The financial due diligence checklist most first-time buyers miss

First-time buyers often walk into a data room believing they know what they’re looking for, then surface with incomplete answers to the questions that actually matter. The target’s income statement looks clean. The seller’s CPA provided a summary. But somewhere between the bank statements and the customer ledger lies a $50,000 one-time expense you almost paid for, a working capital line that never normalizes, or a revenue recognition pattern that won’t repeat. Financial due diligence for acquisitions under $10M isn’t about catching fraud—it’s about answering one question: what will this business actually earn in my hands? Most first-time buyers skip the mechanics that separate guesswork from certainty.

The normalized earnings foundation most deals get wrong

Before you hunt for hidden liabilities, your baseline normalized EBITDA (or SDE) calculation must stand on solid ground. This isn’t the seller’s estimate or the accountant’s one-page summary—it’s a line-by-line reconstruction using actual source documents.

Start with three years of filed tax returns and corresponding general ledgers. If the seller bookkeeps in QuickBooks, request a P&L by account for each year and a full general ledger export. Don’t accept a PDF; you need sortable data. Run the three years side by side. Look for:

• One-time or non-recurring items: equipment sales, litigation settlements, severance, relocation costs, or insurance proceeds. These appear once; they won’t repeat. A $35,000 severance paid in year two doesn’t belong in normalized earnings.
• Owner discretionary expenses: country club dues, vehicle leases titled to the owner, insurance on the owner’s personal life, travel marked as business that carries personal benefit. These are real cash costs to the current owner that your operations team may not incur.
• Related-party transactions at non-market rates: rent paid to an affiliate, supplies purchased from a cousin’s company at 20% above market, consulting fees to the owner’s spouse. Recalculate these at what an unrelated third party would charge.
• Compensation and benefits changes: If the seller runs the company solo and pays herself $40,000 annually, you’ll hire a full-time operations manager at $65,000. If the business absorbs the owner’s entire health insurance bill ($18,000 a year) and you’ll move it to payroll, that flows through normalized earnings.
• Revenue quality and timing shifts: A lump-sum contract completed in December doesn’t repeat in January. Subscription revenue that renews annually should appear consistent; a spike in one month flags a data entry error or a one-time customer win.

The discipline here is mechanical: for each adjustment, you document the source (tax return page, GL account, invoice), the amount, and the reason it doesn’t repeat. This becomes your normalization schedule, and every buyer’s advisor will ask for it before drafting an LOI.

Working capital: where deals unwind post-close

Working capital adjustments sink more deals than any other post-closing surprise. The target’s balance sheet shows $120,000 in accounts receivable. You assume you’ll collect it. Then a customer disputes an invoice, a return arrives in week two of your ownership, or accounts receivable aging shows half the balance is 90+ days outstanding and partially written off in your first quarter.

During due diligence, pull the accounts receivable subledger (customer by customer, invoice by invoice) and test a sample. For a business with $500,000 annual revenue, pull the last 60 days of invoices. Verify that at least five invoices actually exist in the customer’s accounting system or were referenced in correspondence. If a $30,000 invoice doesn’t have a PO, delivery confirmation, or email trail, ask. Likewise, scan for credit memos issued after the close date (a strong signal the seller knew about a dispute).

Inventory is simpler in concept, harder in practice. If the target carries stock, request a physical count performed within 60 days of your site visit, conducted by a third party (not the seller’s team). Compare that count to the GL balance. A variance of more than 3% warrants investigation—either the GL is wrong, inventory is being misstated, or shrinkage is worse than disclosed. For a perishable or fast-moving inventory, ask for a monthly aging: how much is older than 90 days? Slow-moving stock doesn’t normalize to future earnings the way fresh inventory does.

Accounts payable and accrued liabilities are where sellers sometimes tuck liabilities. Pull the payables aging as of the proposed closing date. Flag any invoice that arrived before close but wasn’t accrued. Flag any accrual marked “estimate” without a supporting invoice or contract. Imagine discovering a $25,000 accrual for contractor work post-close that the seller knew about but never finalized—that’s your burden now.

The working capital peg—the target balance sheet date that defines what you’re buying—must be calculated consistently across three years to show whether working capital historically drifts. If year-end working capital sits at 15% of annual revenue in year one but 22% in year two, ask why. Did the business slow down? Did the seller load the balance sheet with receivables before sale? Once you understand the pattern, the purchase agreement typically pegs working capital to a normalized baseline (say, 18% of revenue) with a dollar-for-dollar adjustment post-close.

Contingent liabilities and the lease files everyone forgets

Most first-time buyers review vendor contracts and customer agreements but skip the operational liabilities hiding in older files. Request copies of:

• All leases (real estate, equipment, vehicles) with current amendment history. A five-year lease signed in 2021 has three years remaining; you inherit those payment obligations. If the lease includes CPI escalators or renewal options, the seller’s stated lease cost may not be your actual cost.
• Loan documents and credit lines with terms, interest rates, prepayment penalties, and lender contact information. Some loans have change-of-control clauses that trigger acceleration if you acquire the business. Others carry personal guarantees from the seller that must be released at close. Confirm with the lender what happens on acquisition.
• Warranty and return policies documented in customer agreements or the website. If the business carries a 30-day money-back guarantee, you’re inheriting open-ended refund exposure. Calculate average returns as a percentage of revenue and accrue for pending returns.
• Employment agreements and severance triggers. If the business has an operations manager with a contract stating “severance of 12 months’ salary upon change of control,” that’s a day-one cost to you, not the seller.
• Tax compliance letters from the IRS or state tax authorities. If the business was under audit or received a notice of deficiency, that’s your problem post-close unless explicitly carved out. Request all correspondence going back three years.

Environmental or regulatory compliance is easy to overlook for service businesses but critical for manufacturing or food-related targets. Does the business hold any licenses, permits, or certifications (food handler, hazmat, contractor licensure) that renew annually? Are there any pending violations, fines, or compliance notices? A single missed health inspection fine could cost thousands.

Revenue quality and customer concentration risk

Normalized EBITDA is only predictive if the revenue it’s based on actually repeats. For a target with $2M in annual revenue, identify the top 10 customers and calculate what percentage of revenue they represent. If the top three customers are 45% of revenue, that’s material customer concentration risk. Verify that these customers have renewals, contracts, or purchase orders in place post-close. If a $400,000 annual customer (20% of revenue) is on a month-to-month purchase order and has been with the business for only two years, model what happens if that customer leaves in month three of your ownership.

Request the last 12 months of invoices and run them through a pivot table by customer. Look for patterns: Is revenue consistent month-to-month, or do specific months spike? If December always shows $150,000 more in sales than other months, that could be seasonal (normal and repeatable) or project-based (one-time). Ask the owner to explain the pattern. Then check: do the three months you saw in your site visit match the historical pattern? If you visited in October and the business showed $300,000 in that month’s revenue, but historical Octobers average $180,000, you might be looking at an inflated sample.

The data organization piece most buyers skip

By now you have tax returns, GL exports, customer invoices, lease agreements, and contingent liability lists. The next step is organizing all of this into a normalized EBITDA schedule that you (and your CPA or M&A advisor) can actually audit. This isn’t a luxury—it’s the difference between a defensible offer and a guess.

Create a three-year summary showing reported net income, then line-by-line adjustments (one-time expenses, owner discretionary costs, related-party corrections, inventory obsolescence, etc.), landing on normalized EBITDA. Each adjustment should link to a source document (GL account number, tax return page, invoice number). If someone questions your math in a post-close dispute, you have a clear audit trail.

For smaller deals (under $5M), you can do this in a spreadsheet. For anything larger or more complex, build it in a shared data room alongside your source documents so your accountant, lender, or potential partners can navigate the assumptions and verify them against the actual books. This discipline forces you to confront hard questions now—before you’ve already signed the purchase agreement.

Frequently Asked Questions

What’s the difference between EBITDA and SDE, and which should I use for my acquisition?

EBITDA (Earnings Before Interest, Taxes, Depreciation, and Amortization) is used for larger deals and appears on audited financial statements. SDE (Seller’s Discretionary Earnings) is standard for smaller acquisitions and includes the owner’s discretionary compensation and benefits as an add-back. For deals under $10M, SDE is typically the metric used to calculate an offer price. Both start with net income and add back the same categories of adjustments; the difference is whether you include the owner’s compensation as a cost to normalize.

Do I need a full Quality of Earnings report before making an offer, or can I use my own analysis?

A full Quality of Earnings (QoE) engagement by a licensed firm is the gold standard for deals $5M and above, but for smaller acquisitions, a well-documented normalized earnings analysis performed by a buy-side CPA or internal team is often sufficient as a first pass. A QoE engagement is more expensive and takes longer; a well-organized normalization schedule and source documentation can answer most of the questions a smaller buyer needs. That said, for any deal with complexity—multiple entities, inventory, contingent liabilities, or customer concentration—confirm your analysis with a licensed CPA before signing the LOI.

How far back should I request financial records during due diligence?

Request a minimum of three years of tax returns, general ledgers, and monthly bank statements. Three years is standard because it lets you identify one-time items, seasonal patterns, and trends in working capital. If the business is younger than three years old, request all available records from inception. For specific items like leases, employment agreements, and vendor contracts, go back five years or to the inception date, whichever is shorter, to catch long-term obligations and renewal triggers.

What’s a red flag in accounts receivable that should stop a deal?

A high percentage of aged receivables (anything over 90 days outstanding more than 10% of the balance) suggests either customer credit issues or poor billing discipline. If you discover that the business typically doesn’t send invoices for 45 days post-delivery, the “cash” shown in the P&L isn’t actually cash-collected yet. Another red flag: if the business has written off receivables in prior years but similar balances persist (a sign of chronic collection issues), model a conservative collection percentage and adjust your offer accordingly.

Should the seller’s accountant’s work papers influence my due diligence scope?

Work papers from the seller’s CPA are a starting point, not a substitute for your own verification. A CPA’s role is to prepare accurate financial statements for tax filing, not to vet every transaction for due diligence purposes. If the seller’s CPA prepared reviewed or audited financials (vs. compiled statements), that adds credibility—but you still must test revenue quality, customer concentration, and contingent liabilities. Don’t assume that because a CPA signed off on the numbers, you’ve completed due diligence.

Key takeaways: Build your normalized EBITDA calculation from source documents, not summaries. Test revenue quality and customer concentration independently. Pull working capital schedules (receivables, inventory, payables) and age them to spot liabilities. Hunt for contingent obligations in leases, loan documents, and employment agreements. Organize everything into a defensible schedule linked to source documents. The extra work upfront saves you from post-close surprises that cost far more than the time investment.

This article is educational and does not constitute M&A, investment, or accounting advice — confirm findings with a licensed CPA or M&A advisor before making an offer.

This article is educational and does not constitute M&A, investment, or accounting advice — confirm findings with a licensed CPA or M&A advisor before making an offer.

For a faster alternative to a traditional QoE engagement, see IncomeReady for M&A Buyers.