Every overpriced acquisition looked good in the listing. The difference between buyers who compound wealth and buyers who buy someone else's problem is pattern recognition — knowing which numbers to distrust before you wire the money. Here's the full red flag map, category by category.
Deal Alert AI is reader-supported. We earn commissions from affiliate links at no cost to you.
This post is based on a video from our Deal Alert AI YouTube channel. Watch the original or read the full breakdown below.
I've reviewed thousands of online business listings. Content sites, Amazon FBA brands, SaaS tools, newsletters, Shopify stores, service agencies. After enough reps, you stop reading listings the way sellers want you to read them and start reading them the way an underwriter would: looking for the thing that doesn't fit.
Here's the uncomfortable truth about this market. Most listings are not fraudulent. Outright fraud is rare on curated marketplaces like Empire Flippers, where every business goes through a vetting process before it's published. What's far more common is optimization — sellers making entirely legal decisions in the 6 to 12 months before listing that make the business look better than it will perform under your ownership.
A seller who pauses content spend for six months, delays a supplier price increase, and runs a Q4 promotion blitz hasn't lied to you. They've just handed you a business whose real earnings are 30% below the number on the listing page. You paid a 3.5x multiple on inflated SDE, which means you paid closer to 5x on reality. That's how buyers lose money without anyone technically committing a crime.
This guide walks through the four red flag categories that matter most, with the specific verification steps for each. This is the same risk framework we built into Deal Alert AI to score listings before they hit your inbox.
The most expensive red flags live in the P&L, because that's where your purchase price comes from. If SDE is overstated by 25%, and you're paying a 3.5x multiple, you just overpaid by roughly 87.5% of one year's real profit. On a $400,000 deal, that's $100,000 evaporated at closing.
Inflated TTM earnings. Trailing twelve month revenue that spikes sharply in the 3 to 6 months right before listing is the single most common financial red flag. Sellers know that TTM determines their asking price, so the incentive to juice the final two quarters is enormous. The tactics are simple: aggressive discounting to pull forward future revenue, a one-time bulk order from a wholesale buyer, launching a paid ad campaign whose costs get partially classified as "growth investment" and added back, or timing expenses so that Q4 invoices land in Q1 of the next year.
The fix is straightforward and non-negotiable: demand 24 months of monthly revenue data, not 12. Plot it. If months 19 through 24 look dramatically different from months 1 through 18 with no operational explanation, you've found something. Ask the seller directly: "What changed in month 19?" A legitimate answer sounds like "we launched three new product SKUs and added a Klaviyo flow." An illegitimate answer sounds vague, defensive, or shifts topics.
Missing bank statement reconciliation. A P&L is a document a seller creates. A bank statement is a document a bank creates. Only one of those is hard to manipulate. Any seller who refuses to provide 12 to 24 months of bank statements, Stripe/PayPal payout records, or Amazon settlement reports to reconcile against the P&L is hiding something. There is no acceptable excuse. "Privacy concerns" is not an acceptable excuse — you can redact everything except deposits. On brokered deals, the broker should already have this. If they don't, ask why.
Key insight: Reconciliation is not about catching a liar. It's about catching a sloppy bookkeeper, which is far more common. In my experience, roughly one in three small online businesses has P&L errors of 10% or more in the seller's favor — not from malice, but from personal expenses run through the business, forgotten subscription costs, and revenue counted at gross instead of net. Reconciliation finds all of it.
Add-back inflation. Seller's Discretionary Earnings exists because owner-operators legitimately run personal expenses through their business. A $6,000 health insurance premium, a one-time $12,000 website rebuild, the owner's $85,000 salary — these are real add-backs for a buyer who won't incur them. But the add-back schedule is also where sellers get creative. Watch for: recurring "one-time" expenses that appear in multiple years, contractor costs added back when you'll absolutely need to replace that contractor, marketing spend added back as "testing," and travel or software that's genuinely operational.
My rule: every add-back over $2,000 requires documentation. An invoice, a receipt, a contract. If the seller can't produce it, it comes out of SDE. I've seen add-back schedules shrink by 18% under this single rule, which on a 4x multiple is a $72,000 price reduction on a $400,000 asking price.
We scan Empire Flippers, Flippa, Acquire.com and Quiet Light daily — scoring every listing. Start free.
For content sites, affiliate businesses, and most e-commerce brands, traffic is the asset. Revenue is downstream of it. A listing can show perfect financials and still be a disaster if the traffic underneath it is borrowed, fragile, or already dying.
Sudden traffic spikes before listing. Organic traffic that jumps 40%+ in the six months before listing, without a corresponding explanation in content production or backlink acquisition, deserves serious scrutiny. Sometimes it's legitimate — a Google core update was kind, or a piece went viral, or the site finally aged out of a sandbox. Often it's paid traffic, incentivized traffic, or a short-lived SERP anomaly. Ask for Google Analytics access with channel breakdown, not screenshots. Screenshots can be edited. Read-only GA4 access cannot.
Single-source dependency. If 80% or more of traffic comes from one channel — Google organic, Pinterest, Facebook, TikTok, a single Amazon keyword — you are not buying a business. You are buying a lease on someone else's platform, and the landlord can raise the rent to infinity without notice. The March 2024 Google Helpful Content update wiped 50% to 90% of traffic from thousands of otherwise healthy content sites in a matter of days. Owners who had diversified into email lists and direct traffic survived. Owners who hadn't watched their asset lose most of its value in one weekend.
This doesn't automatically kill a deal, but it must be priced in. A site at 95% Google dependency should trade at a meaningfully lower multiple than one at 50% Google, 25% email, 25% direct — even at identical earnings. If the seller is asking the same multiple for both, they're asking you to absorb risk you're not being compensated for.
The 24-month traffic trend. This is the trick that catches the most first-time buyers. A seller lists during a plateau. The last six months look flat and stable. But pull 24 or 36 months and you see traffic peaked 18 months ago and has been grinding down ever since. The plateau isn't stability — it's the flat part of a decline curve, and the next leg down is coming. Always request full-history GA data and Google Search Console impressions. Search Console impressions are especially useful because they show declining visibility before it shows up as declining sessions.
Warning: Never accept traffic screenshots as verification. Ever. Screenshots can be doctored in under two minutes with browser dev tools, and I have personally seen it happen on open marketplaces. Insist on read-only GA4 and Search Console access, or a live screen share where you control the date ranges. If a seller resists live verification on a six-figure deal, walk. The deal is not worth the risk, and there will be another one next month.
Manufactured urgency. "I need to close in 30 days." "No extensions on due diligence." "This is my final price, I have two other offers." Sometimes urgency is real — a divorce, a health issue, a job relocation, a tax deadline. But urgency without a clear, verifiable explanation is one of the strongest predictors of a problem the seller can see coming and you can't. Suppliers about to raise prices. A Google update they've been warned about. An Amazon account health issue. A key contractor who just gave notice.
My response to artificial urgency is always the same: I slow down. If a seller won't grant a reasonable diligence window, that tells me everything about what diligence would reveal. Good businesses survive scrutiny. On brokered platforms like Empire Flippers, there's a structured process that limits this kind of pressure. On open marketplaces like Flippa, where sellers control more of the process, urgency tactics are far more common and you need to hold your own line.
Key person dependency. Ask this question in every seller call: "If you disappeared tomorrow and I took over Monday morning with no handoff, what breaks first?" The answer is the most valuable thing you'll learn in the entire process. If the business depends on the seller's personal brand, their relationships with specific suppliers, their face on YouTube, their editorial judgment, or their negotiating ability — you're not buying a system, you're buying a job that requires skills you may not have.
Undisclosed team issues. Look for recently terminated contractors, unusual churn in the expense line for freelancers, or a virtual assistant who "just moved on." Ask to speak with key contractors during diligence, with the seller's permission. Contractors will tell you things sellers won't — about payment delays, about scope creep, about whether they actually intend to stay after the sale. A content site whose entire editorial output comes from one writer who has no intention of working for the new owner is a very different asset than the listing suggests.
Intellectual property ownership. This one is dramatically under-scrutinized in small online business deals. Under U.S. copyright law, when a contractor creates content, the contractor owns the copyright by default — unless there is a signed written agreement assigning rights to the business. Many content site owners have hired 20 writers over five years on Upwork or Fiverr with nothing but a chat message. Technically, they may not own the content you're paying them for.
Ask for the contractor agreements. If they don't exist, it's not automatically a dealbreaker — practical risk is often low — but it should be addressed in the purchase agreement with representations, warranties, and an indemnity clause. If the seller pushes back on providing an IP rep, that's informative.
Pending disputes and compliance exposure. DMCA complaints, trademark oppositions, FTC affiliate disclosure violations, GDPR issues on an EU-traffic-heavy site, Amazon IP complaints, unresolved chargebacks. Run a trademark search on the brand name. Search the domain in Lumen Database for DMCA notices. Check the Wayback Machine for whether affiliate disclosures were present historically. On e-commerce, check for product liability exposure — a supplement brand and a phone case brand carry wildly different risk profiles at identical earnings.
Transferability of critical assets. Not everything transfers. Amazon Associates accounts don't transfer — the new owner must apply fresh and can be denied. Some affiliate programs require re-approval. Certain SaaS integrations, Google Ads accounts with history, and marketplace seller accounts have transfer restrictions. Map every revenue-generating account and confirm transfer mechanics before closing, not after.
Here's the sequence I run on every deal I take seriously. It takes about 8 to 15 hours of work for a six-figure acquisition, which is a rounding error against the money at stake.
Nobody develops deal instincts by reading a checklist once. You develop them by reviewing volume — hundreds of listings — until anomalies start jumping off the page before you consciously process why. The buyer who has reviewed 500 listings and bought two will consistently outperform the buyer who reviewed six listings and bought the third one.
The problem is that reviewing volume manually is brutal. Between Flippa, Empire Flippers, and a dozen other marketplaces, hundreds of new listings publish weekly. Manually screening them for concentration risk, multiple anomalies, traffic dependency, and financial red flags takes more hours than most buyers have while running their existing business or job.
That's the specific problem Deal Alert AI was built to solve. Every listing that enters our system gets scored against the risk factors in this article — multiple relative to category norms, revenue concentration signals, traffic source disclosure, add-back ratio to stated SDE, seller urgency language, missing verification data, and category-specific risk. Listings carrying multiple warning signs get flagged before they ever reach your inbox, so the deals you actually spend time on are the ones that survived a first pass.
Key insight: Red flags are not always dealbreakers. They are pricing inputs. A site with 90% Google dependency isn't unbuyable — it's worth maybe 2.5x instead of 3.5x. A business with key person dependency isn't unbuyable — it's worth buying with a longer transition period and a seller note tied to performance. The mistake isn't buying flawed businesses. Every business is flawed. The mistake is paying clean-business prices for flawed businesses.
Finding a red flag doesn't mean you walk. It means you have three options, and choosing correctly is where returns are made.
Option one: reprice. If the issue is quantifiable — inflated add-backs, overstated TTM, concentration risk — recalculate SDE honestly and apply an appropriate multiple. Present your math to the seller with documentation. In my experience, sellers who are negotiating in good faith will often accept a well-documented reduction, because they'd rather close at a fair price than restart the process with a new buyer who runs the same analysis.
Option two: restructure. If the risk is about future performance rather than past accounting, shift it into the deal structure. Earnouts tied to trailing revenue, seller financing with performance-linked forgiveness, extended training periods, holdbacks in escrow for 90 to 180 days. A seller confident in their business will accept structure. A seller who refuses all structure while insisting the business is bulletproof is telling you something.
Option three: walk. Some red flags are simply disqualifying: refusal to provide bank statements, refusal to grant live analytics verification, inconsistent stories about the reason for sale, undisclosed legal disputes discovered during diligence. In these cases, walking isn't a failure — it's the whole point of diligence working correctly. There will be another deal. Deal flow is a solvable problem; recovering a bad acquisition is not.
The buyers who compound wealth in this market aren't the ones who never encounter red flags. They're the ones who find them early, price them accurately, and stay disciplined enough to walk when the math doesn't work. If you want that screening layer running automatically across every major marketplace, that's exactly what we built at Deal Alert AI — so you spend your hours on the deals worth analyzing instead of the ones that were never going to close.
We scan Empire Flippers, Acquire, Flippa, and Quiet Light daily. The best sub-$500K businesses are gone within 48 hours.