Buyer Guide 9 min read

The Exact Due Diligence Process on Empire Flippers: From Access to Close

Buying an online business is not about finding the best listing. It is about verifying the truth behind the numbers. Here is the precise workflow to execute safe, profitable acquisitions.

2026-08-28  ·  By Sophal Lanh, Founder of Deal Alert AI

Deal Alert AI is reader-supported. We earn commissions from affiliate links at no cost to you.

This post is based on a video from our Deal Alert AI YouTube channel. Watch the original or read the full breakdown below.

Why the Due Diligence Process Matters More Than the Listing

Most buyers make the critical mistake of falling in love with a business because it has a catchy name or a growing social media following. They start negotiating based on surface-level metrics and emotional attachment. This is how you end up overpaying for a business that is quietly bleeding cash through hidden churn rates, technical debt, or ad dependency. The listing page is a brochure, not a financial audit. It is designed to look good. Due diligence is the process that strips away the polish to reveal the actual health of the asset.

When you engage with a marketplace like Empire Flippers, you are entering a structured environment. Unlike unverified listings on Flippa, where you might have to negotiate directly with a seller who prefers obscurity, Empire Flippers enforces a standard of documentation. However, that standard is the floor, not the ceiling. You still need to actively drive the questioning process. Passive acceptance of provided spreadsheets is the single biggest risk factor in online asset acquisition.

The goal of this phase is not to dismantle the business, but to simulate owning it. You are trying to answer one specific question: "If I bought this today for the asking price, will I have the cash flow I projected in six months?" Every step from here, from requesting the data room to scheduling the seller transition call, is in service of that single metric. If you cannot verify the revenue streams, the cost of goods sold, or the operational load, you should walk away. I have seen too many buyers spend weeks on a deal they should have killed in three days due to a lack of clarity in the financials.

Step One: The Financial Audit and Revenue Verification

Get Free Deal Alerts Every Morning

We scan Empire Flippers, Flippa, Acquire.com and Quiet Light daily — scoring every listing. Start free.

The first thing you will look at in the data room is the Profit and Loss statement, typically the last 12 to 24 months. Do not just look at the net income. Break it down line by line. Start with gross revenue. If the business claims $10,000 in monthly revenue, you need to see the raw data that supports that. For e-commerce, this means looking for credit card processor exports, not just Shopify admin screens. For SaaS, it means looking at Stripe dashboards and churn reports. Screenshots can be faked; raw financial exports are much harder to manipulate.

Next, scrutinize the Cost of Goods Sold (COGS) and operating expenses. A common red flag is a spike in advertising spend that correlates with a spike in revenue. This suggests the business is buying growth rather than building an organic engine. If you remove the ad spend, does the business survive? If the answer is no, you are not buying a business; you are buying a treadmill that requires constant fuel. I advise calculating your own break-even point. If the margin is razor-thin, any slight fluctuation in ad costs or supply chain issues will turn a profitable month into a loss.

Key Insight: Never rely solely on the seller's representation of their monthly net income. Recalculate it yourself using conservative estimates for one-off revenue items. If the seller includes a large one-time sale from a year ago, exclude it. You want to know the run-rate performance, not the peak performance. If the numbers don't match the listing description by more than 5-10%, request an immediate explanation before proceeding further.
The 10% Rule of Verification: If any single line item in the P&L varies by more than 10% from month to month without a clear, documented reason, flag it. This inconsistency usually indicates poor record-keeping or hidden costs that pass through as "other expenses." It is a sign of operational chaos that you will have to inherit.

Finally, check for any outstanding liabilities. Are there vendor debts? Unpaid marketing agency retainers? Pending customer refunds? These are cash obligations that leave the business when you buy it, but they are often overlooked in the purchase price negotiation. Ensure that the "Assets" column includes all owned domains, IP rights, and inventory. If inventory is sold independently, it is usually excluded from the deal price, so do not include it in your valuation model unless you are specifically buying the stock as well.

Step Two: Traffic Analysis and Source Dependency

Revenue is only one side of the coin. You need to understand where the customers come from. Request the last 12 months of traffic data from Google Analytics or a similar tool. Segment this traffic by source. If over 60% of your traffic comes from a single channel, such as Facebook Ads or a single SEO keyword, you have a high-risk profile. This dependency creates vulnerability. If Google updates its algorithm or Facebook changes its pricing structure, your entire business model could crater overnight.

Look for a diversified traffic mix. A healthy business usually has a blend of direct traffic (brand searches), organic search, email lists, and paid advertising. If the business has a large email list, that is a significant asset because you own that customer relationship. Email traffic provides a predictable baseline of revenue that is not subject to algorithmic fluctuations. I always ask sellers for their email open rates and click-through rates. If the list is bought or scraped, the engagement metrics will be abnormally low, and conversion rates will suffer.

The Ad Dependency Trap: If a listed business makes 80% of its revenue from paid traffic, and the Return on Ad Spend (ROAS) is only 1.5x or 2x, assume the margin will compress post-acquisition. Sellers often hide the true cost of customer acquisition by not including all agency fees or creative costs in the "Marketing" line item. Verify the true CAC (Customer Acquisition Cost) before you value the retention metrics.

Examine the trends, not just the averages. Is traffic growing month-over-month, or is it stagnating? A business with $50,000 in monthly revenue but declining 5% every month is dying, even if the current cash flow looks good. You need to see momentum. Conversely, a new business with low revenue but 20% month-over-month growth might be a better investment than an older business that is flat. The direction of the arrow is just as important as the size of the number.

Step Three: Operational Due Diligence and Code Review

For technical businesses, such as SaaS, marketplaces, or complex e-commerce sites, you need to look under the hood. This is where many buyers fail. They buy a "black box" website and don't realize it runs on a developer who is about to quit. If you are buying code, you need a code review. Check for documentation. Are there README files? Are there deployment scripts? If the code is spaghetti-esque, full of commented-out trash, and lacks version control history, you should assume you will have to rewrite significant portions of it.

The cost of technical debt is often higher than the purchase price of the business. If the site currently has 10,000 users and you fix a critical bug that takes three weeks of engineering time, you have halted revenue for 840 hours. Calculate the hourly value of the business and multiply it by the estimated time to fix the known issues. If that number is high, your offer should be adjusted downward. I usually present a technical audit report during negotiations to justify a price reduction. It is a legitimate business reason to lower the valuation.

Beyond the code, consider the operational load. How many hours per week does the seller currently work? If the buyer guide claims the business can be run with "3-5 hours a week," but the seller admits to working 30 hours a week, there is a dispute. Which number is real? In my experience, the seller's self-reported hours are often optimistic because they mix personal interest with profit motive. If you are a solo buyer, you need to accurately assess your own capacity. If you cannot handle the volume of customer support tickets, do not buy a high-touch service business.

**Checklist: Operational Red Flags to Watch For**
  1. Lack of Documented Processes: No SOPs (Standard Operating Procedures) for daily tasks means you are guessing how the business should run.
  2. Key Person Dependency: If one person handles all customer service, coding, and logistics, the business stops when they sleep.
  3. Outdated Tech Stack: If the platform is no longer maintained by the vendor, security risks and feature stagnation are inevitable.
  4. High Churn Rate: If customers leave at a 5% monthly rate, you are constantly filling a leaky bucket with expensive ad spend.
  5. Manual Data Entry: If revenue data is manually copied from email to a spreadsheet, there is a high risk of error and fraud.
  6. No Backup Strategy: If the website was hosted on a free tier with no backups, one server crash could destroy months of data.
  7. Third-Party API Risks: If the core product relies on an API from a competitor or a small unstable provider, you have no leverage.
  8. Legal Compliance Gaps: Missing privacy policies, GDPR non-compliance, or lack of terms of service can lead to lawsuits post-acquisition.

Step Four: The Data Room and Access Protocols

On Empire Flippers, the data room is the central hub for all due diligence. You will receive a secure link after signing a Non-Disclosure Agreement (NDA). This access is not unlimited. It is time-bound. You typically have 7 to 14 days of exclusive access. This window is short. You need to know exactly what you are looking for before you even open the folder. If you waste three days confused by the file structure, you are already behind schedule.

Organize your due diligence before you log in. Create a spreadsheet with tabs for Revenue, Expenses, Traffic, Assets, and Legal. As you review the data room, input the data points into your own spreadsheet immediately. Do not trust the seller's pre-filled Excel sheets as the source of truth; they may have formatting tricks that hide inconsistencies. By inputting the data yourself, you create your own audit trail. This is crucial if you later need to dispute a metric during price negotiation.

Communication with the seller is managed through the marketplace. You should not meet the seller directly for the initial financial review. Keep all communication on the platform. This creates a record of what was shared and when. If a seller forgets to send a critical document, you can see the timeline. If you find an error in the documents, flag it in the platform chat. The marketplace mediators will follow up. This professional distance protects you from emotional pressure and helps maintain objective decision-making.

Step Five: Negotiation Strategies Based on Findings

Due diligence is not just about finding problems; it is about building a case for a better price. Every issue you find becomes a lever. If you find that the seller's revenue is growing but their ad costs are rising faster, you can argue for a lower multiple. If you find that the email list is low quality, you can deduct the value of the brand asset portfolio. Do not just accept the asking price because the seller likes you. If the evidence shows the business is riskier than presented, you must adjust your offer accordingly.

What if the seller says your findings are incorrect? This is where documentation matters. You do not need to be aggressive. You simply present the data. "I looked at the Stripe data from July to December and the average order value is $45, but the P&L shows $52. Can you explain this discrepancy?" Usually, the seller will say they made a mistake or there was a coupon strategy that affected the AOV. This conversation shifts the dynamic from "Are you lying?" to "Let's align on the facts." The fact-aligned price is the fair price.

Consider Earn-It clauses in your negotiation. If you are uncertain about the long-term viability, propose a portion of the purchase price be held back in an escrow account, to be released after 6 months if certain KPIs are met. For example, if you are worried about churn, hold back 10% of the deal price, to be released if the monthly churn stays below 5% for the next two quarters. This aligns the seller's incentives with your success. If they are confident in the business, they will agree. If they hesitate, you know they are not as confident in the stability as they claimed.

The Exit Strategy Check: Before you sign, ask yourself how you will exit this business in 5-10 years. If the business is too niche or too dependent on current trends, your resale value will be limited. A due diligence process should also include analyzing the "resaleability" of the asset. Is the IP brandable? Is the traffic sustainable? If you cannot mentally see a future buyer for this asset, you are buying a job, not an investment.

Step Six: Closing, Escrow, and Post-Acquisition

Once you have agreed on a price, the closing process begins. On Empire Flippers, the transaction is handled via a closed-source escrow service. You wire your funds to the escrow agent, not the seller. The seller then transfers ownership of the domains, social media accounts, and code repositories. Only when the escrow agent confirms that all assets have been successfully transferred and verified does the money release to the seller. This is the safety net that makes the process viable for anonymous transactions.

The transition period is often 2-4 weeks. During this time, the seller typically stays on to help hand over keys, passwords, and vendor relationships. Use this time to build relationships with key suppliers, hosting providers, and employees. If there are employees, meet them. If there are major vendors, call them. Establish that you are the new decision-maker. This prevents chain-of-command chaos in the weeks after the sale closes. If you do not introduce yourself to the ecosystem, you will be blindsided if a vendor raises prices or if an employee resigns during the transition.

Finally, as a buyer, you should always check Deal Alert AI to see how your acquisition stack compares with the broader market. We analyze thousands of closed deals to provide data on multiples by industry, so you can ensure you didn't pay too much compared to peers. Many buyers only look at one or two platforms like Empire Flippers or Flippa, missing out on deals that might fit their criteria better or have better pricing. By diversifying your search across platforms and using data-driven insights, you increase your probability of success. The best deal is often the one you didn't know existed because you were too focused on a single source.

Buying an online business is a marathon, not a sprint. The buyers who succeed are not the ones who find the flashiest website; they are the ones who do the boring, unglamorous work of verifying facts. They check the invoices. They read the code. They call the vendors. They understand that the value of a business is not in its potential, but in its proven, verifiable execution. By following this structured due diligence process, you remove the guesswork and replace it with confidence. You know exactly what you are buying, exactly how much it is worth, and exactly how to take it to the next level.

Remember, the goal is not to find a perfect business. Perfect doesn't exist. The goal is to find a good business and price it correctly based on its flaws. When you can identify the flaws and account for them in your valuation, you win. The market is full of opportunities for those who are willing to do the work. Stay disciplined. Stay curious. And always, always verify.

By Sophal Lanh, Founder of Deal Alert AI: Sophal built Deal Alert AI after years of analyzing online business acquisitions and missing time-sensitive deals. The platform tracks and scores 100+ listings daily across Empire Flippers, Flippa, Acquire.com, and Quiet Light. Learn more →

Get Deals Before Other Buyers

We scan Empire Flippers, Acquire, Flippa, and Quiet Light daily. The best sub-$500K businesses are gone within 48 hours.