Is a scanned image of a signature legally valid in China?

Understanding Scanned Signatures in China

In the digital age, businesses increasingly rely on electronic methods to execute contracts and documents, raising questions about the validity of simpler alternatives like scanned images of handwritten signatures. A scanned image of a signature—essentially a digital copy of a physical signature—may seem convenient for quick approvals, but its legal standing varies by jurisdiction. In China, this practice intersects with evolving regulations on electronic signatures, where reliability and authentication are paramount. From a business perspective, understanding these nuances is crucial to avoid disputes, ensure compliance, and streamline operations in a market known for its stringent digital governance.

China's approach to electronic signatures is governed by the Electronic Signature Law of the People's Republic of China, enacted in 2005 and effective from April 1, 2006. This law distinguishes between "reliable electronic signatures" (which carry the same legal weight as handwritten ones) and ordinary electronic signatures (which may suffice for less critical documents but require additional verification). A scanned image typically falls into the ordinary category unless accompanied by robust authentication measures, such as digital certificates or biometric verification. For instance, under Article 3, a reliable electronic signature must be uniquely linked to the signer, allow identification of any alterations, and be created under the signer's sole control. Mere scanning often fails these criteria, as it lacks inherent security against forgery or tampering.

Businesses operating in China must consider the Civil Code (effective 2021), which reinforces that electronic data messages can serve as evidence if they meet authenticity standards. Courts have ruled in cases like the 2018 Supreme People's Court interpretation that scanned signatures without encryption or audit trails may not hold up in disputes, particularly for high-value contracts in sectors like real estate or finance. This fragmentation encourages companies to adopt certified platforms over ad-hoc scans, balancing cost with legal risk.

Legal Framework for Electronic Signatures in China

Delving deeper into China's regulatory landscape, the Electronic Signature Law sets a high bar for digital equivalence to wet-ink signatures. Reliable electronic signatures require third-party certification from accredited authorities, often involving public key infrastructure (PKI) or hardware tokens. Scanned images, by contrast, are akin to attached images in emails and are only valid if the parties mutually agree to their use and the context implies intent—per Article 7. However, in practice, this mutual agreement is rarely formalized, leading to vulnerabilities.

The law aligns with international standards but emphasizes data sovereignty, influenced by cybersecurity laws like the 2017 Cybersecurity Law and the 2021 Data Security Law. For cross-border deals, the Personal Information Protection Law (PIPL, 2021) adds layers, mandating localized data storage for sensitive signatures. In APAC, China's model exemplifies the region's "ecosystem-integrated" standards, where electronic signatures must integrate with government digital IDs (e.g., via APIs for real-name verification) rather than relying on Western-style email confirmations. This contrasts with framework-based approaches in the US (ESIGN Act) or EU (eIDAS), which prioritize broad applicability over deep governmental ties.

From a commercial viewpoint, this rigor protects against fraud in China's vast e-commerce ecosystem—think Alibaba or Tencent transactions—but it challenges foreign firms. A 2023 report by the China Academy of Information and Communications Technology noted that 70% of digital contract disputes involved inadequate authentication, underscoring the need for compliant tools. Scanned signatures might work for internal memos but falter in enforceable agreements, potentially voiding deals and incurring penalties up to RMB 100,000 under PIPL violations.

Business Implications of Using Scanned Signatures

For multinational corporations, the invalidity of standalone scanned signatures in China amplifies operational risks. In supply chain agreements or IP licensing, where disputes could escalate to arbitration, businesses report higher litigation costs—averaging 20-30% more per case when relying on non-reliable methods, per a 2024 Deloitte study on APAC digital contracts. This pushes adoption of certified eSignature solutions, which embed compliance features like timestamping and blockchain auditing.

Yet, opportunities arise for agile providers. China's digital economy, projected to hit $7 trillion by 2025, demands scalable, localized verification. Companies scanning signatures for speed often face retroactive validation costs, eroding efficiency gains. Neutral observers note that while scans offer low barriers for SMEs, larger enterprises prioritize platforms ensuring "non-repudiation"—a core legal tenet in Chinese courts.

2026 update: a scanned signature image is not a digital certificate

A pasted image may indicate intent in some transactions, but it normally lacks the cryptographic identity, integrity, status, and audit evidence available from a certificate-backed digital signature. The 2026 certification rules reinforce the need to understand the trust service behind higher-assurance methods.

State Cryptography Administration Order No. 6 took effect on 1 July 2026. It regulates the use of commercial cryptography by electronic certification service providers; it does not amend the Electronic Signature Law or automatically determine the validity of every contract. The separate T/CQAE 11034-2025 business-rule standard provides operational guidance and should not be described as the text of Order No. 6.

Read the China electronic certification and signature assurance levels for the official timeline, the distinction between the two licensing layers, and the eSign.AI/e签宝 China capability model.

What to verify

• Assess whether the parties can prove who applied the image and intended to sign the specific document.
• For higher-risk agreements, use stronger authentication and a verifiable certificate-backed signing method.
• Retain the original file, event history, certificate and timestamp data, and evidence of delivery and acceptance.