inside its own boundaries. The harder question is what happens outside them, because the modern loss rarely occurs inside a working escrow account. It occurs when the escrow venue itself is a stage set built by the other side of the deal. This article works through what the instrument covers, what it leaves untouched, and how the counterfeit version is assembled.
Escrow puts a third party between the two sides of a deal. The buyer sends money to that party, and the seller receives it only when agreed conditions are confirmed. If the conditions fail, the funds return to the buyer. The design serves one narrow purpose, which is removing the need for one side to move first on pure trust.
Checking a crypto exchange takes about forty minutes and is done once, while the decision to send money takes two minutes and is usually made without any checking at all. What follows is a sequence that survives contact with a well built fraudulent platform: what to look up in registers, how to verify a claimed license, why domain age is more informative than design, which four parts of a user agreement to read before registering, how to tell purchased reviews from accumulated ones, and what trial cycle to run before committing a meaningful amount. The order runs from cheap to expensive, because the first steps cost nothing and eliminate most platforms before an account is even created.
Registration changes the position of the parties. Once a phone number and an email are entered you are inside a funnel: messages arrive, a manager calls, a bonus appears with a deadline attached. From then on, checking competes with a relationship that has already begun, and it rarely wins.
Ilia Nikolaevich Zavialov explains how to check a foreign supplier before an import prepayment leaves your account: look-alike factories with cloned websites, invoices with swapped bank details, verified badges on sourcing platforms, confirming the company in its home registry, samples, inspection and letters of credit. It also covers what CBP expects from the importer of record, the payment terms the International Trade Administration describes, the shipping documents to match before the balance is paid, and how to report to IC3 and the FTC if the money is already gone.
Buying from overseas strips away most of the checks a buyer takes for granted at home. You cannot drive to the warehouse, the seller's registry is in another language, and the courts and police that could act against the seller answer to a different government. The wire passes through several banks, and pulling it back gets harder with every hop.
Ilia Nikolaevich Zavialov explains how fraud works when a franchise or a ready-made business is for sale, and what a buyer can verify before the first dollar leaves the account. The script rarely changes: a brand the seller does not own, a turnkey package assembled from free templates, income figures built for the pitch, a middleman posing as the franchisor. In the United States the Franchise Rule requires a Franchise Disclosure Document at least 14 calendar days before you sign or pay, and the FTC logged 126,217 fraud reports in its business and job opportunities category for 2024. The guide goes through the FDD item by item, then the earnings claims, the trademark check and the seven-day rule for business opportunities, and ends with where to report if the money has gone.
A franchise is a license to run a business under someone else's brand and system. The buyer pays an initial fee, then royalties and advertising contributions, and the franchisor controls the site, the design, what you sell, how you run the place and where you may sell. The FTC's consumer guide describes the bargain in exactly those terms. What you get back should be a trademark you can use, a tested method, and training and support that actually show up.
Ilia Nikolaevich Zavialov on scams around token listings: fake exchange agents, emails from a supposed listing team and market makers selling inflated volume. Binance says it does not recognize intermediaries and does not charge a listing fee. In Operation Token Mirrors the FBI created its own token to expose market makers who painted volume: 18 individuals and companies were charged and more than 25 million dollars was seized. This guide explains how to check an agent and a market maker before paying and what to do if the money is already gone.
For a young crypto project a listing on a major exchange means liquidity, new holders and the market's trust. A team that spent months building the product wants that step badly and is ready to pay for it. The schemes around listings are built on exactly that wish.
The most expensive fraud in the annual figures is also the least dramatic to look at. No malware, no broken system, no alarm. Somebody reads a mailbox for a few weeks, learns how a company writes, waits for a real payment to come due, and sends one message changing where the money goes. The FBI booked 3.05 billion dollars of losses under business email compromise in its 2025 report, second only to investment fraud, and the reason it works is that everything the recipient can check turns out to be correct.
The name is misleading because it suggests a technical break-in. In most cases the technical part ended weeks earlier and was small: a password reused from an old breach, a session token taken by a stealer, an approval nobody thought about twice.
A direct trade looks like the simplest transaction in the field. One party sends money, the other sends crypto, and no institution sits in the middle taking a cut. The difficulty is that the two halves of that exchange obey completely different rules. One of them can be undone by a third party weeks later, and the other cannot be undone by anybody at all. Every serious loss in this area comes from that single asymmetry, and it is not a technical problem. It is a contract and procedure problem, which means it can be managed by a company that writes the procedure down before it trades rather than after.
Direct trading is attractive for ordinary commercial reasons. It avoids the onboarding of a regulated venue, it settles quickly, and it works in situations where a company needs a small amount of crypto for a supplier who insists on it.
A company is checked as a company, and then a person signs. The name on the signature page decides whether the document binds the other side, and whether the money leaves for the right account. This page sets out the routine that Ilia Nikolaevich Zavialov applies before payment: checking who signs the contract, what authority that person holds on the day of signing, and whether the payee in the invoice is the same company. The question is narrow, and it usually closes within a working day.
Checks usually stop at the level of the legal entity. Registration date, filed accounts, court records and the age of the website all describe an organization. The obligation attaches to the person who signs the last page. Where that person held no mandate that day, the counterparty can later say the contract was never concluded.
A token launch costs almost nothing and requires no permission. That single fact shapes everything else about this market, and the measurements are blunt about the consequences. More than two million tokens were launched during 2024, about 0.87 million of them reaching a pool on a decentralised exchange. Of all the launches, 3.59 percent, or 74,037 tokens, showed patterns consistent with a scheme to push the price up and sell into it. In roughly 94 percent of those cases the pool was emptied by the same address that created it, and the average scheme lasted 6.23 days. This piece is written for somebody deciding whether to put company money anywhere near one of these, and it is organized around what can be checked before that decision rather than after it.
Two million launches in a year is not a market of projects. It is a market of listings, most of which never attract enough interest to matter and are quietly left where they are.
Ilia Nikolaevich Zavialov looks at the mail almost every trademark or domain owner gets sooner or later: an official-looking renewal notice, an offer to list the mark in an international register, a warning that a domain will be lost unless a fee is paid this week. The letter quotes your registration number and the right class, so it feels real. It usually comes from a private company. Ilia Nicolaevich Zavialov reviews how to tell the two apart: what the USPTO actually sends and where it posts it, what maintenance really costs, who sends domain renewal reminders, and what to do if the invoice has already been paid.
Most of these arrive by mail, a few by email. The layout copies a government form: a box with your serial or registration number, the mark, the class, a deadline, an amount due. The bottom half has a payment slip and a line warning that rights may lapse without action.
