Buying an existing online business, a SaaS tool, a newsletter, a content site, can be a faster
path than building something from zero. The traffic exists, the revenue exists, the hard early
work is already done. But a lot of buyers skip real verification because the deal feels exciting,
and they find out too late that the numbers, the ownership, or the business itself wasn't what it
looked like. Here's what actually needs checking before you send money.
Verify the Revenue Is Real, Not Just Reported
A screenshot of a dashboard proves nothing. Ask for direct, read-only access to the payment
processor, Stripe, Paddle, whatever they use, or at minimum recent bank statements showing
the deposits. If a seller resists giving you this and only offers their own screenshots or a
summary spreadsheet, that's the deal telling you something. Revenue claims are the single
most common thing sellers inflate or fabricate, because it's also the number buyers care about
most.
Understand Why the Business Is Actually Selling
Sellers rarely lead with the real reason. Sometimes it's honest: they're burned out, moving on to
a different project, or the business no longer fits their life. Sometimes it's not: revenue has been
quietly declining for months, the business depends on a platform or algorithm that's about to
change, churn just spiked, or there's a dispute brewing that hasn't surfaced publicly yet. Ask
directly. A seller with nothing to hide will usually give a straight answer.
Check Who You're Actually Buying From
This is where most buyers get careless, and it's where the real risk sits. You're often dealing
with a person you've never met, sometimes operating through a business entity you've never
verified, and sometimes not even the actual legal owner of the code or the brand.
Before wiring anything, confirm the seller's business is properly registered and check whether it
has any judgments, liens, or unresolved legal history attached to it. These deals frequently close
fast, over DM, without a lawyer on either side, which makes basic verification the only real
protection a buyer has.
Review What You're Actually Acquiring
There's a real difference between buying the company itself, meaning you inherit its full legal
history and any liabilities that come with it, and buying just the assets: the code, the domain, the
customer list, the brand. For most small acquisitions, buying the assets is the safer route, since
it leaves the seller's old liabilities behind. Make sure the deal explicitly states what transfers:
domain ownership, the code repository, social accounts, the email list, and any existing
customer contracts.
Check for Technical and Platform Risk
Look at whether the codebase is something you or a developer can actually maintain, or if it's a
mess only the original builder understood. Check how dependent the business is on a single
outside platform, the App Store, one ad network, one marketplace, since a policy change or
account suspension there can wipe out the business overnight, and that risk doesn't show up in
the revenue numbers.
Get the Deal in Writing, Even for Small Purchases
Even a modest deal, five or ten thousand dollars, deserves a simple written agreement. It
should cover exactly what's being transferred, the payment terms, and whether the seller is
available for any support or handoff period afterward. A verbal agreement over Twitter DMs isn't
a contract, no matter how friendly the conversation was.
Buying an existing business can be a genuinely smart move, but only when it's treated like a
real transaction, not a favor between two strangers online. Verifying the revenue, understanding
the real reason for the sale, confirming exactly who you're dealing with legally, and getting the
terms in writing are what separate a good acquisition from an expensive lesson.
FAQs
What's the biggest mistake people make when buying an online business?
Trusting the seller's numbers without independently verifying them. Revenue screenshots and
summaries can be edited or exaggerated; direct access to payment processor data or bank
statements is much harder to fake.
Should I hire a lawyer for a small business acquisition?
For anything beyond a very small purchase, yes. Even a basic contract review can catch
missing terms or unclear ownership transfer that could cause problems later.
How do I verify a seller's revenue claims are accurate?
Ask for read-only access to the payment processor account or recent bank statements showing
deposits, rather than relying on screenshots or summaries the seller created themselves.
Is it safer to buy the business entity or just its assets?
For most small acquisitions, buying just the assets, code, domain, customer list, is safer, since it
avoids inheriting any legal or financial liabilities tied to the seller's original business entity.
What red flags suggest a business listing isn't trustworthy?
Vague or inconsistent answers about why the business is selling, resistance to sharing real
financial access, unexplained recent drops in revenue or traffic, and heavy dependence on a single platform that could change its rules at any time.