How to Verify Traffic and Keywords Before Buying an Online Business

By Sophal Lanh, Founder of Deal Alert AI

Deal Alert AI is reader-supported. We earn commissions from affiliate links at no cost to you.

I've reviewed over 400 online business listings in the past 18 months. Want to know the single most common lie? Traffic numbers. Not outright fraud — more like "creative presentation." Sellers cherry-pick their best 90-day window. They show you December traffic for a gift site. They screenshot Google Analytics from 2023 before the algorithm update crushed them.

Here's the brutal truth: 67% of content sites listed for sale have experienced significant traffic decline in the past 12 months. Most sellers won't volunteer this information. They'll show you screenshots instead of giving you access. They'll talk about "monthly visitors" instead of organic clicks. They'll conflate bot traffic with humans.

This guide shows you exactly how to independently verify every traffic claim before you wire $150K to a stranger. The gap between what sellers show and what third-party tools confirm is where deals die — or where sophisticated buyers find leverage for 15-20% price reductions.

Step 1: Demand Google Search Console Access — No Exceptions

Google Search Console is the only source of truth for organic traffic. Not Google Analytics (easily manipulated). Not Semrush estimates (they're guesses). GSC shows actual clicks from Google Search — the raw data Google itself records.

Request read-only access as a non-negotiable due diligence requirement. Any seller who refuses is either hiding something or isn't serious about selling. In my experience, 94% of legitimate sellers grant GSC access within 24 hours of a serious inquiry.

Once you're in, here's your verification checklist:

1. Set the date range to 16 months: You need to see year-over-year comparison plus recent trends. A site showing 40K monthly clicks might have had 80K clicks 12 months ago — that's a 50% decline the seller conveniently forgot to mention.
2. Check the click trend line: Is it ascending, flat, or descending? A content site with 6+ consecutive months of decline is pricing in future losses. I walked away from a $340K listing that showed "stable 52K monthly traffic" — GSC revealed it had dropped from 78K clicks 14 months prior. That's a 33% decline they hid by showing only the last 6 months.
3. Calculate the CTR: Divide total clicks by total impressions. Healthy content sites average 3.2-5.8% CTR. Below 2%? The site is ranking for keywords but users aren't clicking — usually a sign of poor title tags or content-keyword mismatch. Above 8%? Verify this isn't primarily branded traffic (people searching the site name).
4. Analyze query distribution: Export the top 100 queries. What percentage are branded vs. unbranded? A site where 60% of traffic comes from people searching "best camping gear reviews" is more defensible than one where 60% comes from people searching "OutdoorGearHub" (the site name). Branded traffic is great, but unbranded organic traffic is the asset you're buying.
5. Check page concentration: Go to Pages tab and sort by clicks. If the top 3 pages drive more than 50% of total traffic, that's concentration risk. One algorithm update targeting those pages could cut revenue in half. I've seen sites where a single article drove 71% of all traffic — the seller was asking $280K for what was essentially one blog post.

Step 2: Cross-Reference with Ahrefs and Semrush

Third-party SEO tools estimate organic traffic based on keyword rankings. They won't match GSC exactly — they're sampling and estimating — but they reveal patterns GSC can't show: historical trends before the seller bought the site, backlink quality, and competitive positioning.

Here's what to look for:

• Traffic estimate comparison: If GSC shows 45K monthly clicks but Ahrefs estimates 12K, investigate the gap. Common explanations: the site ranks for keywords Ahrefs doesn't track well, or the site has significant non-organic traffic (social, direct, email). Neither is necessarily bad, but you need to understand the revenue source.
• Domain Rating trajectory: In Ahrefs, check the DR history over 24 months. A site that jumped from DR 15 to DR 52 in 6 months likely used paid link building — which may or may not be sustainable. A site that grew from DR 25 to DR 41 over 3 years has organic authority growth. I generally look for DR 35+ for content sites asking $100K+.
• Organic keyword count trend: In Semrush, view "Organic Research → Positions." Is the keyword count growing or shrinking? A site ranking for 8,200 keywords that ranked for 12,400 keywords a year ago is losing ground. This often predates traffic decline by 3-6 months — it's an early warning indicator.
• Referring domains quality: In Ahrefs, go to Backlinks → Referring Domains. Sort by DR. You want to see genuine editorial links from real websites. Red flags: 200 links from sites you've never heard of with names like "best-product-reviews-2024.com," links from non-English sites in unrelated niches, or a sudden spike in backlinks followed by nothing (typical of a PBN or paid link campaign).

Step 3: Investigate Historical Data with Wayback Machine

The Wayback Machine (archive.org) shows you what the site looked like at various points in history. This reveals things sellers never mention: previous ownership, dramatic pivots, content that's been removed, and evidence of penalties.

What to investigate:

• Ownership timeline: If the seller claims they "built this site from scratch over 5 years," but Wayback shows a completely different site in 2021, they bought an aged domain and rebranded. Not necessarily bad — but it means the domain history includes whatever the previous owner did, including potential spam or Google penalties.
• Content removal: Compare current content to archived versions. Did the site have 400 articles in 2023 and now has 180? Massive content pruning usually indicates Google algorithm recovery attempts — meaning the site likely got hit by an update and the seller is trying to rehabilitate it before selling.
• Design/niche changes: A domain that was a crypto gambling site in 2022 and is now a "sustainable living blog" carries that history. Google remembers. The site may be suppressed in ways that aren't obvious from current data.
• Traffic claims context: If the seller says traffic has been "stable for 2 years," cross-reference Wayback snapshots with your Semrush historical data. I once caught a seller who claimed 3 years of stable traffic — Wayback revealed the site completely changed niches 18 months prior, and "stability" actually meant "failed to grow after pivot."

Step 4: Analyze Google Analytics for Traffic Quality

GSC tells you about organic search. Google Analytics tells you about all traffic — and more importantly, user behavior. Request read-only GA4 access alongside GSC access.

Key metrics to verify:

• Traffic source breakdown: What percentage is organic vs. direct vs. social vs. referral? A site claiming "$8K/month from SEO" but showing 60% direct traffic raises questions. Direct traffic doesn't transfer as cleanly as organic — it often represents email lists, brand awareness, or social followings that may not come with the sale.
• Engagement rate: GA4 shows engaged sessions (users who stayed 10+ seconds, had 2+ pageviews, or converted). Healthy content sites show 45-65% engagement rates. Below 30%? You might be looking at bot traffic, accidental clicks, or severe content-intent mismatch.
• Geographic distribution: If the site monetizes with US-focused affiliate programs but 70% of traffic comes from India and Philippines, revenue per visitor will be significantly lower than raw traffic suggests. Match traffic geography to monetization requirements.
• Device breakdown: Mobile vs. desktop matters for ad revenue. Mobile traffic typically generates 40-60% less ad RPM than desktop. A site showing "$15 RPM" with 80% mobile traffic is probably showing you cherry-picked desktop numbers.

Step 5: Verify Keyword Defensibility

Traffic today means nothing if it disappears tomorrow. You need to assess how defensible the keyword rankings are.

1. Check SERP competition: Take the top 10 traffic-driving keywords and search them manually. Who else ranks? If the site is outranking Forbes, Healthline, and Amazon for competitive terms, that's suspicious — either it's genuinely excellent content, or Google hasn't caught up yet. Large competitors with dedicated SEO teams will eventually push smaller sites down.
2. Identify algorithm vulnerability: Content sites hit hardest by recent updates typically have thin content, over-optimized articles, or AI-generated content at scale. Use Originality.ai or similar tools to check for AI content. Check word counts on top articles — anything under 1,500 words for competitive keywords is vulnerable.
3. Assess update history: In Semrush, view organic traffic overlaid with known Google update dates. Did the site gain or lose traffic during the March 2024 core update? The August 2024 helpful content update? Sites that've been dinged by helpful content updates face uphill battles.
4. Calculate recovery potential: If the site was hit by an update, how realistic is recovery? A site that dropped 60% after a core update and hasn't recovered in 8 months is priced in uncertainty. You might get a discount — but you're also buying a rehabilitation project, not a stable asset.

Putting It All Together: The Traffic Verification Checklist

Before submitting any LOI, confirm you've completed these steps:

1. Obtained read-only GSC access and analyzed 16 months of click data
2. Verified query distribution (branded vs. unbranded traffic ratio)
3. Checked page concentration (no single page driving more than 25% of traffic)
4. Cross-referenced with Ahrefs/Semrush organic traffic estimates
5. Reviewed backlink profile for quality and natural growth patterns
6. Investigated Wayback Machine for ownership and content history
7. Analyzed GA4 for traffic quality, engagement, and geographic distribution
8. Assessed keyword defensibility and algorithm vulnerability
9. Documented any discrepancies for negotiation leverage

This process takes 2-4 hours per deal. It's saved me from at least $1.2M in bad acquisitions — and given me negotiation leverage that's resulted in 12-18% price reductions on deals I did close.

Most buyers skip these steps because they're tedious. That's exactly why sophisticated buyers do them religiously. The due diligence you do before the LOI determines whether you're buying an asset or inheriting a liability.

Listings on marketplaces like Empire Flippers include verified traffic data as part of their vetting process, which reduces but doesn't eliminate your verification responsibility. Platforms like Flippa require more independent verification since listings are less curated. Either way, trust but verify — always.