Due Diligence for an Online Business 101

Due diligence isn't one step that happens after you're under contract. It runs in two waves: a light, self-directed check you do before you ever put a number in writing, and a much deeper review that happens after a letter of intent (LOI) gives you real access to the seller's records, and, depending on the platform or broker, often an exclusivity period too.

Verifying that the listing's numbers and claims hold up is only half the job. The other half is using diligence to actually learn this specific business: what's driving its results, where it's fragile, and where a new owner could improve it. That deeper understanding is what lets you negotiate from a position of knowing the business better than a generic buyer would, and it's often where you first spot the operational or growth upside that makes one listing worth paying more for than another.

Due diligence checklist

At this stage you're working with whatever the listing, the broker, or the seller has already shared, not a full data room. The goal is to catch anything that would change your offer or rule the business out entirely, before you invest more time.

• Revenue and earnings trend. Is the revenue and net profit trending up, flat, or down over the last 12 to 24 months, and does that match the story the listing tells? If you're not yet comfortable reading a profit and loss statement (P&L), an Empire Flippers listing is a good place to start, since it packages every listing's financials into the same standardized spreadsheet format. Once you're comfortable reading one (see how to read a balance sheet for the related basics), you'll be able to read reports on other platforms with more confidence and know exactly what to ask about when something doesn't add up.
• Revenue concentration. How much of the business depends on one customer, one traffic source, one supplier, or one marketplace account. Heavy concentration doesn't disqualify a listing, but it should shape your offer.
• Platform and account health. For an online business, this means checking the standing of the Amazon seller account, ad accounts, payment processor, or hosting setup the business actually runs on. A thin or flagged account history is a real operational risk.
• Public reputation. Reviews, social presence, and any visible customer complaints. A pattern of recent negative reviews often shows up before it shows up in the numbers.
• Consistency between story and numbers. Whether the seller's explanation for a dip, a spike, or the reason they're selling actually lines up with what the financials show.
• Google Analytics (or equivalent traffic data). Depending on the platform or broker, you may already have view-only access or can request it before an offer. Traffic trend, source mix, and bounce/conversion behavior are hard to fake and often tell a more honest story than the listing's revenue chart alone.

Some of this, like the full financials or Google Analytics access, may require signing a non-disclosure agreement (NDA) first, since brokers commonly gate those details behind one even before an offer. But it's still far short of the full data room access that opens up once an LOI is signed, and the rest, the listing itself, public reputation, and your own questions to the seller or broker, needs nothing signed at all.

What deep due diligence covers after you're under contract

Once your offer is accepted and an LOI is signed, diligence gets much deeper, because a real, written offer gives the seller a reason to actually open up their records, even on platforms where the LOI doesn't come with a formal exclusivity period. That stage is covered in full in the Offer and Due Diligence and Financing & Negotiation pillars:

• A quality of earnings (QoE) report independently rebuilds the seller's real earnings from source data instead of trusting their summary.
• The letter of intent is what sets the diligence period, the exclusivity window, and the terms that are and aren't binding while you dig in.
• Negotiating price and terms is where whatever diligence turns up actually gets used to adjust the deal.

Red flags worth catching early

A few findings are worth acting on before you make an offer at all, rather than waiting to discover them later:

• Numbers that don't reconcile with basic public checks, like traffic estimates that don't match what a free analytics tool shows, or reviews that contradict a growth story.
• A seller who won't answer specific questions about why they're selling, why a number moved, or what's included in the sale.
• An account or platform dependency with a visible history of past violations or suspensions.
• A business operating in a gray area of another platform's terms of service, like a growth tactic that skirts Amazon's or Google's rules. Even if it hasn't caused a suspension yet, it's a real risk that the account or ranking could be suspended or blocked after you own it.

Catching these early doesn't just save you from a bad deal. It also sharpens the offer you do make, since a well-informed offer that accounts for a real risk is taken more seriously than one that ignores it and gets revised down later.

Next: once your early checks hold up, making an offer is where that homework turns into an actual number.