Verifying that a business is legitimate is the process of confirming that a company legally exists, is in good standing with its state of registration, holds the licenses required for its claimed work, and has no significant legal, regulatory, or fraud history that contradicts its representation of itself.
You found a contractor online. Or a company reached out about a service. Or someone is asking you to pay a business you’ve never dealt with before. The website looks professional. The reviews seem positive. But something about it makes you want to check before you commit.
A legitimate business produces consistent, verifiable records across state registries, licensing systems, and court records. A fraudulent or misrepresented business does not.
Business legitimacy verification is a records consistency check across those systems.
Most business fraud relies on one assumption: that you won’t verify before you pay.
Quick Answer: Verify a business is legitimate by searching its name in the state Secretary of State business registry, confirming active status and correct ownership, checking for required licenses through the relevant state licensing board, reviewing its complaint history with the Better Business Bureau and your state attorney general, and searching court records for litigation or regulatory action. These checks take under thirty minutes and catch the majority of fraudulent or misrepresented businesses before money changes hands.
For the broader investigation framework, see: How to Investigate Someone
⚠️ Legal Notice: Searching publicly available business filings, licensing records, and court records is legal. This guide covers lawful research methods only and does not constitute legal advice.
On This PageWhy This Guide Is Reliable
inet-investigation.com publishes research-based guides built on primary government sources, investigative practice, and public records law. All sources cited link to official government websites or primary legal references. For jurisdiction-specific legal questions, consult a licensed attorney or the relevant government agency.
What Business Legitimacy Actually Means
Legitimacy isn’t a single status — it’s a combination of legal existence, active standing, licensing compliance, and absence of serious fraud or regulatory history. A business can fail on any one of these while appearing legitimate on another.
Legal existence — the business is registered with the appropriate state authority as a legal entity: an LLC, corporation, partnership, or sole proprietorship with a formal filing.
Active standing — the registration is current and in good standing, not dissolved, revoked, or suspended for failure to file annual reports or pay state fees.
Licensing compliance — the business holds whatever licenses are required for its claimed work in its jurisdiction: contractor licenses, professional licenses, financial service licenses, and so on.
No serious adverse history — the business has no significant pattern of consumer complaints, regulatory enforcement actions, fraud judgments, or court orders that contradict its claims.
A legitimate business holds up on all four. Checking all four takes under thirty minutes using free public sources.
Fastest Way to Verify a Business
Before the full workflow, these four checks resolve most cases:
- Secretary of State search — search the business name in the state registry where it claims to operate; confirm it’s registered, active, and lists the owner or registered agent you expect
- License verification — search the relevant state licensing board database for the business name or license number; confirm the license is active and not suspended or revoked
- BBB search — search the business on the Better Business Bureau (bbb.org); check its rating, complaint history, and any government actions listed
- Google the business name plus “scam,” “complaint,” or “review” — surface any consumer fraud reports, forum complaints, or news coverage not appearing in official databases
These four checks catch the most common forms of business fraud in under fifteen minutes. If they return consistent results, deeper investigation is rarely needed in low-risk situations.
Business Legitimacy Verification Workflow
- Step 1: Search the state Secretary of State business registry
- Step 2: Verify the business address and physical presence
- Step 3: Verify required licenses through state licensing boards
- Step 4: Check complaint and enforcement history
- Step 5: Search court records for litigation and judgments
- Step 6: Verify the owners or principals independently
- Step 7: Assess the full picture
Step 1 — Search the State Business Registry
Every legally registered business in the United States has a filing with the Secretary of State or equivalent authority in the state where it was formed. That filing is public, searchable, and free.
Search the Secretary of State’s business entity database for the state where the business claims to be located or registered. Most state SOS portals are searchable by business name, entity number, or registered agent name. Find the right portal by searching your state name plus “Secretary of State business search.”
What to look for:
- Registration status — is the entity active, in good standing, dissolved, revoked, or suspended? An entity that is not in good standing may have failed to file required annual reports or pay state fees — a signal of a poorly managed or defunct business.
- Formation date — how long has the business been registered? A business claiming years of experience that was registered six months ago is a direct inconsistency.
- Registered agent — who is the registered agent? This is the person or service designated to receive legal documents on behalf of the business. A business using a commercial registered agent service (a common, legitimate practice) is different from one listing a residential address or a name that doesn’t match any known principal.
- Entity type — is it an LLC, corporation, or other entity type? Does the structure match what the business claims to be?
- Officers or members — in many states, officer or member names are listed in the filing. Do these names match what the business claims about its ownership?
- Recent status changes — a business that was active and recently became inactive, revoked, or suspended is a meaningful signal. Check not just the current status but any history of status changes if the portal shows it.
A business that doesn’t appear in the Secretary of State registry for the state it claims to operate in is not legally registered in that state. That’s a fundamental legitimacy failure.
→ How to Research a Business and Its Owners
Step 2 — Verify the Business Address and Physical Presence
The business address is one of the fastest points where fraudulent operations fail. A legitimate business has a verifiable physical or operational presence. A fraudulent one often uses a virtual office, a UPS Store address, a residential address misrepresented as commercial, or an address with no connection to the business at all.
Search the business address on Google Maps. Switch to Street View and look at the physical location. Is it a commercial building consistent with the business type? A law firm claiming to operate from a strip mall mailbox service or a contractor claiming a business address that’s a residential home in a neighborhood of houses — these inconsistencies warrant follow-up.
Search the address in Google. Does it appear on the business’s own website, on Google Business Profile, on industry directories? Consistent address attribution across independent sources is a positive signal.
If the business claims a physical location — a showroom, a workshop, a service center — and the address produces no commercial presence on Street View or in any business directory, that’s a flag.
Also: search the business address in the state business registry. Are multiple unrelated businesses registered at this address? A large number of unrelated LLCs registered at a single residential or mailbox address is a common signal of a shell company operation.
→ Someone Is Using My Address — How to Investigate
Step 3 — Verify Required Licenses
Many types of businesses are required to hold specific licenses to operate legally. Contractors, financial advisors, real estate agents, insurance agents, healthcare providers, electricians, plumbers, security companies, and dozens of other business types require licensing at the state or local level. Operating without a required license is itself a legal violation — and a signal that the business either doesn’t know or doesn’t care about regulatory compliance.
Licensing requirements vary by state and by trade, so always verify based on the location where the work is being performed — not where the business is headquartered.
How to find the right licensing database:
Search your state name plus the business type plus “license lookup” or “license verification.” Most state licensing boards maintain publicly searchable databases. For example: “California contractor license lookup,” “Texas financial advisor license check,” or “Florida electrician license verification.”
What to look for:
- Is the license active and current?
- Does the license name or business name match what you were given?
- Is there any history of license suspension, revocation, or disciplinary action?
- Is the license type appropriate for the work claimed?
A contractor who can’t produce a license number — or whose license number doesn’t appear in the state database — is operating illegally in states where licensing is required. That alone is grounds to walk away from a contract.
Federal licensing:
Some businesses require federal licensing or registration: investment advisors (SEC or state securities regulators), broker-dealers (FINRA BrokerCheck at brokercheck.finra.org), mortgage lenders (NMLS at nmlsconsumeraccess.org), and businesses operating in regulated industries. These federal databases are free and publicly searchable.
Step 4 — Check Complaint and Enforcement History
A business can be legally registered, actively licensed, and still have a significant pattern of consumer complaints or regulatory enforcement actions. Complaint history is a separate check from legal existence.
Better Business Bureau (bbb.org) — Search the business name. Check its BBB rating, the number and nature of complaints filed, how the business responded to those complaints, and whether any government actions are listed. A pattern of unresolved complaints — particularly in a specific category like refund denials, failure to deliver, or billing disputes — is a meaningful signal regardless of the overall rating.
Note: complaint data reflects reported issues — not all customers file complaints, and not all complaints are valid. Use complaint history as a directional signal, not a verdict. A single complaint resolved appropriately is different from a pattern of unresolved ones.
State attorney general consumer protection office — Most state attorneys general maintain a publicly searchable complaint database or a list of enforcement actions against businesses. Search the business name in your state AG’s complaint database. A business that has been the subject of an enforcement action or a consent order is a significant red flag.
Federal Trade Commission (ftc.gov/news-events/enforcement-actions) — Search the FTC’s enforcement actions database for the business name. FTC enforcement actions against businesses involve deceptive practices, false advertising, and fraud — any match warrants serious scrutiny.
CFPB (consumerfinance.gov/enforcement) — For financial services businesses, search the CFPB enforcement actions database. The CFPB has jurisdiction over mortgage lenders, debt collectors, payday lenders, and other financial service providers.
Google search — Search the business name plus “complaint,” “scam,” “fraud,” or “review.” Consumer fraud forums, Reddit threads, news coverage, and Better Business Bureau-style aggregator sites often surface problems that don’t appear in official databases.
Step 5 — Search Court Records
Court records surface litigation, judgments, and regulatory proceedings that complaint databases and licensing records don’t capture.
Civil court records: Search the state court portal for the county where the business is registered or operates. Search by the business name and by the owner’s name if known — many lawsuits are filed against individuals rather than the entity itself, so searching only the business name misses cases where the principal was named personally. Civil lawsuits — breach of contract, fraud, consumer protection violations — filed by customers or business partners against this company are directly relevant to legitimacy assessment.
Federal court records: Search PACER (pacer.gov) for federal court proceedings involving the business. Federal cases include bankruptcy, SEC enforcement, and civil RICO actions — any of which are serious signals.
Bankruptcy records: A business in active bankruptcy proceedings may still be operating, but the implications for a new contract or payment relationship are significant. Search PACER for bankruptcy filings under the business name.
Judgment liens: A business with outstanding money judgments against it — meaning courts have ordered it to pay money and it hasn’t — has a documented pattern of not honoring financial obligations. These appear in court records and sometimes in UCC or lien filings.
→ How to Search Court Records Online → How to Search Bankruptcy Records
Step 6 — Verify the Owners or Principals
A legitimate business is run by real people with verifiable identities and professional histories. Verifying the principals adds a human accountability layer to the corporate records check.
Search the owner’s or principal’s name in Google. Do they have a professional presence — LinkedIn profile, industry association membership, years of verifiable history in the business — consistent with running a business of this type and scale?
Cross-check the owner’s name against the business’s state registry filing. Does the name match? If the person claiming to own or represent the business doesn’t appear in the official filings, ask why.
For regulated industries — financial services, real estate, insurance, contracting — verify the individual’s professional license in addition to the business license. Individual licenses are searchable through the same state licensing portals.
If the owner or principal is evasive about their identity, refuses to provide a business registration number, or claims ownership of a business that doesn’t list their name in official filings, those are direct red flags.
→ How to Verify Someone’s Identity Online → How to Check If Someone Is Using a Fake Name
Step 7 — Assess the Full Picture
No single finding determines legitimacy. No single record confirms it either — the conclusion comes from consistent results across independent systems. Consistency across independent systems is the closest thing to confirmation available in open-source verification. The goal is a consistent picture across independent sources — or a pattern of specific, documented inconsistencies.
Strong legitimacy signals:
- Active registration in the correct state, with a formation date consistent with claimed history
- Required licenses current and in good standing, with no disciplinary history
- Physical address verified as commercial and consistent with business type
- No significant complaint pattern, no regulatory enforcement actions, no major litigation
- Owners with verifiable professional histories consistent with the business
Red flags that warrant walking away:
- Not registered in the state they claim to operate in
- Registration is dissolved, revoked, or suspended
- Required license doesn’t exist or is suspended
- Significant pattern of unresolved consumer complaints or regulatory action
- Civil judgments for fraud or breach of contract
- Owner’s identity can’t be independently verified
- Address is a mailbox service or residential property with no business presence
- Formation date is recent but the business claims years of history
Yellow flags that warrant follow-up:
- Registration exists but in a different state than claimed
- License is current but in a different name than the business uses publicly
- BBB complaints exist but were resolved
- Owner’s name doesn’t appear in official filings but there’s a plausible explanation
Document your findings before making a decision. A business that can’t be verified to your standards is a legitimate basis for walking away from a contract, declining a service, or not sending a payment.
Tools for Verifying a Business
Free public records — start here
- State Secretary of State business registries — registration status, officers, registered agent; free at each state’s SOS website
- State licensing board databases — license status and disciplinary history; free, board-specific
- Better Business Bureau — bbb.org — complaint history, rating, government actions; free
- FTC enforcement actions — ftc.gov/news-events/enforcement-actions; free
- CFPB enforcement actions — consumerfinance.gov/enforcement; free
- PACER (pacer.gov) — federal court records including bankruptcy; small per-page fee
Industry-specific federal databases
- FINRA BrokerCheck — brokercheck.finra.org — broker-dealer and financial advisor verification; free
- NMLS Consumer Access — nmlsconsumeraccess.org — mortgage lender and servicer verification; free
- SAM.gov — federal contractor registration and exclusion list; free
- SEC EDGAR — edgar.sec.gov — public company filings; free
Paid tools for deeper research
- BeenVerified (beenverified.com) — owner identity and address verification; approx. $17–$26/month
- Spokeo (spokeo.com) — contact and identity cross-checks; approx. $14–$28/month
Why Business Verification Fails
Most failed business verifications come from stopping at one source or accepting surface-level signals as confirmation.
Treating a website as proof of legitimacy. A professional website can be built in a day. A website is the business’s own representation of itself — it’s not independent verification of anything.
Searching only the trade name, not the legal entity name. Businesses often operate under a trade name (DBA — “doing business as”) that differs from their legal entity name. A search for the trade name may return no registry results even if the business is legitimately registered under a different legal name. Ask for the legal entity name and search that.
Not checking for required licenses. Many consumers verify registration but skip licensing. A business that is registered but unlicensed for the work it’s selling is a significant compliance and liability risk — separate from the fraud question.
Relying solely on the BBB. The BBB is a useful starting point for complaint history. It is not a government agency and BBB accreditation is not a regulatory endorsement. Some businesses with serious issues have good BBB ratings because complaints went unreported there.
Not verifying the owner’s identity separately. A legitimately registered business can still be run by someone using a false identity or misrepresenting their professional credentials. Corporate records verification and principal identity verification are separate tasks.
→ What “No Records Found” Actually Means
Common Mistakes When Verifying a Business
Paying before verifying. Verification is most useful before money changes hands. A business that creates urgency around payment before you’ve had time to check is using that urgency deliberately.
Accepting a business card or invoice as proof of registration. Neither is independent verification. A business card listing an LLC name and a license number is only as reliable as the underlying records it points to.
Not searching for the owner by name. A business with legitimate registration can still be connected to an individual with a fraud history, prior regulatory action, or a pattern of abandoned companies. Searching the owner’s name in court records and the state registry reveals that history.
Searching only one state. A business claiming to operate nationally or in multiple states may be registered in a different state than where you’re dealing with them. Verify the registration in the state where the work is being performed, not just where the business claims to be headquartered.
Confusing “no results” with clean. No complaints in the BBB database and no results in a court records search means those specific systems have no record — not that the business has a clean history. A business that’s too new to have accumulated a complaint record is a different situation from one with years of verifiable history.
Frequently Asked Questions
How do I find out if a business is registered? Search the Secretary of State’s business entity database for the state where the business operates. Most state SOS portals are free, publicly searchable by name, and take under two minutes to use. Find your state’s portal by searching your state name plus “Secretary of State business search.”
What does “not in good standing” mean? A business that is not in good standing has failed to meet its ongoing state compliance requirements — typically failure to file an annual report or pay state fees. It hasn’t necessarily been dissolved, but it’s delinquent. In many states, a business not in good standing cannot enforce contracts. It’s a signal of poor management or an inactive entity.
Is a business license the same as business registration? No. Registration is the legal creation of the business entity with the Secretary of State. A business license is a permit issued by a state or local authority to engage in a specific type of business activity. Many businesses require both. A registered business may still be unlicensed for its claimed work.
What if the business is a sole proprietorship? Sole proprietorships typically aren’t required to register with the Secretary of State unless they’re operating under a trade name (DBA). They may be required to register the DBA with the county clerk. Licensing requirements still apply. A sole proprietorship is harder to verify through corporate filings but can still be checked through licensing databases, court records, and identity verification on the owner.
Can I verify a business for free? Yes. State Secretary of State registries, state licensing board databases, the BBB, the FTC’s enforcement database, and FINRA BrokerCheck are all free. A thorough legitimacy check can be completed entirely with free tools in under thirty minutes.
What if the business asks me to pay in cash or cryptocurrency? A legitimate business typically accepts traceable payment methods — check, credit card, bank transfer. A business that specifically requests cash, cryptocurrency, wire transfer to an unfamiliar account, or gift cards is using payment methods that are difficult or impossible to reverse. This is one of the strongest single signals of fraud regardless of how legitimate the business appears otherwise.
Final Thoughts
Verifying whether a business is legitimate takes under thirty minutes using free government sources. The Secretary of State registry, the relevant licensing board, the BBB, and a basic court records search cover the majority of legitimacy questions before money, contracts, or sensitive information changes hands.
Most business fraud isn’t sophisticated — it relies on the assumption that you won’t check. A business that doesn’t appear in any state registry, whose license doesn’t exist or is suspended, whose address is a mailbox service, and whose owner can’t be independently verified has failed on every dimension of the check. That pattern is accessible to anyone willing to spend thirty minutes on it.
For the complete, in-depth framework for researching a business and tracing its ownership structure, see: How to Research a Business and Its Owners
For the full investigation framework, start here: How to Investigate Someone
Related Guides
- How to Research a Business and Its Owners
- How to Investigate a Suspicious Tenant Application
- How to Verify Someone’s Identity Online
- How to Check If Someone Is Using a Fake Name
- How to Search Court Records Online
- How to Search Bankruptcy Records
- What “No Records Found” Actually Means
Disclaimer: This article is for informational purposes only and does not constitute legal advice. Laws and access rules vary by jurisdiction. Consult a licensed attorney for guidance specific to your situation. This article may contain affiliate links — we may earn a commission if you purchase through them, at no extra cost to you.