EU Company Due Diligence Guide from Malta: Registers, VAT, EUID and Risk Checks

Direct answer

A Malta business checking an EU counterparty should start with official registers: confirm the exact legal name, registration number, country, legal form, registered office and current status. Then test the VAT number, regulated permissions, ownership and filing evidence against the proposed transaction.

The European e-Justice business-register search is a useful official entry point, but availability and document detail vary by Member State. It should be treated as an initial verification route, not as a substitute for legal, tax, AML or sector-specific due diligence.

Legal requirement vs best practice

Legal requirement: the mandatory due diligence standard depends on the transaction. AML, sanctions, tax, VAT, licensing, accounting and sector rules may apply differently to a simple supplier check, a regulated financial service, an iGaming relationship or an acquisition.

Best practice: keep an evidence file for each material counterparty. It should include registry extracts or screenshots, VAT or EORI checks where relevant, contract details, invoices, payment evidence, beneficial ownership information where available, and a dated risk note explaining the conclusion.

Five official-source checks

1. Confirm the legal identity. Use the relevant business register or the European e-Justice entry point to verify the company name, registration number, country, legal form, address and status.

2. Check the EUID or register identifier where shown. The European Unique Identifier helps connect company information across EU business-register systems, but it should still be matched to the company name and registration jurisdiction.

3. Validate VAT where the transaction involves EU supplies. Use the European Commission VIES service for VAT number validation and keep evidence of the date and result.

4. Check regulated permissions. For Malta financial-services counterparties, review the MFSA Financial Services Register. For non-Malta entities, check the equivalent national regulator where the activity is regulated.

5. Review documents and substance. Paid or official documents may include current extracts, constitutive documents, changes and officer information depending on the jurisdiction. Compare those documents with the contract value, payment route and claimed business activity.

Malta-specific checks

For a Malta company, the Malta Business Registry is the primary company-register reference. The due diligence file should normally reconcile the company name, company number, registered office, officers, filings and any available registry documents with the contract and invoice details.

If the activity involves financial services, investment services, insurance, trustees, company service providers or other regulated work, the MFSA register or the relevant regulator should be checked before relying on the counterparty's marketing material.

If the relationship involves EU goods movement or customs activity, consider whether EORI validation is relevant. EORI is not a general proof of company solvency; it is a customs identification control.

Common mistakes

A common mistake is checking only that the company name exists. The more important question is whether the exact company is active, registered in the claimed country and legally capable of doing what the contract says.

Another mistake is treating a registered address as proof of operating substance. Many EU companies use registered-office providers. Substance should be assessed through people, contracts, delivery evidence, invoices, accounts and business correspondence.

A third mistake is ignoring scale. A counterparty claiming large turnover or complex regulated activity should be able to provide documents consistent with that claim. Thin accounts, unrelated activity or unclear payment routes are risk signals.

Professional insight

For low-value routine suppliers, a dated registry and VAT check may be enough. For material contracts, regulated services, acquisitions, high-risk jurisdictions, unusual payment routes or related-party transactions, the file should move from a light check to a formal due diligence memo.

The practical control is to separate proof of existence from proof of reliability. A company can be real but still unsuitable for the transaction because of licensing gaps, tax risk, sanctions exposure, weak accounts or lack of commercial substance.

Frequently Asked Questions

Official References and Sources

Legal conclusions should be checked against official sources. Source-intake WeChat articles are drafting inputs only until reviewed.

• Primary sourceEuropean e-Justice Portal - Business registers search
• Primary sourceMalta Business Registry
• Primary sourceMFSA Financial Services Register
• Primary sourceEuropean Commission - VIES VAT validation
• Primary sourceEuropean Commission - EORI number validation
• Source intakeSource intake: 马耳他-欧盟公司尽调5步核查方法