The Nice Girl. The Wrong Boss.
How do you know if a message from your Chinese supplier is really from the factory owner?
Confirm it against the two things that can't be faked casually: the documents and the boss himself. A new bank account, a sudden change to an invoice, a request to move to a different WeChat — none of these are real until the owner confirms them through a channel you already trust, ideally on a signed, chopped document. The nice merchandiser who has helped you for years is staff, not the factory. Staff can be fired, and staff can be turned. Verify owner-level changes at owner level, every time.
That's the short answer. Here's the case it comes from.
An Indonesian importer had bought from the same Chinese factory for years — around half a million dollars over time. The factory boss was, by this point, a friend.
Then, while he was back in Indonesia, he got a message. The boss had a new WeChat. The old group was deleted, everyone moved to a new one. Normal enough — people change accounts.
It was the beginning of a scam.
The setup
Two women who worked in the boss's office had been let go — but were still around for a week or two before leaving. In that window, with the boss out, they went to his computer and used his access.
They moved all his clients into new WeChat groups and deleted the old ones. In the new groups, one of them played the boss — using a photo of him they'd pulled from somewhere, presenting as the man himself. Then the requests started: new bank accounts. Changes to invoices. Redirected future orders.
To a client mid-relationship, it looked like business as usual with a friend. That's what made it dangerous.
What saved him
Something felt wrong to the Indonesian client, and it came down to one instinct: in all their years, payment had always gone to the same bank account — a Hong Kong company account. Now, suddenly, a new account. He tried to reach the boss directly to confirm. He couldn't. Every channel ran through the new WeChat.
So he didn't wire. He stopped and called us instead.
That decision is the whole case. He never sent a cent to the new account.
What we found
We went to the factory and got the real boss on the phone — simple, once you're standing in the right place. He had no idea any of it was happening. He was angry his group had been deleted and immediately suspected his own former staff.
By the time we arrived he'd managed to reconnect with some of his old clients, but not this one — the fake group had him walled off. The boss took it from there himself: he filed a police report against the two women. We gave him the evidence we'd gathered; he did the rest.
No money lost. The scam caught before the wire.
The lesson
- Your staff contact is not the factory. The helpful girl who processes your orders and answers every message is an employee with access — not the supplier, and not someone whose word can move your money. When she leaves, that access is a weapon.
- A new bank account is the single most abused signal in China trade. Sudden account changes, invoice edits, "my other account has a problem" — treat every one as a scam until the owner confirms it on a chopped document.
- The relationship drifting to WeChat-only is the vulnerability. No company email that works, no formal channel, a boss who only appears every few months to order — that's a relationship with no verification layer left. The convenience is exactly what the scammers used.
- At the end of the day, the documents and the boss confirm reality. Not the chat. Not the photo. Not the history. The chop and the owner.
Names withheld. Details generalized to protect the client and the factory owner, who was himself a victim.
Relationship living entirely on WeChat with no verification layer? Due Diligence re-establishes who you're really dealing with. Getting sudden requests to change bank accounts? Fixer. Or go back to all Case Files.