The merchant nobody actually checked

A business signs up. It uploads a document, fills in the fields, and the check comes back clean. What the check almost never asks is the harder question: who actually owns this, is any of it real, and does the name brush a watchlist. Those questions get skipped, because asking them by hand across a dozen registries and sanctions lists is slow. So they go unasked, and the risk walks straight through the front door.

Sourcemark asks them in about 90 seconds. Here is one scan, start to finish.

Take a small home-goods brand. Tidy storefront, a couple of products, nothing obviously wrong. The kind of merchant that clears onboarding without a second look. Here is what surfaced. We do not name the business, and neither do these notes.

Notice what the verdict does not say. It does not say fraud. Plenty of honest businesses use domain privacy and run small websites. That is exactly why the score lands at Medium and reads "worth a look," not "reject."

The job is to hand a person the receipts and let them decide, not to convict a candle shop on a hunch.

A tool that cries wolf on every thin website is worse than no tool at all. The point is to raise the right hand, softly, and show your work.

The tone changes when a real match shows up. A confirmed sanctions hit is terminal. It pegs the verdict to Critical, and no amount of good signals can buy it back.

A partial name match is treated differently. It is a soft flag, something for an analyst to clear, not an automatic fail. That line is the whole game. It is the difference between catching a genuinely dangerous account and wrongly branding someone whose only crime is sharing a name with a bad actor.

Behind each line in that scan is a source you can open. Sourcemark checks thirteen official sources and timestamps where each finding came from. Same inputs, same verdict, every time. No black box, nothing to argue with, just the paper trail.