15 Online Business Due Diligence Red Flags That Should Stop the Deal

Declining revenue isn't automatically a deal-killer — every business has slow periods. But three or more consecutive months of decline without a clear, specific, verifiable explanation (a seasonal pattern confirmed by prior year data, a documented algorithm update that has since been corrected, a one-time disruption that's clearly resolved) suggests structural deterioration. If the seller's explanation is vague — "the market is shifting," "we've been focusing on other things" — and not supported by data, the decline is likely ongoing. Price accordingly or walk.

A content site claiming $8,000/month in display ad revenue with 80,000 monthly sessions has an RPM of $100 — far above industry norms for most niches. Either the audience is exceptionally valuable (niche finance or legal traffic can approach these numbers) or something is wrong. Similarly, a SaaS claiming 2,000 active users but only $3,000 MRR has a $1.50 ARPU that's either extremely low or the "active users" number is inflated. Traffic and revenue should tell a consistent story. When they don't, find out why before proceeding.

Churn for SaaS businesses is a primary valuation driver, and sellers know this. A seller who doesn't disclose churn in the listing and reveals it only when asked — or whose disclosed churn number doesn't match what you calculate from the subscriber data — has either made a significant oversight or is actively managing the information you receive. Monthly churn above 5% is typically disqualifying at standard SaaS multiples. If you discover high churn wasn't disclosed, demand a price adjustment that reflects the actual lifetime value of the customer base.

The listing says "5 hours per week." The seller's calendar says otherwise. If the actual operations require significantly more owner time than disclosed — weekly client calls, daily customer support decisions, active sales involvement, ongoing content creation that's central to revenue — you're not buying a business. You're buying a job. The price should reflect the actual time requirement, and you need to have a specific plan for hiring to replace those hours before the deal makes economic sense.

A supplier who prices the current owner at $3.20/unit based on a three-year relationship and volume history may reprice to $4.80/unit when a new unknown buyer takes over. That $1.60 difference on 10,000 monthly units is $16,000/month in additional cost the due diligence P&L didn't show. Always get written confirmation from primary suppliers of continued supply at current terms before closing any physical product acquisition.

When a business's tax returns show significantly different income than the seller's P&L, there's always an explanation — add-backs, timing differences, depreciation — but the explanation needs to be specific and documented. Sellers who can't clearly explain the gap between their tax returns and their operational P&L have either been reporting income inaccurately to the IRS (a liability that transfers) or inaccurately to you. Either way, it requires resolution, a price adjustment, or both.

Every seller adds back legitimate personal expenses — health insurance, owner salary above market replacement cost, personal travel included in the business P&L. But when the add-back list represents 30-40% of the claimed SDE, and includes items like "owner's spouse salary" or "personal vehicle lease" that may or may not transfer with the business, the actual earning power is significantly lower than presented. Scrutinize every add-back. Legitimate add-backs are items that genuinely won't exist under new ownership. Questionable ones need documentation and discussion.

A content site or ecommerce brand that gets 90%+ of its traffic from Google organic search is one algorithm update away from a significant revenue event. This doesn't make it unacquirable — it makes it a risk that needs to be priced. A business with diversified traffic (Google plus email plus social plus direct) at a 32x multiple deserves a premium over the same revenue with single-source Google dependency. If you're willing to accept the concentration risk, the multiple should reflect it.

Some online businesses run on one person who isn't the owner — a VA who handles all customer service, a writer who produces all the content, a developer who maintains all the code. If that person's continued involvement is material to revenue and their relationship is with the seller personally (not contracted to the business entity), you're inheriting a dependency that may not survive ownership transfer. Interview key contractors before close. Get retention agreements in place as a condition of closing if they're critical to operations.