Due diligence in Cameroon is the structured verification of a person or company before you sign, pay or partner. This step by step guide walks through what to check, in what order, what records to use (including RCCM and courts), and how RISCAM documents findings so boards, counsel and donors can act with confidence.

Step 1: Define the exposure

Start with the decision the check protects. A one off supplier invoice, a joint venture, a senior hire and a sub grantee under donor rules do not need the same depth. Write down the maximum loss if the counterparty is fraudulent, and scope the diligence to that exposure.

Step 2: Verify the legal entity at RCCM

Pull registration details from the RCCM: legal name, registration number, registered address, capital declared and names of managers or directors on file. Compare every field to what the counterparty presented. Mismatches are stop signs until explained with documentary proof.

Step 3: Authenticate documents at source

Registration certificates, tax attestations, professional licences and contracts should be verified with issuers, not accepted from photocopies alone. Our document forensics team handles authentication when visuals look correct but numbers do not match registry records.

Step 4: Verify people behind the entity

Identify all principals, shareholders and signatories. Run identity confirmation, credential checks and RCCM searches for their other directorships. Hidden interests between a buyer and a seller, or between a programme officer and a vendor, surface here. Use background checks proportionate to each person’s authority.

Step 5: Confirm premises and assets physically

Visit the declared office, warehouse, factory or project site. A valid RCCM entry with a vacant lot or residential house behind it is a classic Cameroon fraud pattern. Photograph, date and record who met you on site.

Step 6: Research court and commercial history

Search lawfully accessible court listings and registry channels for pending suits, judgments and insolvency events connected to the entity or principals. This step is not a mythical national criminal database; it is targeted research with honest limits stated in the report.

Step 7: Map reputation discreetly

Talk to the sector: former partners, suppliers, customers where appropriate. Patterns matter more than single opinions. Discretion protects the check; the subject should not know they are being diligenced before you decide.

Step 8: Document, decide and retain the file

Compile confirmed facts, unresolved questions and recommended next steps in writing. If you proceed, keep the file in the contract record. If you walk away, the documented refusal protects you in audit. If fraud already occurred, escalate to a corporate investigation.

Red flags that should pause any deal

Pressure to sign before verification completes
Reluctance to provide RCCM references or originals
Registered address that does not match physical reality
Principals with undisclosed related companies
References that all route to the same phone number

Timelines and cost expectations

A single entity check typically completes in one to two weeks. Complex groups, rural sites or cross border elements take longer and should be phased in writing. Fees are always small against realistic loss scenarios. See our guide on the cost of skipping due diligence.

Due diligence for specific relationship types

Supplier and vendor onboarding

Confirm the vendor exists, operates at the declared site, holds required licences and is not a shell tied to your own staff. Match invoice bank details to registered entity names. One verified site visit prevents many procurement frauds.

Joint ventures and equity partners

Map all shareholders, verify contributed assets (especially land and equipment), search for prior charges and undisclosed litigation. Equity partners join your balance sheet; treat them like acquisitions.

NGO sub grantees

Evidence registration, governance, banking and prior donor history. Structure the report so compliance officers can drop it into audit files without reformatting.

Senior hires with signing authority

Combine employment verification, credential authentication, RCCM conflict checks and discreet reputation inquiry. Authority without verification is how internal fraud starts.

Who should control the check

The party bearing the loss must commission and receive the report. Do not rely on diligence performed by the counterparty or an intermediary paid on deal close. Independence is the entire value of third party verification.

After the report: three decisions only

Proceed with documented confidence and the file archived.
Renegotiate when findings are material but manageable.
Walk away when red flags cannot be cleared; the fee was cheaper than the loss.

Indecision after a clear failing report is how organisations still sign bad deals. Set a decision owner before the check starts.

Records checklist you can hand to an investigator

Full legal name and trading names of the entity
RCCM registration number and copies presented by the counterparty
IDs and CVs of principals
Contracts, invoices and land documents supporting the deal
Declared addresses of offices, warehouses and projects
Your deadline and the decision the report must support

Cameroon specifics that change outcomes

Addresses are often descriptive, not numbered. Registries may lag reality by months. Informal commerce runs beside formal companies on the same street. Documents can be genuine paper with false content. Any diligence method that skips physical verification or issuer contact will miss the most common local fraud patterns.

Worked example, anonymised

A manufacturing firm in Douala planned a distribution partnership. RCCM showed a valid registration. Site visit found the declared warehouse was a shared yard without the claimed cold storage. Reputation inquiry surfaced a prior partner who lost stock the same way. Document check showed the tax attestation format had changed years after the document date. Total time: nine working days. The firm walked away and later learned the operator had approached two competitors with the same scheme.

The case illustrates the sequence: registry first, site second, documents third, reputation fourth. Skipping any layer would have produced a clean looking file and a bad signature.

Integrating diligence into procurement and HR

Make verification a gate, not an afterthought. No contract signature, no offer letter and no sub grant release until the diligence file is attached and approved by a named decision owner. Standing arrangements with one provider reduce turnaround from weeks to days because scope templates already exist.

When to escalate from diligence to investigation

Diligence asks whether you should trust a counterparty before engagement. Investigation asks what happened after trust was misplaced. Escalate when you find active fraud indicators: forged documents, ghost sites, concealed related parties or patterns across multiple victims. RISCAM continues under one confidential relationship so evidence stays coherent.

Common mistakes that waste diligence budgets

Starting field work before registry pulls are complete
Letting the counterparty choose which documents you see
Announcing the check to the subject too early
Treating a clean RCCM pull as proof of operations
Failing to archive the report with the contract

Frequently asked questions

Is due diligence only for large deals?
No. Smaller businesses absorb losses less easily. Scope depth to exposure, not to company size.

Can diligence run after signing?
Yes, but prevention is cheaper. Post signature work supports renegotiation, exit and litigation with verified facts.

Do NGOs need a different process?
The steps are similar; the evidence format must match donor vetting requirements. Tell us the framework at intake.

Start this week

Pick the next signature on your desk. List the entity, the exposure and your deadline. Send it to RISCAM for a written scope. Due diligence is never early; it is only late once.

Why RISCAM for diligence in Cameroon

Operating since 2002, we combine RCCM and court research with field verification and document forensics under one written mandate. Clients receive honest limits, sourced findings and a file that survives audit, not a narrative built to please.

Diligence is the cheapest insurance in Cameroonian commerce. One verified file before signature prevents losses that take years to unwind.

Pair this guide with action

Use the eight steps as a checklist on your next deal. When you need independent execution, RISCAM runs the full diligence file under one mandate from Douala and Yaoundé with background checks, site verification and document authentication in house.

Whether you are signing a supplier contract, approving a sub grant or hiring a director with signing authority, the eight steps above are the minimum serious organisations run before money moves. RISCAM executes the full checklist under one confidential mandate.

Next step

Share the entity, your deadline and the decision the check supports. Contact RISCAM for a written scope and fee or call +237 679 288 686.

Reviewed by the RISCAM Investigations Team. Editorial standards · Disclaimer

Due Diligence Step by Step in Cameroon (2026 Guide)