Separate business registration, tax validation, ownership review and sanctions checks when onboarding wholesale buyers in Shopify.
•5 min read
Shopify B2B customer verification is a layered process: establish the business identity, validate relevant tax information, understand the buyer and ownership where needed, and screen relevant parties for sanctions risk. Shopify company records help organize those details. MatchAudit supplies a sanctions and country-risk layer; it should not be presented as a substitute for complete KYB, company-register research or VAT validation.
Start with the entity that is actually buying
An illustrative components wholesaler receives an application from Northbridge Controls. The buyer uses a trade name on its website, a longer legal name on invoices and a separate warehouse for delivery. Before granting wholesale terms, the merchant needs to connect those identities and establish who is placing the order on the company's behalf.
Ask for the registered legal name, registration number and jurisdiction, relevant tax identifier, business address, delivery locations and the purchasing contact's authority. Keep the trade name as an alias rather than allowing it to replace the legal entity in every system.
Separate the checks so one result does not stand in for another
On small screens, scroll the table sideways to compare all columns.
Check
Question it helps answer
Useful evidence
Limit
Company registration
Does this entity exist in the claimed jurisdiction?
Current official register extract
Existence does not establish legitimacy of every transaction
VAT or tax validation
Is the identifier valid for the relevant tax purpose?
Dated validation result and supplied details
A valid tax ID is not sanctions clearance
KYB
Do we understand the business and this relationship?
Activity, representatives, expected trade and supporting records
Scope depends on policy and applicable requirements
Ownership review
Who owns or controls the buyer?
Ownership chain and authoritative supporting records
Some information may need further verification
Sanctions screening
Do relevant parties trigger a selected-list review?
Dated result and any investigation
Name screening alone does not resolve all ownership or transaction restrictions
For EU VAT checks, use the European Commission's VIES guidance. An unavailable or invalid result needs follow-up; it should not automatically be described as evidence of fraud. Other jurisdictions use different tax-validation routes.
Map the checks to Shopify company locations
Shopify organizes native B2B customers through companies, locations and associated customers. A location represents the business location involved in the B2B purchase and can carry its own commercial and tax details. See Shopify's company setup guidance.
Keep the company identity distinct from an individual contact and a delivery site. If an established company adds a location, do not assume the prior shipping assessment covers the new destination or recipient. Check what information your plan and configured B2B workflow actually provide to your screening integration.
For merchants running wholesale through ordinary customer accounts, the same identity discipline still applies. Capture the legal entity and delivery-party details in a consistent place, and confirm that your screening record contains the information you intended to check.
Ownership risk can exist without a name match
Under OFAC's 50 Percent Rule, an entity owned 50 percent or more in aggregate, directly or indirectly, by blocked persons can itself be blocked even when its name is not separately listed. Other regimes have their own ownership and control tests. Do not turn one jurisdiction's rule into a universal shortcut.
Escalate complex ownership structures and unexplained intermediaries according to your policy. If you identify relevant owners outside Shopify, ensure they enter an appropriate due-diligence and screening process. An app cannot infer a complete verified ownership chain from an incomplete checkout form.
Build an onboarding handoff that sales can follow
Collect and normalize legal identity and location details.
Check registration and relevant tax information using suitable sources.
Resolve representative authority and ownership questions proportionately.
Screen the relevant parties and review any findings.
Document commercial approval separately from screening decisions.
Re-check changed recipients, destinations or ownership before further shipments.
Use MatchAudit to connect the sanctions review to the order and preserve its reasoning. Give sales a clear status such as waiting for missing information or pending compliance review, instead of an unexplained rejection. For orders already arriving, follow the fulfillment-hold workflow.
Retain the evidence as separate, linked records
Keep register and tax checks with their dates, the ownership assessment with its sources, and sanctions results with the review decision. Link them through stable company and order identifiers. This makes it possible to refresh one check without pretending that every other part of verification was repeated.
Frequently asked questions
Does a valid VAT number mean my buyer is safe to trade with?
No. VAT validation addresses a tax identifier. It does not establish ownership, sanctions status, end use or the permissibility of a particular shipment.
Does creating a Shopify company complete KYB?
No. Company and location records organize buyer information. You still need to perform and document the verification appropriate to your business.
Does MatchAudit verify company registration and VAT?
Use MatchAudit for the sanctions and country-risk layer described here. Complete company-register, tax and broader KYB checks through suitable separate sources or services.
Why check owners when the company name is not listed?
Some sanctions restrictions extend to entities through ownership or control. The applicable tests differ by regime and may require analysis beyond a name-list check.
Automate sanctions and denied-party checks, review potential matches and keep decision evidence with MatchAudit. Start with the free plan's 20 screenings; check current plan features and export entitlements before choosing a workflow.
Reviewed 10 October 2026. Examples are illustrative. Apply the rules relevant to your business and transaction; this guide is not a legal determination.
Work through an illustrative common-name case, compare identifiers, document the rationale and verify release without treating AI advice as a decision.
