Buyer's Framework · July 2026

How to Buy an Online Business: The Exact 6-Step Process We Use to Score 4,200+ Deals

Every Deal Alert AI analysis runs through the same framework. Here it is in full — from filtering thousands of listings down to the one deal worth buying.

⏱ 15 min read 📊 Based on 4,200+ analyses ✅ Checklist included

Buying an online business is not complicated. But it is easy to do wrong, and the consequences of doing it wrong — overpaying, missing a red flag, buying a declining business at a peak multiple — are measured in years of lost capital and time.

Deal Alert AI has run over 4,200 deal analyses. Every single one follows the same six-step sequence. Skip a step and you miss something. Rush a step and you rationalize something you shouldn't. The framework exists because deal-making psychology is adversarial to good decision-making — sellers present the best version of the business, and buyers fill in the rest with optimism.

This is the framework. Use it in order.

The 6 steps
  1. Filter the universe — go from thousands to a shortlist
  2. Verify the revenue — trust nothing until you see the source
  3. Score the multiple — is it fairly priced?
  4. Audit the traffic — where are the customers coming from?
  5. Assess operational risk — what breaks when the owner leaves?
  6. Structure and close — make the offer, run legal, transfer assets
1
Filter the Universe

Empire Flippers lists 60–80 new deals a month. Flippa lists 500+. Acquire.com runs 150–200. Manually evaluating every listing is how buyers burn out and miss the actual good deals because they're buried in due diligence on mediocre ones.

The first step is brutal filtering. Your goal is to go from hundreds of monthly listings to a shortlist of 5–10 worth evaluating seriously. These are your non-negotiable hard filters:

Minimum operating history 18 months
Minimum monthly net profit $1,500+
Revenue trend (last 3 months vs prior 3) Flat or growing
Business type matches your operating experience Required
Asking price within your capital range (with buffer) Required

The revenue trend filter alone eliminates 30–40% of listings. Most sellers list after a peak period — they're selling at the top of the trailing 12-month average while the actual trajectory has already turned down. If the last 3 months are below the prior 3, the multiple is based on a number that may already be historical.

The 18-month rule: Businesses under 18 months old have not survived a full seasonal cycle, an algorithm update, or a supplier disruption. 67% of online businesses that fail do so in their first 18 months. You're not buying a business under this threshold — you're buying a hypothesis.
2
Verify the Revenue

Never evaluate a deal based on a seller's screenshots, spreadsheets, or summary documents. These are marketing materials, not financial statements. Verification means going to the actual source where money is recorded.

Depending on business type, here is where you verify:

In our dataset, 63% of Flippa listings have unverified revenue claims. On Empire Flippers, 100% are verified before listing. On Acquire.com, data room access is standard but buyer-initiated. Know which platform you're on and adjust your skepticism accordingly.

When you request verification access, sellers will sometimes push back or offer to "share a screen." Do not accept this. Read-only access to the actual dashboard is the standard. Any seller who refuses to provide it is telling you something important.

3
Score the Multiple

Every online business listing has a price. That price is expressed as a multiple of monthly net profit (SDE) or annual recurring revenue (ARR for SaaS). The multiple tells you how many months or years of current earnings you're paying for the right to own future earnings.

The first question is not "is this a good business?" It's "is this fairly priced for what it is?" Here are the category benchmarks from our 4,200+ analysis dataset:

Business type Fair multiple range Overpriced above Bargain below
SaaS (low churn, growing) 3.5–5x ARR 5.5x ARR 3x ARR
Content site (SEO, stable) 32–42x monthly 46x monthly 28x monthly
Amazon FBA (branded) 36–48x monthly 52x monthly 30x monthly
Ecommerce (Shopify) 24–36x monthly 40x monthly 20x monthly
Newsletter / media 32–40x monthly 44x monthly 26x monthly
Dropshipping 18–28x monthly 32x monthly 15x monthly

A business priced above its category "overpriced" threshold needs an exceptional justification: very strong recent growth, a proprietary moat, or a strategic value that makes it worth more to you specifically than it would be to the average buyer. If none of those apply, the price is wrong and negotiation is the path forward.

The multiple compression opportunity: Businesses priced at or below the "bargain" threshold are worth investigating for a specific reason. Either the seller needs to exit fast (ask why), the business has a fixable issue priced in (understand what it is), or it's been on the market a long time (find out why). Any of these create negotiating room.

One important caveat: multiples compress for declining businesses. A content site showing 15% revenue decline over 6 months should be priced at 24–30x, not 38x — even if its trailing 12-month average looks strong. Always calculate the multiple on trailing 6-month run rate, not trailing 12-month average, when there's a declining trend.

4
Audit the Traffic

Revenue flows from customers. Customers come from somewhere. Understanding exactly where — and what happens if that source disappears — is the most important risk assessment in any online business acquisition.

In our dataset, single traffic source concentration is the #1 reason a deal receives a WALK AWAY verdict. 61% of all disqualified deals had meaningful concentration risk in their traffic. Here's how to audit it:

Request Google Search Console access

GSC shows you exactly which search queries drive traffic, which pages rank, and how those rankings have trended over time. A content site with 40 ranking pages across diverse topics is materially different from one with 3 pages that each drive 30% of traffic. GSC shows you this in 5 minutes.

Check the traffic source breakdown in Google Analytics

You want to see: Organic search, direct, referral, social, and email all contributing meaningful percentages. What you don't want to see: 80%+ organic with no email list, or 70%+ from a single paid channel with razor-thin ROAS.

Healthy organic % of total traffic 40–65%
Single-source concentration (danger threshold) Above 70%
Minimum email list % of monthly visitors (content sites) 5%+
Branded search % (indicates loyal returning audience) 15%+ is strong

Check for Google penalty history

In GSC, go to Security & Manual Actions. Any manual action — even a resolved one — is a signal that this site has operated near policy edges. Cross-reference with the Wayback Machine at key algorithm update dates (March 2024 HCU, August 2023 core update) to see if there were ranking drops the seller hasn't disclosed.

The ghost traffic trap: Some sellers report "100K monthly sessions" that are mostly bot traffic, purchased visits, or traffic from now-dead referral sources inflating the GA averages. Always look at bounce rate by source, session duration, and conversion rates. Real human traffic converts. Fake traffic doesn't.
5
Assess Operational Risk

The revenue is real, the multiple is fair, the traffic is diversified. Now ask: can you actually run this business? And what breaks in the first 90 days when the seller is no longer in the seat?

Operational risk is the most underweighted variable in first-time buyer analysis. It's also the most common cause of post-acquisition revenue decline — not the market, not the algorithm, but the knowledge transfer gap.

The transition period is your best insurance. Negotiate a 90-day paid transition in which the seller is available for questions and introductions. Most sellers will agree if you frame it as ensuring the business's continued success. It's worth 2–3% of deal value to have the prior owner on call during the first quarter.
6
Structure and Close

You've verified the revenue, scored the multiple, audited the traffic, and assessed the operations. If you're still here, you have a deal worth buying. Now the question is: at what price, on what terms, and with what protections?

Making the offer

Start below ask unless the deal has scored 9+ and you know there's competitive interest. Our data shows the average discount from ask is 6% on Empire Flippers, 8% on Acquire.com, and 11% on Flippa. Lead with your reasoning — "I'm offering X because the last 3 months show a 12% decline from the trailing average" — rather than just a lower number. Sellers respond better to reasoned offers than arbitrary lowballs.

Deal structure options

Cash at close is not the only option. These structures are common and worth knowing:

Full cash at close Simplest. Seller prefers. Buyer pays full risk.
Seller financing (10–30% note) Seller stays at risk. Aligns incentives. Common on Acquire.com.
Earnout (% of future revenue) Protects buyer if revenue declines post-close. Hard to enforce.
SBA 7(a) loan (10% down, 10-year term) Preserves capital. Requires SBA-eligible business. 60–90 day close.

Legal due diligence

Do not close without a deal attorney reviewing the purchase agreement, regardless of deal size. For deals under $100K, budget $1,000–$2,500 for legal. For deals above $250K, budget $4,000–$8,000. The purchase agreement needs to cover: asset transfer scope, representations and warranties, indemnification, non-compete, and transition obligations. Brokers provide templates — have an attorney review the template, not draft from scratch.

Asset transfer checklist

Use escrow, always. Empire Flippers and Acquire.com have built-in escrow. On Flippa and direct deals, use Escrow.com or a deal attorney to hold funds. Never wire directly to a seller before asset transfer is complete.

The Deal Alert AI Score: What All 6 Steps Produce

Every analysis Deal Alert AI runs compresses these six steps into a single score from 1–10 and a verdict: BUY, NEGOTIATE, or WALK AWAY. The score weights each dimension:

Revenue quality
25%
Verification status, revenue type (recurring vs. one-time), trend direction
Multiple vs. benchmark
20%
Asking price relative to category-adjusted fair value range
Traffic diversification
20%
Source concentration, channel mix, penalty history indicators
Operational risk
20%
Owner dependency, documentation, team, transferability
Growth trajectory
15%
Revenue trend, market dynamics, growth levers available

A score of 8+ means the deal passes all five dimensions cleanly. Only 11% of the 4,200+ listings we've analyzed reach this threshold. When one does, it's worth moving fast — especially on Empire Flippers, where the average time from listing to LOI is 12 days.


Common Mistakes That Destroy Capital

A framework is only useful if you actually use it. These are the most common ways buyers skip steps and pay for it:

Buying on trailing 12-month average when the trend is down

A business earning $5,000/month average over the trailing year — but $3,200 in the most recent month — is not a $5,000/month business. The seller is selling the average. You're buying the trend. Always calculate the multiple on the most recent 3-month run rate when there's a downward trend.

Trusting the seller's time estimate

Sellers consistently underestimate the time their business requires — either intentionally to make it more attractive, or genuinely because they've automated things in their head that aren't documented. Add 50–100% to whatever time estimate the seller provides and test whether the business still makes sense at that level.

Skipping legal because the deal is "small"

A $40K business acquisition without a proper purchase agreement has no representations and warranties, no indemnification for undisclosed liabilities, and no recourse if the seller's revenue claims turn out to be inflated. The legal cost is $1,000–$1,500. There is no deal size at which this is optional.

Releasing escrow before transfer is complete

This happens more often than it should, usually because the buyer is excited and the seller is in a hurry. Release escrow only after every item on your asset transfer checklist is confirmed in writing. Domain transfer takes 5–7 days. Email list migration takes a day. Wait.

Get the Top-Scored Deals Every Morning

Deal Alert AI runs this 6-step framework on every new listing from Empire Flippers, Flippa, and Acquire.com — and sends you the top deals at 7am, scored and filtered to your criteria.

Start Free →