KYC for Distributors and Resellers in Export Sales

Table of Contents

KYC for distributors and resellers means verifying a channel partner’s identity and ownership, then going further than you would for an end customer: you have to understand who they resell to, in which territories, and under what controls. A distributor buys to sell on. Your product keeps moving after the invoice is paid, and the law in most export regimes follows it.

That is the whole difference. With a direct customer, you ask what the goods are for and get one answer. With a distributor, the honest answer is “many customers, most of whom I have not met yet.” So the file looks different: less about a single transaction, more about the partner’s own controls and the contract terms that let you act when something goes wrong.

Why a distributor is a harder problem than an end customer

First, the end user is unknown at the time of sale. Export control regimes generally require you to consider the end use, the end user and the ultimate destination. A distributor breaks that chain of sight on day one, and you have to rebuild it through contract terms and reporting rather than observation.

Second, re-export rules follow the goods. Items of US origin, and in some cases foreign made items with controlled US content, stay subject to the originating country’s rules after they leave. A shipment from your distributor in one foreign country to a customer in another can still be your problem.

Third, the distributor has commercial reasons to be vague. Their customer list is their asset. They will resist handing it over. That tension has to be resolved in the agreement, before the first order, not during an investigation.

What to collect before you appoint a distributor

Run the standard entity checks first. Certificate of incorporation or registry extract. Registration number verified in the registry itself. Registered and trading addresses checked separately, because a warehouse operation registered at a formation agent’s address deserves a question. Ownership chart down to named individuals. Identification and authority for the signatory.

Then add the channel specific set:

Trading history: how long in this product category, which brands they already carry.
Territory: the countries they sell into today, not the ones in the agreement draft.
Customer profile: sectors served, approximate split, and whether any government or military end users are in the mix.
Warehouse and logistics: do they hold stock, or ship direct from your warehouse to their customer?
Onward sales channels: own sales force, sub-dealers, online marketplaces, or all of these.
Their compliance setup: is there a named person, a written procedure, a screening process, training records?
Prior compliance history: any export or sanctions enquiry, denial, penalty or licence refusal involving the company or its directors.
Technical capability: service engineers, installation staff, and whether they can support the product they are selling.

The last one catches more than people expect. A reseller with no engineers taking on a complex capital product is usually a pass through.

Screening the distributor, its owners and its sub-dealers

Screen the legal entity name, every trading name, the registered address, the directors and the beneficial owners. Screen the bank if payment routes through an unexpected jurisdiction. Then screen again on every order, because lists change between appointment and shipment.

Name matching alone misses ownership based restrictions. Several regimes treat an entity as blocked when designated persons hold ownership above a set proportion, directly or in combination. A clean name check on a distributor whose parent is designated is a false clear. Run a denied party screening check on the entity, then work up the ownership chart layer by layer.

Restricted party lists are not interchangeable. Some prohibit dealings outright. Some restrict specified items, or require a licence with a presumption of denial. The BIS Entity List works differently from a blocking designation. Your procedure should record which list produced the match and the handling rule for that list.

Sub-dealers are the blind spot. If your distributor appoints resellers beneath it, those parties handle your product and you hold no contract with them. Require a sub-dealer register, updated quarterly, and screen the names on it. Most distributors accept this as a condition of appointment.

Mapping the resale territory and downstream demand

Write the authorised territory as a list of countries, not a region name. “Middle East” and “Asia Pacific” include destinations carrying very different restrictions. A clause that names countries is enforceable. One that names a continent is an argument waiting to happen.

Then sanity check demand. If a distributor in a small market orders volumes the local market could never absorb, the surplus is going somewhere. Compare order volume against installed base or the size of the relevant industry in that country. Crude test. It works.

Pay attention to transshipment hubs. Some jurisdictions handle enormous re-export volumes as a legitimate part of their economy, which also makes them useful to anyone moving goods toward a restricted destination. Selling into such a market is lawful. Selling into it without asking where the goods go next is where companies get caught. Many red flags of sanctions evasion show up first as odd distributor behaviour.

Matching controls to the distributor model

Not every channel partner needs the same file. The model they operate changes both the risk and the control that works against it.

Partner model	Main risk	Controls that fit	Suggested review cycle
Sales agent (no title to goods)	Bribery and commission abuse; you still contract with the end customer	Agent vetting, commission caps, anti-bribery clause, full KYC on the end customer	Annual
Drop-ship reseller	You ship to an address you did not vet	Screen the consignee on every order; end user statement per shipment	Per order plus annual
Stocking distributor	Inventory resold outside territory; end users invisible	Sub-dealer register, periodic sales-out reporting, audit right, serial tracking	Semi-annual
Value added reseller or integrator	Your item becomes part of a system with a different end use	End use declaration describing the integrated product; technology transfer controls	Semi-annual
Online marketplace seller	Anonymous buyers, cross border shipping outside your control	Restrict listed SKUs, geo-block destinations, require order data feed	Quarterly
Distributor in a transshipment hub	Diversion to a restricted destination	Named-country territory clause, end user named per order, on-site verification	Quarterly with per-order review

End user statements and what they do not do

An end user statement records who receives the goods, what they will be used for, and a commitment not to re-export without authorisation. It is signed by the end user, not the distributor. It should carry the item description, quantity, the end user’s legal name and address, the signatory and the date.

Useful, with limits. The statement is a representation, not a verification. It proves you asked. It does not prove the answer is true, and it gives you no defence if you held information suggesting otherwise. A signed statement sitting beside an unresolved red flag is worse than no statement, because it shows you were on notice.

Where an item needs authorisation, the statement often supports the application rather than replacing it. If you are unsure whether a channel sale triggers an authorisation requirement, work through whether you need an export licence before the order is accepted, not after the goods are packed.

Clauses that belong in the distributor agreement

Diligence you cannot enforce is a memo. These provisions turn findings into rights.

Compliance with all applicable export control and sanctions laws, named where a specific regime applies.
A no diversion undertaking covering onward sale, re-export and transfer within a country.
Territory defined as a list of named countries, with written approval required to sell outside it.
Prohibited end uses and prohibited end user categories written out.
An obligation to screen its own customers against restricted party lists and to keep the results.
An obligation to disclose the end user’s identity on request, within a stated number of days.
A sub-dealer register, provided on a fixed schedule and updated on appointment.
Notification within a short fixed period of any enquiry, seizure, denial, or suspected diversion.
Record retention for a defined period, matching your own retention rule.
Audit and inspection rights, including on-site visits for higher risk partners.
Suspension and termination rights that can be exercised on reasonable suspicion, not only on proven breach.
Flow down: the distributor must impose equivalent terms on its sub-dealers.

The suspension standard matters most. If your clause requires proof of a violation before you can stop shipping, you will be shipping through the entire period when you most want to stop.

Red flags after appointment

Onboarding catches the obvious problems. The interesting signals arrive later.

The distributor refuses to name an end user on a specific order after previously naming them.
Delivery address changes after the order is confirmed, particularly to a freight forwarder or a free trade zone.
Payment arrives from a company unrelated to the distributor, or from a third country.
A request to alter the invoice value, the goods description, or to leave a party off the shipping documents.
Order mix shifts toward a single controlled item with no matching service or spares demand.
The customer shows no interest in installation, calibration, training or warranty.
Repeat orders for identical configurations in quantities a single site would never use.
Warranty registrations or service calls arriving from countries outside the agreed territory.

That last one is the most underused control in the channel. Serial numbers, warranty registrations and return authorisation records tell you where product physically ended up, independent of what anyone declared. Compare shipped serials against registered serials by country each quarter. Leakage shows up as a pattern.

When a flag appears, hold the shipment and resolve it in writing before release. Record what was asked, what came back and who approved. Shipping while a question is open turns a compliance issue into a knowledge problem, and the penalties for dealing with a denied party turn substantially on what the company knew or should have known.

Ongoing monitoring, audits and post shipment checks

Set three layers and keep them separate.

Continuous screening

Rescreen the distributor, its owners, its sub-dealers and known end users whenever the lists update. Point in time screening at appointment is worth very little a year later. A small exporter can start with Globalior’s free screening tool and a scheduled reminder, then automate once the partner count grows.

Periodic review

On the cycle set by the partner’s tier, refresh the ownership chart, recheck the registry entry, request an updated sub-dealer register and review the sales-out data against the territory. Record the conclusion and the next review date.

Verification

For higher risk partners, verify physically. Visit the warehouse. Count stock against your shipment records. Ask for their screening logs and pick three customer files at random. An announced visit still works, because preparing for it forces the partner to build the records.

Suspending or exiting a channel partner

Exits get handled badly because nobody plans them. Decide the sequence in advance.

Suspend new order acceptance immediately. Do not wait for legal review to finish.
Hold goods in transit where the terms allow, and tell your forwarder in writing.
Check whether a reporting obligation has been triggered, and take advice on voluntary disclosure before making statements to the partner.
Freeze credit and stop rebate or incentive payments.
Deal with inventory the partner already holds: a last time buy back, a resale approval process, or sales only to pre-approved end users.
Remove them from your website and partner locator, and reclaim brand assets.
Retrieve the records you are contractually entitled to, including the sub-dealer list, before the relationship sours further.
Retain your own file for the full retention period. Terminated partners are what an audit asks about.

Be careful about what you say to the partner while a possible violation is under review. Tipping off rules and disclosure strategy both bear on it, and a poorly worded termination letter can complicate a later filing.

Building a channel programme and unsure where the screening step belongs? Talk to the Globalior team and we will look at your distributor onboarding flow with you.

Key takeaways

A distributor hides the end user at the point of sale, so the file has to cover the partner’s own controls and customer base rather than a single transaction.
Re-export rules can keep goods subject to the originating country’s controls after they leave your distributor, which is why onward sales are your concern.
Screen the entity, its trading names, its directors, its beneficial owners and its sub-dealers, and rescreen on every order because lists change.
Define the authorised territory as a list of named countries, since region names include destinations with very different restrictions.
An end user statement is a representation, not a verification, and it offers no protection where a red flag was left unresolved.
Serial number and warranty registration data reveal where product physically ended up, independent of what was declared.
Termination rights should be exercisable on reasonable suspicion, because a proof standard keeps you shipping during the period you most want to stop.

Frequently asked questions

Do I need an end user statement for every distributor order?

Not always. For uncontrolled goods into a low risk territory, a general undertaking in the distributor agreement is usually proportionate. For controlled items, sensitive destinations, or any order carrying a red flag, ask for a statement signed by the named end user for that specific shipment. Set the rule by item classification and destination, then apply it consistently.

Can a distributor refuse to give me its customer list?

Commercially, yes, and many will try. The workable compromise is disclosure on request for specific orders rather than a standing list, plus a sub-dealer register and aggregated sales-out data by country. Put the obligation in the agreement at appointment. Asking for it for the first time during an investigation almost always fails.

Am I liable if my distributor sells to a sanctioned party without telling me?

It depends on the regime and on what you knew. Many export control provisions turn on knowledge, which includes awareness of a high probability and deliberate avoidance of the facts. Documented diligence and escalated red flags matter. A company that screened, asked and acted stands in a very different position from one that did not look.

How often should I rescreen an existing distributor?

Screen at appointment, at every order, and whenever the underlying lists are updated. Layer a full file review on top: quarterly for partners in transshipment hubs or handling controlled items, semi-annually for stocking distributors, annually for low risk agents. Write the frequency and the reason into the policy so the interval can be defended later.

What is the difference between vetting a distributor and vetting a direct customer?

A direct customer gives you one end use to assess and one destination to check. A distributor gives you a channel. You assess their controls, their territory, their sub-dealers and their willingness to disclose, then you build contract rights to reach the information you cannot observe. The identity checks are the same. Everything after that differs.

What should I do if a distributor’s ownership changes?

Treat it as a trigger for a full refresh, not a note on file. Pull the new ownership chart, identify the beneficial owners and use a free denied party screening tool on every new name and the new parent. Reassess the risk tier. A change of control can move a partner from routine to prohibited in a single transaction.