Buyer Guide 10 min read

The Hidden Risks of Buying a One-Person Online Business You Need to Avoid

Solo businesses offer cheaper entry points and simpler tech stacks, but they come with invisible liabilities that can drain your capital overnight. Discover the specific red flags that separate profitable acquisitions from total losses.

2026-08-29  ·  By Sophal Lanh, Founder of Deal Alert AI

Deal Alert AI is reader-supported. We earn commissions from affiliate links at no cost to you.

This post is based on a video from our Deal Alert AI YouTube channel. Watch the original or read the full breakdown below.

When most people dream of buying an online business, the image that pops into their head is usually a well-oiled machine: multiple team members, automated fulfillment centers, and a diversified client base that keeps revenue flowing regardless of who calls in sick. However, the vast majority of micro-acquisitions on the market are "one-person shops." These are digital assets where the founder is the CEO, the developer, the customer support agent, and the primary brand face. While these deals are attractive because they are often priced at 2 to 4 times annual profit rather than the 5 to 8 times commanded by larger entities, they carry a unique set of risks that are often overlooked by novice buyers.

I have seen too many investors lose significant chunks of their capital because they treated a one-person business like a turnkey corporation. The fundamental difference is leverage. In a large business, you are buying systems. In a one-person business, you are buying a person’s habits, their specific knowledge, and their network of relationships. If that person walks out the door, the engine stops running. Understanding this dynamic is the first step in protecting your investment, and it requires a level of scrutiny that goes far beyond looking at bank statements.

In this guide, we will dissect the specific hidden risks associated with solo-entity acquisitions. We will look at the operational, financial, and human elements that can compromise the value of an asset post-close. By the end of this article, you will have a clear framework for identifying when a solo business is a golden opportunity and when it is a trap set for unsuspecting buyers. We will rely on real-world examples and practical due diligence tactics to ensure you make decisions based on data, not optimism.

The Key Person Risk: When the Founder Is the Product

The most significant risk in any one-person business is the "Key Person Risk," also known as founder dependency. In many small SaaS companies, niche content sites, or service-based agencies, the founder is not just an employee; they are the irreplaceable glue holding the operation together. For instance, in a freelance writing agency, the owner might personally source every client, negotiate contracts, and edit every final draft. If you buy this business and the founder decides to leave after the 90-day transition period, you do not have an agency; you have a pile of WordPress plugins and an empty inbox.

Assessing this risk requires you to look beyond the income statement. You need to analyze the time-to-task completion metrics. How long does a new client project take from intake to delivery? If the founder is bottlenecks in every step of the process, the business is not scalable, and it is not truly transferable. I once saw a case study where a buyer purchased a dropshipping store for $50,000. The seller promised the site was "fully automated." Upon taking over, the buyer realized that the founder manually processed every order via a private Excel sheet to avoid payment gateway fees. When the seller walked away, the buyer had no system for order processing, leading to a catastrophic drop in customer service scores and a subsequent chargeback spiral.

To mitigate this, you must demand that "standard operating procedures" (SOPs) are written and tested. But written SOPs are often theoretical. You need to watch the founder perform tasks. Have them troubleshoot a technical issue, handle a difficult customer email, or negotiate a vendor contract on the call. If they get stuck, hesitate, or rely on "gut feeling," the risk profiles spikes dramatically. You are buying a system, not a person. If the system only exists in the seller's head, the valuation should be adjusted downward to reflect the cost of building those systems themselves.

Key Insight: A true one-person business is not one that only one person can run, but one that one person can run efficiently. The danger lies in businesses that *require* one person to run because the systems have never been documented or delegated.

Revenue Volatility and Client Concentration

Get Free Deal Alerts Every Morning

We scan Empire Flippers, Flippa, Acquire.com and Quiet Light daily — scoring every listing. Start free.

One of the most common mistakes buyers make is assuming that consistent monthly revenue equals stable cash flow. In small, one-person businesses, revenue is often heavily concentrated in a few large clients or a single platform. This is known as customer concentration risk. If 40% of your revenue comes from one client, you are not really an investor; you are a junior partner in a business where the client holds all the power. If that client leaves, you are down 40% of your EBITDA instantly, which often renders the business unable to cover its fixed costs.

For example, consider a small UX design agency. The seller claims to have "recurring revenue" from retainer clients. However, upon closer inspection, three of the five retainers are on 30-day cancellable terms. In the B2B service world, that is thin ice. One negative review or a budget cut at the client’s company can wipe out a significant portion of the income. I strongly advise buyers to calculate the "Churn-Adjusted Life Expectancy" of these clients. Have they been with the business for six months? Two years? If the average customer lifetime is less than 12 months, the business is a treadmill, not a river. You are constantly running just to stay in the same spot.

Furthermore, platform dependency is a subtle variation of this risk. If the business relies entirely on a single traffic source—like 90% of traffic coming from Google Search—then any algorithm update is an existential threat. In 2021, the "Helpful Content Update" devastated thousands of one-person content sites. The owners had no diversified traffic sources, such as email lists, social communities, or direct backlinks. The business didn't break; it evaporated. Diversification is not a luxury in solo businesses; it is a survival mechanism.

Technical Debt and Infrastructure Fragilities

When buying a large tech company, you audit their codebase and infrastructure. When buying a one-person online business, you often overlook the fact that the infrastructure is usually "hacky." Founders of solo businesses prioritize speed over quality. They use quick fixes, non-recommended plugins, hardcoded solutions, and free-tier services that are nearing their limits. This is technical debt, and it compounds over time.

For instance, I reviewed a deal for a lead-generation website that was generating $10,000 a month. The site was built on a free WordPress theme with a custom plugin written in bare-bones PHP that hadn’t been updated in three years. The hosting was a free tier that occasionally crashed during traffic spikes. The "seller" had no idea where the SSH keys for the server were stored. The risk here is not immediate; it is latent. Maybe nothing happens for six months. Then, one day, the plugin breaks, or the domain registrar expires the domain, and the owner—who is no longer the seller—has no immediate access or knowledge to fix it. You could lose the entire asset in 24 hours because of a password reset on a shared hosting account.

You need to perform a "technical stress test" before closing. Change the domain settings. Try logging in with different accounts. Check if the email flows are working. Ensure that you have access to the root DNS, the hosting control panel, and the source code. If the seller resists giving you full technical access during due diligence, or if they claim they "don't touch code," that is a massive red flag. In a one-person business, the technical health of the asset is directly tied to the competence of the person operating it. If that person is not a technical expert, the asset is fragile by design.

The Earnings Quality Adjustment

Sellers of one-person businesses are motivated to maximize their price. Therefore, the EBITDA (Earnings Before Interest, Taxes, Depreciation, and Amortization) figures they present are often optimized for appearance rather than sustainability. This is where "Earnings Quality" becomes your best friend. You must strip away one-time expenses and, more importantly, replace the owner’s salary with a "replacement cost."

Consider a business that nets $50,000 in profit. The seller claims this is the cash flow to the buyer. However, the seller has been working 80 hours a week without taking a vacation, and they handle all customer support themselves for $15/hour. When you buy this business, you cannot work 80 hours a week for $15/hour if you are trying to live a lifestyle of investment. You need to hire a virtual assistant (VA) or a support agent. If it costs $2,000 a month ($24,000/year) to hire someone to do what the owner does, the "true" profit is $50,000 - $24,000 = $26,000. If you pay 3.5x on $50,000, you are overpaying by thousands of dollars. You must normalize the numbers to reflect what it costs to *maintain* the business, not what it took to build it.

Additionally, look for "owner perks" embedded in the P&L. Does the business pay for a personal cell phone? A personal data plan? A car expense? These are often disguised as business expenses in sub-ledger reports. In a one-person business, the line between personal and business spending is often blurred. You need to audit every expense line item. If 5% of expenses are personal, that is a leak you need to plug before you calculate your multiple. Overlooking these small leaks can result in you paying a 4x multiple on a business that is really only worth a 2.5x multiple on normalized cash.

Warning: Never accept a statement of "positive cash flow" without a verified bank statement match. One-person businesses often have personal and business accounts commingled. If you cannot trace the revenue to a bank deposit and the expenses to a bank withdrawal, treat the financials as fictional until proven otherwise.

Legal and Intellectual Property Gray Zones

When you buy a publicly traded company, the lawyers ensure that all IP is assigned to the corporation. In a one-person online business, this paperwork is often non-existent. Who owns the domain? Who owns the trademark? Is the software code licensed from a third party or actually owned? If the business was built on open-source libraries that require attribution, or if the logo is a stock image that hasn't been properly licensed, you are inheriting legal liability.

A common issue arises with content sites. If the founder wrote content using AI tools or contracted for writers, did they retain the copyright? If they hired freelance writers via Upwork without a clear contract stating "work for hire," the IP might technically still belong to the freelance writers. If a freelancer decides to sue you for unpaid royalties or copyright infringement, you are exposed. This is rare but devastating. I have seen buyers purchase a site with viral content, only to have the original author claim they never sold the rights, just licensed them. The buyer had to take the content down, tanking the search rankings overnight.

Furthermore, check for undisclosed lawsuits or tax liabilities. In some jurisdictions, a buyer who assumes the entity (like an LLC) inherits the debts of that entity. If the seller has unpaid payroll taxes, trademark office fees, or unresolved court judgments, these can become your problem. Always structure the deal as an asset purchase rather than a stock purchase if possible. An asset purchase allows you to cherry-pick what you buy (the domain, the customer list, the equipment) and leave the liabilities behind. If the seller insists on a stock purchase, demand extensive indemnification clauses and a holdback period where a portion of the purchase price is retained for 12 months to cover any undisclosed legal issues.

Building the Due Diligence Checklist

To navigate the murky waters of one-person business acquisitions, you need a standardized approach. You cannot rely on intuition; you need a checklist. This checklist transforms subjective feelings of "trust" into objective verification points. I have refined this list over years of reviewing deals on platforms like Flippa and Empire Flippers. It takes time, but it saves you from catastrophic errors. Use this as your baseline for any micro-acquisition under $500,000.

  1. Verify Ownership Rights: Confirm you have proof of ownership for the domain, the website infrastructure, and all digital real estate. Check registry records to ensure the seller is the registered owner and not a proxy.
  2. Analyze Client/Consumer Churn: Calculate the Net Revenue Retention (NRR) rate. If you are losing more customers than you are gaining, the growth metrics are vanity metrics. Focus on cohort analysis to see if retention is improving.
  3. Review the Tech Stack: List every third-party service (hosting, email, CRM, API). Identify which ones are on free trials and which are paid. Verify that you have access to the admin panels for all of them.
  4. Assess Traffic Sources: Use analytics data to determine the top 3 traffic drivers. If 60%+ comes from a single source (e.g., Google Organic), the risk is high. Look for diversification opportunities or email list health.
  5. Validate the IP: Ensure all content, code, and designs are either owned by the seller or properly licensed. Check for Work for Hire agreements for any contracted work.
  6. Inspect the SOPs: Request the Standard Operating Procedures document. Then, ask the seller to walk you through a specific task (like onboarding a new user) live on a call. Compare the live performance with the written document.
  7. Check for Burned Bridges: Call 3-5 past vendors or clients (with permission) to ask about the seller’s reliability, payment speed, and resolution of conflicts. They will tell you the truth you won’t find in the data room.
  8. Legal Entity Review: Review the operating agreement or articles of incorporation. Ensure there are no hidden debts, liens, or compliance issues. If buying an asset, ensure the seller has the authority to sell those specific assets.

This checklist is not just about finding problems; it is about mapping the scope of work. Once you know what is broken, missing, or risky, you can assign a dollar value to fixing it. If the tech stack is messy, quote a developer to rebuild it. Subtract that cost from your offer. If the email list is stale, quote a marketing agency to re-engage it. By treating the business as a portfolio of components rather than a single logo, you gain leverage in negotiations.

The Valuation Reality Check

Many buyers anchor on "multiples" without understanding what those multiples buy. A 3.5x multiple on SDE (Seller’s Discretionary Earnings) is the industry standard for small sites. However, this multiple assumes the business is "clean." If you have identified high key person risk, high client concentration, and significant technical debt, a 3.5x multiple is excessive. You should be discounting the valuation.

Let’s use a practical example. You are looking at a podcast network owned by one person. It generates $30,000/year. The seller asks for 4x ($120,000). At first glance, it seems expensive. But upon due diligence, you find out that 80% of the revenue comes from two sponsors who renew annually. They are independent contractors, not employees. The production is outsourced, but the seller manages the relationships. If you lose one sponsor, you lose 40% of your income. Is a 4x multiple reasonable for a business with potentially only 12 months of predictable income? No. A more accurate valuation might be based on the remaining contract value plus a modest goodwill premium. In this case, $40,000 might be a fair price. The difference in offer, backed by this analysis, shows you are a serious, informed buyer.

Additionally, consider the "exit liquidity" of the asset. A complex, multi-entity business is hard to sell later. A simple, one-person business is easier to flip *if* it is clean. Paradoxically, the "hidden risks" make it harder to resell. If you buy a broken one-person business, you are not just paying to fix it; you are paying for the lack of documentation. This makes the asset less liquid. Keep this in mind when calculating your total return on investment (ROI). You are buying a project, not just a cash cow. The "project" aspect requires capital and time, which dilutes your returns.

Strategic Tip: Use your due diligence findings to negotiate, not to reject. If you find risks, say: "I see the technical debt is high. I estimate $10,000 in cleanup costs. I would like to make an offer of $X, which accounts for the post-close investment required to stabilize the asset." Sellers respect buyers who have done their homework.

Post-Close Survival and Integration

Closing the deal is only 20% of the battle. In the world of one-person businesses, the first 90 days post-close are critical. This is when the "Key Person Risk" materializes if you haven't planned for it. The seller will eventually stop being available. You will face issues they have never encountered before, or issues they handled so automatically that they didn't document them. This is the "knowledge gap."

To bridge this gap, do not rely solely on the transition period provided in the contract. Start learning the systems *before* you close. Use the "shadowing" technique. Have the seller do their job while you watch. Then, have you do the job while they watch. Record these sessions (with permission). These videos become your bible. If the seller becomes unreachable at 2 AM, you can watch a 5-minute video of them troubleshooting the specific plugin error you are facing. This reduces your dependency on them and empowers your operations.

Furthermore, you must establish a new culture immediately. The seller had their own habits, perhaps chaotic and fast-paced. You need to implement more rigid controls. Set up automated backups. Create a "runbook" for daily, weekly, and monthly tasks. Move credentials out of personal email accounts and into a password manager. Isolate the business financially. Open new bank accounts under your ownership. This separation is psychological and practical. It helps you transition from being a "buyer" to an "operator." The faster you stop thinking like an investor analyzing a spreadsheet and start thinking like an owner fixing a leaky pipe, the faster the business will stabilize.

Finally, monitor the metrics closely. In the first month, expect some volatility. Client confidence in the seller is gone; they are dealing with you now. Be proactive in communication. Send a note to the top 20 clients introducing yourself. Let them know their service will remain the same or improve. Proactivity prevents the "silent churn" where clients quietly decline to renew because they felt neglected during the handover. Relationships are the hidden assets of one-person businesses, and they must be managed personally, even if the business is growing.

Where to Find Vetted Opportunities

Given the risks outlined above, where should you source these deals? The open market is full of scams and junk. You need platforms that vet the basic fundamentals. Most reputable marketplaces have a team that verifies ownership and basic traffic data. This doesn't mean the business is a gem, but it means the foundation is real.

Empire Flippers is one of the top choices for buyers who want higher quality control. They typically require higher minimum sale prices, which often filters out the most chaotic, low-quality one-person shops. Their deals tend to have cleaner financials and more established businesses, though you still need to do your own deep-dive due diligence. Similarly, Flippa offers a wider range of micro-deals, which gives you more volume to choose from, but it requires more discernment on your part to weed out the noise.

However, tools are not enough. You need strategy. This is why Deal Alert AI exists. We use data aggregation to filter through thousands of listings, identifying the specific metrics that correlate with long-term survival. We help you bypass the noise and find the deals where the risk-reward ratio favors the buyer. Whether you are looking for a content site, a SaaS tool, or a service agency, having the right data at your fingertips changes the game. It moves you from reactive to proactive, allowing you to make offers based on verified numbers rather than sales pitches.

As the online business market matures, the gap between "amateur" and "professional" buyers will widen. Those who continue to buy based on surface-level metrics will suffer losses. Those who dig deep into the operational realities of one-person businesses will find consistent alpha. The risks are real, but they are manageable. If you respect the complexity of these assets, they can provide excellent cash flow and asset appreciation. Just don’t forget to check the engine before you drive the car.

Remember, the goal is not just to buy a business; it is to own a sustainable cash flow. Every hour you spend in due diligence is an hour that saves you from a year of pain. Be diligent, be skeptical, and be prepared to walk away if the numbers don't add up. The market will always have another deal. Your capital is finite. Protect it.

By Sophal Lanh, Founder of Deal Alert AI: Sophal built Deal Alert AI after years of analyzing online business acquisitions and missing time-sensitive deals. The platform tracks and scores 100+ listings daily across Empire Flippers, Flippa, Acquire.com, and Quiet Light. Learn more →

Get Deals Before Other Buyers

We scan Empire Flippers, Acquire, Flippa, and Quiet Light daily. The best sub-$500K businesses are gone within 48 hours.