One of the notable paradoxes in tax administration today is that a transaction can be completely real but still becomes the subject of review when the supplier is found to be illegally buying and selling invoices. On the contrary, the fact that a business is investigated for invoices does not mean that all of its customers are violating the law.

A business that is found to be illegally buying and selling invoices can still simultaneously carry out real business transactions
This shows that the risk of the business no longer lies in the invoice itself, but in the ability to prove the essence of the entire transaction. In an increasingly data-driven tax management environment and the ability to reconcile invoices, cash flows, tax declarations, and business operations, the important question is no longer simply whether the business has an invoice, but whether it accurately reflects a verifiable economic transaction.
A supplier violating does not mean that the customer also violates
A business that is found to be illegally buying and selling invoices can still simultaneously carry out real business transactions. Therefore, it is impossible to infer that all invoices issued by them are associated with fake transactions only from the fact that the supplier is investigated, much less can it be taken for granted that every customer is a party to the violation.
The buyer's responsibility needs to be evaluated on a case-by-case basis.
First, whether the goods or services are actually provided or not. Second, whether the invoice reflects the right subject, content and value of the transaction. And third, whether the purchasing business knows, participates in or has grounds to recognize the irregularity in the transaction.
If the goods are actually purchased, delivered, paid at the actual value, and the invoice reflects the correct transaction, the supplier's breach in other transactions cannot automatically give rise to liability to the customer.
But the risk is different if the goods are real while the invoice is issued by a different entity than the actual party providing it, the flow of money goes through inappropriate accounts, or there are agreements that are outside the official records. The risk is even greater if the invoice is not associated with the real transaction, the money is transferred and then returned, or the business knows and coordinates the use of the invoice to legalize costs or tax obligations.
So, "real trading" is an important factor, but not an absolute shield.
Real transactions are unlikely to solve the tax problem
A relatively common misconception is that only by proving that the goods were actually purchased and used, the invoice must naturally be accepted for tax purposes. This understanding is incomplete.
The economic nature of trading is only one layer of evaluation. The other layer is tax and invoice compliance: whether the invoice is legal or not, whether it reflects the right subject and content of the transaction, whether the payment and declaration meet the applicable legal conditions. Therefore, a completely real transaction may still have tax consequences if the documents or methods of executing the transaction do not meet the legal requirements.
This point also shows that it is necessary to distinguish between criminal liability and tax consequences. A business that does not participate in the illegal purchase and sale of invoices does not necessarily mean that all related invoices are accepted for VAT deduction or included in deductible expenses.
If the invoice is determined to not meet the applicable conditions, the enterprise may be subject to adjustment of input tax, type of expense when calculating corporate income tax, late payment interest or sanctioned depending on the nature of the case.
The financial consequences must also be assessed on the actual tax status of the business, rather than applying a mechanical calculation to every case. For example, if the business has a loss to be carried forward, eliminating an expense may first reduce the amount of loss carried forward to the next period, rather than immediately creating the entire amount of tax payable.
Notable boundaries lie in the level of knowledge and participation
In fact, businesses often explain that they "don't know" the supplier has illegal invoice trading. But "don't know" and "don't have a reason to know" aren't exactly the same.
If the transaction is carried out in accordance with the normal business process, the goods delivered at the specified location, quotations, purchase orders, invoices, contacts, and payment accounts are all associated with the supplier, the business will have a more favorable basis to prove that it did not participate or did not know of the partner's violation.
On the contrary, if there are signs such as the seller only uses personal emails, requests payment to a personal account or a third party, the goods are delivered by one subject but the invoice is issued by another legal entity with unknown relationship, the business needs to have a reasonable reason to explain why the transaction continues.
An individual abnormal sign is unlikely to prove a violation. However, multiple signs that appear simultaneously that the business does not check or still accept the transaction can significantly undermine the argument that the business is completely unaware and has no basis for suspicion.
The boundaries of risk become more pronounced if there are additional factors such as invoices that are not tied to real goods, money being refunded, there is a "fee" to receive invoices, or documents created to legitimize a transaction that does not exist. Therefore, the problem lies not only in whether the goods are real or not, but also in the level of awareness and participation of the buying business itself.
An invoice must be placed in the entire transaction chain
A common mistake is to treat an invoice or payment document as the center of proving a transaction. In fact, each document reflects only one link in the entire buying and selling process.
An invoice showing that the voucher has been issued. A money order shows that the money has been transferred. A warehouse receipt shows that the system records the goods that were imported. But no document, standing alone, can prove the whole nature of the transaction.
Proof value is only truly formed when businesses can connect documents into a unified chain, from the need to purchase, approve, order, delivery, warehousing, payment to the use of goods. It is the consistency between these links that creates a verifiable "trading story".
This is also why seemingly small gaps in day-to-day operations can become significant when a supplier is under investigation. A transaction that does not have a full contract, orders over the phone, no camera data, or a lack of shipping documentation is not necessarily a fake transaction. But the more links that cannot be reconciled, the weaker the ability of businesses to prove the nature of the transaction.

Payment from the account of the purchasing business to the account in the name of the selling business is a favorable factor.
Transparent cash flow is a strength but not absolute
Payment from the account of the purchasing business to the account in the name of the selling business is a favorable factor. The failure to record money returned to the buyer also helps businesses refute the suspicion that cash flows are only used to legalize documents. However, bank documents only prove that the money has moved.
It does not prove by itself that the goods have been delivered, that the recipient of the money is the subject of the supply of the goods, or that there is no agreement between the parties other than the records. Therefore, cash flow is only really valuable when it matches the rest of the transaction: the subject of sale, invoices, forwarding and the use of goods.
The same applies to warehouse receipts, acceptance or delivery confirmations. These documents are valuable when they fit together and are formed in the ordinary course of business, not when they are viewed as independent evidence to replace an entire chain of transactions.
When a risk arises, the first issue is the evidence
When receiving a request from the competent authority, the natural reaction of the business is usually to immediately build an explanation affirming that it is not involved. But it's more important to preserve and review the evidence before forming any conclusions.
Records, electronic data and information from relevant departments need to be kept as they are so that businesses can reconstruct the transaction process. A particularly important principle is not to "complete" the dossier after the case arises by creating new or modifying documents in order to fill in the gaps.
In many cases, an incomplete dossier that reflects reality is still more valuable than a complete set of documents in terms of form but formed after the risk has appeared.
This reflects a broader reality: the most valuable evidence is often not the document created to serve an accountability, but the trace that is naturally formed in the course of business.
Supplier due diligence isn't just about choosing the right one
Supplier audits are often seen as a fraud prevention measure. But its value lies in another aspect: creating a trail that shows that the business has taken reasonable checks at the time of the transaction.
Registration information, tax identification numbers, operating addresses, bank accounts, representatives, supply capacity, and direct transactions can all become important data if commercial relations are later reviewed. Therefore, invoice risk management cannot be the sole responsibility of the accounting or tax department. An invoice appears at the end of the purchase chain, while the risk has already formed through the process of supplier selection, negotiation, ordering, delivery and payment. The control mechanism must therefore be placed in the entire procurement process and supplier administration.
The fight against illegal invoice sales is changing the way businesses view tax administration. What the regulator is increasingly assessing is not whether the business keeps enough documents, but whether those documents reflect a genuine economic transaction or not. As data becomes the cornerstone of tax management, the ability to prove the nature of a transaction will gradually become more important than the invoice itself.
Invoice risk management, in the end, does not lie in how many documents the business keeps, but in whether those documents reflect a real, reasonable and consistent economic transaction.
