Skip to content
VetThisVendor

Check a vendor before you pay them

One submission, four independent checks: registry status, IBAN checksum, EU sanctions screening, and whether their email domain can be forged. No signup.

Vendor details

Greece files VAT under EL, not GR. Northern Ireland uses XI.

Checked in your browser's request only — never stored in full.

The part after the @ in their email address.

Used for sanctions screening when the VAT registry does not return a name.

What gets checked

VAT / registration number
Looked up live against VIES for EU numbers, or HMRC for UK ones. Format is validated per country first.
IBAN
Structure and MOD-97 checksum, computed locally. Catches the transposed digits that proofreading misses.
EU sanctions list
Fuzzy name screening against a local copy of the EU consolidated list, refreshed daily. No other free vendor checker does this.
Sending domain
SPF, DMARC policy, MX records and registration age — whether someone could forge email that appears to come from them.

Guides

Questions

Is this free?

Yes, and there is no account. The tool runs four checks on a supplier and shows the result immediately.

Does a clean result mean it is safe to pay?

No. These four checks cannot detect the most common invoice fraud, where a real supplier’s mailbox is compromised and only the bank details are changed. Always confirm bank details by phone using a number you already had.

Do you store the IBAN I enter?

Never in full. Only the country code, check digits and last four characters are kept, and only if a permalink is created. Those are deleted after 90 days.

What does a sanctions "possible match" mean?

That a name on the EU consolidated list resembles the name you checked. It is a name-similarity check, not a legal determination, and it must be verified independently.

Which countries are covered?

EU member states plus Northern Ireland via VIES, and the UK via HMRC. IBAN checksums work for every country in the IBAN registry.