Due diligence

Red Flags When Buying a Business: What to Look For Before You Sign

The financial, commercial, legal and behavioural red flags that should change a price, a structure, or a decision to proceed at all.

By TrueValue11 min read

Key takeaways

  • A red flag is something that should change whether you proceed at all, not just the price — that distinction is what separates it from an ordinary negotiation point.
  • The most common flags cluster in four places: the numbers (earnings quality), the commercial base (concentration and contracts), the people and operations, and the seller's own behaviour during the process.
  • A flag has three honest responses: price it into the offer, structure around it with an earn-out, retention or indemnity, or walk away. Which one depends on whether the risk can be measured and shared, or not.
  • The worst flags are the ones that only show up when several small ones are read together — one grown add-back is noise, three growing add-backs alongside a customer who is 40% of revenue is a pattern.
  • Diligence exists to find these before completion, not after. Most of what this guide describes is found by reading the contracts and the customer schedule, not by re-checking the summary numbers a third time.

What a red flag actually is

A red flag when buying a business is a fact that changes whether the deal should happen at all, or on what terms — not simply a fact you would have preferred to be better. Every target has weaknesses: a slower quarter, a competitor gaining ground, a system that needs replacing. Those are normal and belong in the price. A red flag is different in kind, not just degree: earnings that are not what they appear to be, a dependency the business cannot easily survive losing, or a seller who behaves as if something is being hidden. The test that separates the two is simple to state and hard to apply under time pressure: would a reasonable buyer, knowing this fact clearly, want to change the price, the structure, or the decision to proceed? If the honest answer is no, it is a weakness, not a flag.

That distinction matters because deals get killed by the wrong reaction as often as they get saved by the right one. Treating every weakness as a deal-breaker means never buying anything; treating every red flag as a normal negotiation point means paying full price for a business that is not what it appears to be. The rest of this guide is organised by where flags usually show up, with what to do about each.

Financial red flags

These are the ones most buyers look for first, and the ones a seller's adviser has usually already tidied for presentation — which is exactly why they need checking rather than reading off the summary.

Common financial red flags
What it looks likeWhy it matters
Add-backs that grow between drafts of the same set of adjusted earningsEach individual add-back may be defensible; a pattern of the adjusted figure rising every time you ask a question suggests the underlying earnings are being managed towards a target, not reported.
Revenue recognised before cash or the work is completeInflates the current period at the expense of a future one, and can make growth look stronger than the cash the business actually generates.
Gross margin that does not match the sector, with no explanationEither the business is genuinely unusual — worth understanding — or costs are being allocated somewhere they should not be.
Debtor days rising while sales are flat or fallingOften a sign that revenue is being pulled forward or that customers are slowing payment because they are unhappy, in trouble, or both.
Related-party transactions with no arm's-length pricing statedRent, management charges or supply arrangements with a connected party can flatter or depress reported profit depending on how they are priced.
Stock or work-in-progress that does not reconcile to a physical countA frequent source of overstated assets in owner-managed businesses, and hard to catch from the accounts alone.
One-off costs excluded from adjusted EBITDA every single yearA genuinely one-off cost happens once. The same category of "one-off" cost appearing in three consecutive years is a recurring cost wearing a one-off label.

None of these proves dishonesty on its own — sellers usually believe their own adjusted figures, and the accounts of a small owner-managed business are rarely built with an eventual sale in mind. The response is the same either way: read the schedule behind each add-back and each margin, not just the total, and reconcile it to the accounts and the bank statements where you can. How to analyse a CIM covers the first pass on the numbers a seller presents.

Commercial red flags

  • Customer concentration. One customer, or a small group, worth a large share of gross profit. This is common enough and consequential enough that it has its own guide on how to measure it and price around it.
  • Contracts about to expire with no renewal signalled. A business whose largest agreements lapse in the months after completion puts the risk exactly where a new owner is least placed to manage it.
  • No long-term agreements at all, in a business that presents itself as having "sticky" customers. If the relationships are really that strong, there is usually a contract to show it; an absence of contracts alongside a claim of stickiness is worth testing directly with the customers.
  • Declining renewal or retention rates, especially where the trend is not visible in a single summary figure and only shows up cohort by cohort over several years.
  • A sales pipeline that does not support the growth story. A forecast built on new business that has not been quoted, let alone signed, is a forecast, not a fact — see the distinction drawn in what is an investment memorandum between stated history and projection.
  • Pricing power that has visibly eroded — rising discounting, falling average order value, or margin compression the seller attributes entirely to input costs rather than to competitive pressure.

People and operational red flags

  • Key-person dependency, most obviously where the owner personally holds the main customer relationships, the supplier relationships, or both, and has no deputy who could step into either.
  • High staff turnover, particularly in senior or customer-facing roles, which both signals a problem and removes institutional knowledge just as a new owner needs it most.
  • No documented processes. A business that runs entirely on what is in one or two people's heads is fragile in a way the accounts never show.
  • Senior roles left vacant in the run-up to a sale. Occasionally coincidence, but worth asking directly why, and whether the vacancy was caused by the sale process itself.
  • Systems and equipment in visibly poor repair, or IT infrastructure that has been under-invested in for years — a cost the buyer inherits on day one, whatever the accounts say about maintenance spend.
  • Undisclosed or threatened litigation, including a dispute the seller describes as "resolved" with nothing in writing to show it.
  • Intellectual property not actually owned by the company — code, designs or a trading name held personally by the owner or by a contractor who was never asked to assign it.
  • Missing licences, permits or registrations the business needs to trade lawfully in its sector.
  • Change-of-control clauses in material contracts, which can let a customer or supplier terminate or renegotiate purely because the ownership changes — found by reading the signed contract, never the summary.
  • Tax positions that look aggressive without professional advice behind them, or an HMRC enquiry the seller has not mentioned unprompted.
  • Unfunded or poorly understood pension liabilities, particularly in an older business with a legacy defined-benefit scheme.

Behavioural red flags from the seller

Some of the most reliable signals have nothing to do with a number on a page. A seller who resists reasonable requests, or whose story shifts as the process goes on, is telling you something even when every document looks clean.

  • Reluctance to let you speak to customers, staff or suppliers, well beyond ordinary confidentiality concerns about a sale not yet public.
  • Pressure to move unusually fast, especially combined with resistance to a normal diligence scope.
  • Numbers that shift between conversations without a stated reason for the change.
  • Reluctance to give warranties on statements the seller has made verbally or in the information memorandum — if a fact is true, warranting it usually costs the seller nothing.
  • Evasiveness in the data room: documents that arrive late, arrive incomplete, or arrive only after being asked for a third time.

How to respond to a red flag

Once a flag is found, there are three honest responses, and the choice between them depends on whether the risk can be measured and shared, or not.

  • Price it. Where the flag reduces the earnings a buyer can actually rely on — a customer likely to be lost, a cost that will recur — the response is to value the business on the earnings without it, not to accept the seller's headline figure and negotiate a token discount.
  • Structure around it. Where the risk is real but uncertain — will the customer renew or not — an earn-out, a retention, an indemnity or a deferred element can share the risk between buyer and seller rather than forcing either side to bet the whole price on one outcome.
  • Walk away. Reserved for flags that are not really about price at all: evidence the numbers cannot be trusted, a legal exposure with no reliable ceiling, or behaviour from the seller that suggests the relationship itself cannot be trusted through to completion. A structure only works if both sides are negotiating in good faith about a real business; it cannot fix a seller who is not.

Common mistakes

  • Treating every flag as equally serious. A pattern of growing add-backs deserves more weight than a single vacant junior role; triaging by how much the fact would actually change the price keeps diligence focused on what matters.
  • Finding the flag and doing nothing about it. A red flag that is noted in a report and never reflected in the price, the structure or the decision was not worth finding.
  • Confusing "the seller disclosed it" with "the risk is gone". Disclosure moves a fact from hidden to known; it does not move the risk from the buyer to anyone else unless the terms are changed to reflect it.
  • Reading the CIM and skipping the contracts. Concentration, change-of-control and termination risk live in the signed agreements, not in the seller's summary of them.
  • Assuming a clean set of accounts means a clean business. Audited or accountant-prepared accounts confirm the numbers add up; they say nothing about customer concentration, key-person dependency or a change-of-control clause, none of which appears on a balance sheet.

How TrueValue surfaces red flags

The CIM Analyzer reads an uploaded memorandum and lists red flags with the passage they were read from and a severity, rather than a generic quality score — an add-back that grows across drafts or a concentration figure above what your mandate allows is named, not buried in a summary paragraph. Promoting the analysis to a deal turns those findings into items on the due diligence checklist, where a request list goes to the counterparty and each response is filed against the item it answers, so the evidence for or against a flag sits on the record rather than in an inbox. And where a flag is serious enough to be a genuine walk-away condition — a critical red flag still open, the modelled return falling below your hurdle, the price rising past a ceiling you set — it can be written down as a standing condition on the deal, checked against the record automatically rather than relied on from memory months into a process.

Frequently asked questions

What are the biggest red flags when buying a business?

Earnings quality issues — add-backs that grow, revenue recognised early, margins that do not match the sector — sit alongside customer concentration, key-person dependency, undisclosed litigation, and a seller who resists reasonable diligence requests or whose story shifts during the process. A single flag rarely ends a deal; a pattern of several usually should change the price, the structure, or the decision to proceed.

How is a red flag different from a normal negotiation point?

A negotiation point is something you would have preferred to be better and can price into the offer. A red flag is something that, once understood clearly, should change whether a reasonable buyer proceeds at all, or on what terms — it is a difference in kind, not just in size.

Should a red flag always reduce the price?

Not always. Where the underlying risk is measurable and shareable, structure — an earn-out, a retention, an indemnity or deferred consideration — can often do a better job than a flat discount, because it pays the seller if the risk does not materialise and protects the buyer if it does.

What red flags can due diligence actually catch that a CIM review cannot?

Contract terms, change-of-control clauses, litigation history, and what customers and staff actually say when asked directly — none of which appears in a memorandum's summary. A first pass on the CIM identifies where to look; diligence is where those questions get answered against primary documents.

Is customer concentration always a red flag?

Not on its own. A concentrated customer on a long contract, with high switching costs and a relationship held by a team rather than the departing owner, is a different risk from the same percentage on a rolling agreement the owner personally manages. See customer concentration risk for how to measure and price the difference.

When is the right answer to walk away rather than restructure the deal?

When the flag suggests the numbers themselves cannot be trusted, when a legal exposure has no reliable ceiling, or when the seller's behaviour during the process suggests bad faith. Structure can share a measurable, real risk; it cannot compensate for not being able to trust the other side of the negotiation.

Related guides