Red Flags When Buying a Business: What Listings and CIMs Won't Tell You

Every business listing tells a story. The seller's job is to make that story compelling. Your job is to figure out what the story leaves out.

After reviewing hundreds of deal listings and confidential information memorandums (CIMs), I can tell you this: the most dangerous red flags are rarely obvious. They hide in what's omitted, what's framed just a little too carefully, and what sounds reasonable until you pull the thread.

Here are the red flags I've learned to watch for — and what they actually look like in practice.

Revenue Claims Without Supporting P&L Statements

This is the most basic red flag, and it's shockingly common. A listing says the business does $1.2M in revenue and $350K in seller's discretionary earnings (SDE). But when you ask for the profit and loss statements, you get a one-page summary the broker put together, not actual financials.

What this looks like in practice: the broker sends you a "financial summary" in a PDF with round numbers. Revenue is listed as $1.2M — not $1,187,432. Expenses are grouped into three or four categories. There are no monthly breakdowns, no cost of goods detail, and no balance sheet.

The fix is simple. Ask for two to three years of tax returns, monthly P&L statements from their accounting software (QuickBooks, Xero, whatever they use), and bank statements. If the seller pushes back on providing actual financials, that tells you everything you need to know.

A legitimate seller with a profitable business has nothing to hide in their P&L. They want you to see it.

Inflated or Vague Add-Backs

Add-backs are legitimate adjustments to a business's financials. The owner's salary, one-time legal expenses, a personal vehicle run through the business — these are real add-backs that a new owner wouldn't incur.

The red flag isn't add-backs themselves. It's when they're inflated, poorly documented, or make up more than 30-40% of the total SDE.

What this looks like in practice: a CIM shows $180K in net income with $220K in add-backs to arrive at $400K SDE. The add-backs include "owner travel" at $45K, "personal expenses" at $38K, and "one-time marketing spend" at $52K. None of these have receipts or detail behind them.

I've seen cases where the "one-time marketing spend" was actually the business's core customer acquisition cost — meaning the new owner would absolutely need to spend that money too. Suddenly that $400K SDE is really $348K, and the deal economics change significantly.

For every add-back, ask: would the business generate the same revenue without this expense? If the answer is no, it's not an add-back. It's an operating cost the seller is trying to hide.

High Owner Dependency

Some businesses are really just jobs with a fancy wrapper. The owner is the primary salesperson, the key client relationship holder, the lead technician, and the operations manager. When they leave, the business loses its engine.

What this looks like in practice: the CIM describes the owner as working "10-15 hours per week" in a "management and oversight" role. But when you dig in, you learn the owner handles all estimates, closes every sale, and personally manages the top five accounts. The "team of 8 employees" are all execution staff — none of them touch sales or client relationships.

Ask the seller to walk you through a typical week, hour by hour. Ask who the top five clients talk to when they have a problem. Ask what would happen to revenue if the owner took a three-month sabbatical.

If the answer to that last question is "revenue would drop significantly," you're not buying a business. You're buying the right to do someone else's job — and paying a multiple for the privilege.

Customer Concentration

This is the silent killer. A business doing $2M in revenue sounds great until you learn that one client accounts for $800K of it. Lose that client, and you've just overpaid for a $1.2M business.

What this looks like in practice: the CIM will often say something like "diversified client base of 200+ customers." That's technically true — but it doesn't tell you that three of those customers represent 60% of revenue and the other 197 represent the remaining 40%.

The rule of thumb most acquirers use: if any single customer represents more than 15-20% of revenue, that's a concentration risk. If the top three customers represent more than 40%, you need to understand exactly how sticky those relationships are.

Ask for a revenue breakdown by customer for the last three years. Look at whether the concentration is getting better or worse. And critically, find out if those key customers have contracts — or if they're operating on handshake agreements that could evaporate during a transition.

Vague or Shifting Reason for Sale

Every seller has a reason for selling. Retirement, health issues, a new venture, burnout — these are all legitimate. The red flag is when the reason is vague, keeps changing, or doesn't match the seller's situation.

What this looks like in practice: the listing says "owner retiring." But the owner is 44 years old. When you ask on the first call, they say they want to "pursue other opportunities." On the second call, they mention the industry is "changing" and they want to "get ahead of it." By the third conversation, you learn there's a new competitor that's been eating into their margins for the past 18 months.

The reason for sale shapes the entire deal. A genuinely retiring owner with a healthy business will be patient, transparent, and willing to help with the transition. An owner who's running from a problem will rush the process, get defensive about financial questions, and push for a quick close.

Ask directly, and then verify the answer against the financials. If someone says they're retiring from a thriving business, the numbers should show stable or growing revenue, not a two-year decline.

Declining Revenue Trends

A CIM will almost always present trailing twelve months (TTM) revenue. That single number can mask a lot. A business that did $500K last year sounds the same whether it was trending up from $400K or down from $650K.

What this looks like in practice: the listing shows $1.8M TTM revenue. The CIM includes an annual summary showing $1.7M, $1.9M, and $1.8M over three years — looks stable. But when you get the monthly P&L statements, you see that revenue was $170K per month in the first half of last year and dropped to $130K per month in the second half. That business is trending toward $1.56M annualized, not $1.8M.

Always ask for monthly revenue data going back at least 24 months. Plot it. Look for the trend line, not the average. A business with declining monthly revenue is a fundamentally different asset than one with stable or growing revenue — even if the TTM number looks the same.

Deferred Maintenance and Hidden Capex

Some sellers boost short-term profitability by deferring necessary spending. They stop replacing equipment, skip software upgrades, let the website rot, or run lean on inventory. The P&L looks great right up until you close — and then you discover you need $150K in capital expenditures just to keep the lights on.

What this looks like in practice: the business shows strong margins, but the equipment list includes machines from 2009. The website hasn't been updated in three years. The warehouse lease is month-to-month because the landlord offered a discount for not signing a long-term commitment (translation: the landlord wants flexibility to raise rent or not renew).

During due diligence, make a list of every physical and digital asset the business depends on. How old is it? When does it need to be replaced? What would it cost? Build a capex forecast for the first three years post-acquisition and subtract that from the deal economics. If the deal still works, great. If it doesn't, you've just saved yourself from buying someone else's deferred problems.

Unrealistic Growth Projections

Almost every CIM includes a section on "growth opportunities." Sellers love this section because it lets them justify a higher asking price based on potential rather than performance.

What this looks like in practice: the business has been flat at $1M in revenue for four years. The CIM includes a section titled "Significant Growth Upside" that outlines how a new owner could "easily" reach $2M by expanding into adjacent markets, adding an e-commerce channel, and hiring a sales team.

The question to ask is: why hasn't the current owner done any of these things? If these growth opportunities were genuinely easy, a rational business owner would have pursued them. The usual answer is that they're not easy — they require significant capital, expertise, or time that the seller either didn't have or tried and failed at.

Price the business based on what it does today, not what someone hopes it could do. If you can grow it, that's upside you create — not something you should pay the seller for.

Too-Good-to-Be-True Multiples

When a business is listed at a notably low multiple of SDE — say 1.5x for a business that should trade at 3x in its industry — there's almost always a reason.

What this looks like in practice: a service business with $300K SDE listed at $450K (1.5x). The listing emphasizes "motivated seller" and "quick close preferred." On paper, it looks like a steal. In reality, the business has a pending lawsuit, a key employee who's about to leave, or revenue that's about to fall off a cliff when a major contract expires.

Low multiples aren't bargains. They're the market telling you something is wrong. Your job is to figure out what.

Similarly, watch for businesses listed at above-market multiples justified by "brand value," "proprietary systems," or "untapped potential." These are usually signs of a seller who's emotionally attached to a number that doesn't match what a buyer would rationally pay.

How to Protect Yourself

None of these red flags mean a deal is automatically bad. Some businesses with customer concentration are still great acquisitions if the relationships are contractually locked in. Some declining revenue trends are temporary and fixable. The point is to see these signals clearly so you can price the deal accurately — or walk away before you waste months on due diligence.

The best protection is a systematic approach to evaluating deals. Track every listing in a pipeline, flag the red flags early, and don't let emotional attachment to a deal override what the data is telling you. Tools like Dealwright exist specifically for this — to help you organize your deal flow, track diligence items, and catch the patterns that are easy to miss when you're evaluating multiple opportunities at once.

The second-best protection is experience. The more deals you look at, the faster you'll spot the ones that don't add up. But you don't have to learn every lesson the hard way. Start with a healthy skepticism toward any number a seller presents, verify everything independently, and remember: in acquisitions, the absence of information is itself information.

The listing told you a story. Now go find out what it left out.