Most buyers spend three hours studying a website's design and twenty minutes on its financials. That's backwards. Here's the exact verification process that separates a real $180,000 business from a $180,000 story.
Deal Alert AI is reader-supported. We earn commissions from affiliate links at no cost to you.
This post is based on a video from our Deal Alert AI YouTube channel. Watch the original or read the full breakdown below.
By Sophal Lanh, Founder of Deal Alert AI
Financial due diligence is the single most important phase of any online business acquisition. Everything else — the traffic charts, the brand story, the seller's Loom video walkthrough — is context. The financials are the deal. This is where you verify that the revenue claims are accurate, that the earnings actually recur, and that there are no hidden costs sitting just below the surface waiting to eat your returns in month four.
I've watched buyers walk away from good businesses because a chart looked ugly, and I've watched buyers wire six figures for businesses whose P&L had never been reconciled to a single bank statement. The second mistake is far more expensive. This guide is the complete financial verification framework I use, and it works whether you're buying a $40,000 content site or a $1.2M SaaS.
Here's the math that should reframe how you allocate your diligence time. The purchase price of an online business is calculated as a multiple of earnings — typically 30x to 45x monthly net profit for content and ecommerce, or 3x to 5x annual profit for larger assets. That multiple is applied to a number the seller gave you. If that number is inflated by 30%, the business is worth 30% less than what you're paying, and you found out after the wire cleared.
Concrete example. A seller lists a content site at $216,000 based on $6,000/month in seller's discretionary earnings and a 36x multiple. During diligence you discover that $1,400/month of "one-time" content production costs are actually recurring — the site needs 12 new articles a month just to hold its rankings. Real SDE is $4,600. At the same 36x multiple, the business is worth $165,600. You just found $50,400 in a spreadsheet. That's a better return per hour than anything else you'll do in the acquisition process.
Most buyers spend more time reviewing the website design and product catalog than they spend verifying the numbers. It feels productive because it's tangible. But nobody has ever lost $50,000 because a logo was dated. They lose it because a P&L was assembled from memory in a Google Sheet three weeks before the listing went live.
Key insight: Every hour you spend in financial diligence has a direct dollar value equal to the multiple. On a 36x deal, finding $500/month of misclassified expense is worth $18,000. There is no other activity in the acquisition process with that ROI.
We scan Empire Flippers, Flippa, Acquire.com and Quiet Light daily — scoring every listing. Start free.
The foundation of financial verification is triangulation. You want three independent data sources reporting the same revenue number for the same period. When all three agree within a few percent, you have high confidence. When they don't, you have a question that must be answered before you proceed.
Source one is the profit and loss statement. This is the seller's construction of reality — useful as a map, but not evidence. Source two is bank statements for the identical period. You are reconciling the revenue line items on the P&L to actual deposits hitting the account. Source three, for any business running Stripe, PayPal, Shopify Payments, or a similar processor, is read-only access to the processing dashboard showing gross volume, refunds, chargebacks, and net payouts.
The reconciliation is not complicated. Take a single month — say, last October. The P&L says $28,400 in revenue. The Stripe dashboard should show gross volume of roughly $29,600 with $1,200 in fees and refunds. The bank statement should show payout deposits totaling about $28,400, adjusted for the settlement lag at month boundaries. If those three numbers land within 2-3% of each other, that month is verified. Do this for at least six months, including the two highest-revenue months and the two lowest.
Discrepancies between the P&L and bank statements are a serious red flag — not always fraud, but always a question. Sometimes the answer is boring: the seller runs personal and business income through one account, or a second processor wasn't disclosed, or an accountant used accrual accounting while the bank shows cash. Sometimes the answer is that revenue was recorded that never arrived. You need to know which it is before you decide anything else about the deal.
Almost every seller will offer you 12 months of financials. Ask for 24. The extra year is where the truth about seasonality, trend, and stability lives, and refusing to provide it tells you something too.
With 12 months you can see revenue. With 24 months you can see direction. A site doing $7,000/month today looks identical on a trailing-twelve-month basis whether it was doing $5,000 two years ago and climbing, or $11,000 two years ago and falling off a cliff. Those are opposite businesses at opposite prices, and one year of data cannot distinguish them.
Seasonality is the second reason. Ecommerce brands and many content sites have brutal seasonal swings — a gift-focused store might do 40% of annual revenue in Q4, while a tax-related content site collapses to nothing from May through December. If a seller lists in February with a TTM window that captures two Christmas seasons, or lists their business right after their strongest quarter, the multiple you're paying is being applied to a peak. Two years of monthly data lets you compare month-over-month against the same month last year, which is the only honest comparison in a seasonal business.
The third reason is algorithmic and platform risk. Google core updates, Amazon policy changes, and iOS privacy shifts all leave scars in monthly data. A 24-month view shows you whether the business took a hit, how deep it went, and whether it recovered. Marketplaces like Empire Flippers typically publish extended financial histories with their listings, which is one reason their inventory tends to price at a premium — the data is already there. On Flippa, verification quality varies enormously by listing, so requesting the full 24 months is entirely on you.
Add-backs are expenses the seller claims are non-recurring or owner-specific, added back to net profit to produce seller's discretionary earnings. They exist for a legitimate reason: if the owner pays himself $90,000 a year to do work you'll outsource for $30,000, the extra $60,000 isn't a real cost of the business. But add-backs are also the single easiest place to manufacture earnings, because they're just line items in a spreadsheet with a label attached.
For every add-back, ask for documentation. A receipt. An invoice. A payroll record. A contract showing the engagement ended. "Trust me, that was one-time" is not documentation, and a seller who's organized enough to run a profitable business is organized enough to produce a receipt. If a seller resists documenting a single add-back, treat that add-back as zero and recalculate the price.
Legitimate add-backs I see constantly and accept with documentation: the owner's above-market salary, genuinely personal expenses run through the business (a family phone plan, a personal vehicle lease), one-time equipment purchases, legal fees for forming the entity, and the cost of the business broker's own listing prep. Fraudulent or aggressive add-backs I see just as often: labeling recurring vendor costs as non-recurring, inflating a stated owner salary specifically to make SDE look larger, adding back "growth experiments" that are actually the marketing spend keeping revenue flat, and quietly omitting revenue-generating costs that are genuinely required to operate the business.
Warning: The most dangerous add-back is the one that isn't on the list — the missing expense. If a seller writes all the content himself and doesn't book a cost for it, the P&L shows profit that only exists because unpaid labor is subsidizing it. Price out what it will cost you to run this business, including replacing the owner, and subtract that from SDE before you apply any multiple.
Every revenue source has an authoritative dashboard, and you should get read access to all of them. Bank deposits confirm money arrived; the source dashboards confirm where it came from and whether it will keep coming.
For content and affiliate sites, request the affiliate network dashboards directly — Amazon Associates, ShareASale, Impact, CJ, or private program portals — showing commissions over the full 24 months. What you're looking for beyond the totals: concentration (is 70% of revenue from a single program?), commission rate changes (Amazon has cut category rates before with no warning), and reversals. Gross affiliate commissions and net paid commissions can differ by 8-15% after returns. Confirm the P&L uses net.
For SaaS, ask for Stripe, ChartMogul, or Baremetrics access showing MRR, gross and net churn, expansion revenue, and cohort retention. A SaaS at $18,000 MRR with 3% monthly logo churn and 105% net revenue retention is a fundamentally different asset from one at $18,000 MRR with 9% churn propped up by paid acquisition. Same headline number, wildly different price. Also check for annual prepayments distorting a single month.
For ecommerce, reconcile the Shopify or Amazon Seller Central dashboard to processor payouts and bank deposits, then dig into unit economics: cost of goods, landed shipping, ad spend by channel, return rate, and current inventory value. Inventory is the classic ecommerce trap — a business showing strong profit may have been quietly liquidating stock without reordering, which inflates margin for two quarters and then stops working. Ask when the last purchase order was placed and what it cost. For agencies and productized services, pull the client contracts and calculate revenue concentration; if one client is 45% of revenue and is on a 30-day rolling agreement, you're not buying a business, you're buying a relationship you haven't met yet.
This is the sequence I follow on every deal. Do it in order — each step builds on the previous one, and skipping ahead means you'll be reconciling data you don't yet trust.
Ten items, and none of them require an accounting degree. What they require is the willingness to ask for documents and the discipline to actually open them. On most deals this is 6-10 hours of work. On a $200,000 acquisition, that's the highest-paid work you will ever do.
One process note: run this checklist before you spend serious time on operational or legal diligence. Roughly a third of the deals I look at die in financial verification. There's no reason to be reviewing hosting contracts for a business whose bank statements don't match its P&L.
The final step, and the one buyers skip most often, is constructing your own trailing-twelve-month model from raw data. Not editing the seller's spreadsheet. Building a new one from bank statements, processor exports, and source dashboards.
The reason is structural. A seller's model contains hundreds of small judgment calls — how a cost is categorized, which month a payment is recognized in, whether a refund is netted or booked separately. Every one of those calls was made by someone who wants a higher price. None of them are individually dishonest. Together, they routinely move SDE by 10-20%, and you'll never spot them by reading someone else's finished spreadsheet.
Your model should have twelve columns for the last twelve months, revenue broken out by source, expenses broken out by category with nothing bundled into "miscellaneous," and a separate section for add-backs where each line links to the document that supports it. Then add a column for your projected costs — what this business will cost under your ownership, with your team, your software subscriptions, and your outsourced replacement for the seller's labor. That final number, not the listing's SDE, is what your multiple should be applied to.
Key insight: A 5% variance between your model and the seller's is normal and usually explainable. A 15% variance means one of you is wrong about something material. A 25%+ variance means either the seller is not being straight with you or the books are so disorganized that nobody knows the real number — and both are reasons to renegotiate or walk.
Financial verification tells you what a business actually earns. It doesn't tell you what that earning stream is worth in today's market — and buyers who skip that second question end up doing flawless diligence on an asset they're still overpaying for.
Market context is what turns verified numbers into a negotiating position. If comparable content sites in the same niche with similar traffic profiles have been transacting at 32-34x monthly profit over the last six months, and this one is listed at 41x, you know exactly how much room you have before you send your first message. That context is also what lets you move fast on genuinely underpriced listings, which is where most of the real return in this asset class is made. Deal Alert AI exists to give buyers that pricing baseline — aggregating live listings across the major marketplaces so you can see where a deal sits against real comparables before you invest ten hours in verification.
The practical workflow: screen with market data, verify with the checklist above, then negotiate using the gap between the two. When your model shows real SDE of $4,600 against a listing built on $6,000, you're not making an insulting lowball offer — you're presenting documented findings with receipts attached. That conversation goes very differently, and in my experience sellers with clean books respect it. Sellers without clean books tend to stop responding, which is also useful information.
Whether you're browsing curated inventory on Empire Flippers or sifting through the much larger and much noisier volume on Flippa, the verification standard should be identical. Marketplace vetting reduces the odds of outright fraud; it does not replace your own reconciliation. Every listing you take seriously deserves the full three-source treatment, and the tooling at Deal Alert AI is built to make the screening stage fast enough that you have time left for the part that actually matters.
Discrepancies are common and not automatically disqualifying. What matters is the seller's response. Ask a direct, specific question — "The P&L shows $28,400 for October, the bank shows $24,100 in deposits, what accounts for the difference?" — and evaluate the answer, not the tone.
Good answers are specific and verifiable: "PayPal payouts go to a second account, here are those statements." "That was an accrual entry for an annual invoice, here's the contract." "A $4,300 payout settled on November 2nd, you'll see it at the top of the next statement." Every one of those can be checked in under ten minutes, and once checked, the deal moves forward with more confidence than it had before.
Bad answers are vague, emotional, or defensive: "My accountant handles that." "You're the only buyer who's asked this." "I don't have time to dig up two-year-old statements." None of those are explanations. A seller asking for six figures has an obligation to explain their own books, and reluctance at this stage reliably predicts worse problems at closing.
When you can't reconcile and the seller can't explain, you have three options: renegotiate the price down to what you can verify, restructure the deal so a portion of the payment depends on post-close performance, or walk. All three are fine outcomes. The only bad outcome is wiring the money and hoping. Deals are plentiful — new listings hit the marketplaces every single day, and the screening tools at Deal Alert AI will surface the next one. Capital you've handed to a seller with unverifiable books is not coming back.
Financial due diligence isn't glamorous, and it doesn't feel like entrepreneurship. But it's the difference between buying a business and buying a story about a business. Do the reconciliation, document the add-backs, build your own model, and let the numbers decide.
We scan Empire Flippers, Acquire, Flippa, and Quiet Light daily. The best sub-$500K businesses are gone within 48 hours.