How to Protect Yourself When Buying a Business

Buying an established business can provide access to revenue, customers, employees, supplier relationships and operating systems from day one.

It can also expose the buyer to financial inaccuracies, undisclosed liabilities, seller dependency, contractual problems and, in less common cases, deliberately misleading information or fraud.

The solution is not to approach every opportunity with suspicion. It is to follow a structured verification process.

Serious buyers should test what they have been told, distinguish evidence from opinion and gradually increase the depth of their checks as an opportunity progresses. The aim is to understand what you are buying, what could affect its future performance and which responsibilities will transfer to you after completion.

The five main areas of risk when buying a business are:

1. Listing authenticity: whether the opportunity and the people presenting it are genuine.
2. Seller representation: whether the business has been described fully and accurately.
3. Financial accuracy: whether the reported earnings and cash flow are reliable and sustainable.
4. Legal and operational exposure: whether the buyer could inherit undisclosed liabilities or dependencies.
5. Transaction-process risk: whether confidential information, payment instructions or completion arrangements are unsafe.

This guide explains each risk area, the evidence a buyer should request and the protections that may be available.

The main risks of buying a business

The risks of buying a business rarely exist in isolation.

An ownership issue may affect whether assets can be transferred. Weak financial records may obscure both sustainable profitability and unpaid tax. Heavy dependence on the seller may affect customer retention, operational continuity and the valuation.

A buyer therefore needs more than a single checklist. Protection comes from a sequence of increasingly detailed checks.

The discipline is important. A buyer should not incur the cost of full due diligence on every opportunity, but neither should they make a binding commitment based only on a polished sales document.

The first step is to establish that the company, seller and opportunity are what they appear to be.

Confidentiality is a normal part of business sales. A seller may withhold the company name from a public listing because employees, customers or suppliers do not yet know that a sale is being considered.

That does not mean a buyer should proceed indefinitely without verifiable information.

Once an NDA has been signed and the opportunity has reached a serious stage, the buyer should normally be able to confirm:

• The legal name of the company or companies involved.
• The registered company number.
• The identity of the directors and shareholders.
• The names of people with significant control.
• Whether the seller owns the shares or assets being offered.
• Whether an adviser is authorised to represent the owners.
• Whether the transaction will involve shares, assets or a combination of both.

Use Companies House as a starting point

The Companies House register can provide useful information including a company’s registered office, filing history, officers, charges, accounts and stated business activity.

It can help a buyer identify questions such as:

• Are the accounts or confirmation statement overdue?
• Has the registered office changed repeatedly?
• Have several directors recently resigned?
• Are there outstanding charges over company assets?
• Has the company been subject to strike-off action?
• Does the reported trading history correspond with its incorporation date?
• Do the directors named by the seller match the public record?

However, Companies House should not be treated as independent confirmation that all information is correct. Its own search service states that it does not check the accuracy of the information filed, although reforms are giving the registrar stronger powers to query information and request supporting evidence.

Verify the person presenting the opportunity

Establish whether your contact is:

• The owner.
• A director.
• A shareholder.
• A broker or sell-side adviser.
• An employee authorised by the shareholders.
• A professional representative acting under an engagement.

A person may run the business without owning the shares. One shareholder may support a sale while another does not. A broker may be permitted to market the company without having authority to agree changes to the deal.

Ask who ultimately has authority to:

• Approve the sale.
• Provide confidential information.
• Negotiate the price.
• Agree exclusivity.
• Sign the Heads of Terms.
• Sign the final sale agreement.

Where an intermediary is involved, independently verify their identity and contact details. Look for an established professional presence, identifiable employees and contact information that corresponds with the firm’s official channels.

Be alert to artificial urgency

A seller may have a legitimate reason for seeking a quick transaction. Retirement, health, shareholder disagreement, funding pressure or an approaching lease event can all create urgency.

Pressure becomes concerning when it is used to prevent ordinary checks.

Take particular care if you are asked to:

• Pay a deposit before receiving meaningful information.
• Avoid appointing legal or financial advisers.
• Use an unusual or unverified payment method.
• Make a large non-refundable commitment immediately.
• Accept that standard records do not exist.
• Communicate only through messaging applications.
• Avoid speaking directly with the owners or management.
• Transfer money to an individual’s personal account.

A credible seller may expect efficiency, but should also expect a serious buyer to verify the opportunity.

A sales process is designed to present the business positively.

Descriptions such as “highly recurring revenue”, “strong customer loyalty”, “minimal owner involvement” and “significant growth potential” may all be reasonable. They should still be supported by evidence.

The buyer’s role is to separate four different types of information:

Compare information across the process

The first document a buyer receives may be an anonymous teaser. This is usually followed by an Information Memorandum, management discussions and more detailed information during due diligence.

Compare the seller’s statements at each stage.

Look for changes in:

• Revenue.
• EBITDA.
• Adjusted EBITDA.
• The asking price or valuation basis.
• Customer concentration.
• Employee numbers.
• Owner involvement.
• Forecast growth.
• Property arrangements.
• Capital expenditure.
• Working-capital requirements.
• The stated reason for sale.

A change is not automatically evidence of wrongdoing. Early information may be estimated, simplified or subsequently corrected.

What matters is whether the difference can be explained and evidenced.

Ask for evidence behind broad claims

Meet the owner and management

An Information Memorandum can provide a substantial overview, but it cannot show every aspect of how the company operates.

Meetings help the buyer understand:

• Why the owner is selling.
• How decisions are made.
• Which relationships depend on the owner.
• What key employees actually do.
• Where knowledge is concentrated.
• Which customers or suppliers are most important.
• What problems have occurred recently.
• What investment the business will need.
• How management expects the company to perform after a sale.

Ask similar questions at different stages. Materially inconsistent answers should be investigated.

Test the reason for sale

Many good businesses are sold for ordinary reasons, including retirement, health, succession, relocation or a change in personal priorities.

The stated reason should nevertheless correspond with the evidence.

A retirement-led sale, for example, may be supported by the owner’s succession plans and willingness to provide a structured handover. It may require further investigation if it coincides with the loss of major customers, increased borrowing or an unresolved dispute.

The reason for sale should make sense when considered alongside recent performance and future obligations.

A genuine business can still be a poor acquisition at the proposed price.

The financial question is not merely whether the accounts add up. The buyer must decide whether the reported earnings, cash generation and working-capital needs will continue under new ownership.

Understand the documents you receive

Buyers may be given:

• Statutory accounts.
• Management accounts.
• Monthly profit and loss reports.
• Balance sheets.
• Tax returns.
• Bank statements.
• Cash-flow forecasts.
• Budgets.
• Sales reports.
• Aged debtor and creditor reports.
• Stock records.
• An adjusted EBITDA schedule.

These documents do not provide the same level of assurance.

Statutory accounts can be historic and may contain limited detail. Management accounts are normally more recent but may not have been reviewed externally. Forecasts are based on assumptions. An adjusted EBITDA schedule may contain judgements that increase apparent maintainable earnings.

Reconcile the different information where possible and ask the seller to explain inconsistencies.

Assess the quality of revenue

Headline revenue does not reveal how secure or profitable that revenue is.

Consider:

• How much revenue is contracted.
• How much is recurring but non-contractual.
• How much comes from one-off projects.
• Whether customers can cancel at short notice.
• Whether revenue is seasonal.
• Whether sales have been brought forward.
• Whether recent growth is repeatable.
• Whether customer relationships depend on the owner.
• Whether the revenue transfers automatically after a sale.
• Whether the business is winning sales at acceptable margins.

Two companies with identical turnover may carry very different levels of risk.

Examine customer concentration

Request revenue and, where possible, gross profit by customer for several years.

Pay attention to:

• The largest five or ten customers.
• The percentage of revenue represented by the largest customer.
• Contract length and termination rights.
• Customer tenure.
• Recent reductions in orders.
• Change-of-control provisions.
• Whether the owner personally manages the account.
• Whether a key customer has announced a procurement review or strategic change.

Customer concentration does not automatically make a business unattractive. It may affect valuation, funding, deal structure or the amount of consideration paid at completion.

Challenge EBITDA adjustments

Sellers often use adjusted EBITDA to present the earnings they believe will be available to a buyer.

Possible add-backs include:

• Owners’ remuneration.
• Personal vehicles or travel.
• Family members on the payroll.
• One-off professional fees.
• Exceptional repairs.
• Restructuring costs.
• Non-recurring recruitment.
• Property charges involving a connected company.
• Costs directly associated with the sale.

Some adjustments may be reasonable. Others may overstate the profit available after completion.

For each adjustment, ask:

1. Did the cost occur?
2. Why is it considered exceptional?
3. Will it genuinely stop after completion?
4. Will the buyer incur a replacement cost?
5. Is documentary evidence available?
6. Has the same approach been applied consistently?

An owner’s salary may be discretionary, but the work they perform is not necessarily free. If the buyer will need to recruit a managing director, the replacement salary should normally be considered.

Focus on cash as well as profit

A profitable company can still experience serious cash pressure.

Review:

• Debtor days.
• Overdue receivables.
• Bad-debt history.
• Creditor days.
• Stock requirements.
• Obsolete inventory.
• Customer deposits.
• Payments received in advance.
• Capital expenditure.
• VAT, PAYE and corporation tax.
• Loan repayments.
• Seasonal working-capital movements.

Customer deposits deserve particular care. Cash may already have been received even though the company still has to incur the cost of delivering the product or service.

Similarly, low recent capital expenditure may improve reported cash flow while leaving the buyer with ageing equipment that soon needs replacing.

Identify debt and debt-like items

The purchase price may not represent the buyer’s total economic exposure.

Potential debt or debt-like items include:

• Bank loans.
• Overdrafts.
• Asset finance.
• Hire-purchase agreements.
• Director loans.
• Overdue tax.
• Unpaid bonuses.
• Accrued holiday pay.
• Customer refunds.
• Litigation provisions.
• Deferred consideration from a previous transaction.
• Dilapidation obligations.
• Deferred maintenance or capital expenditure.

Your financial and legal advisers should establish how these items are treated in the valuation and completion mechanism.

What financial evidence should a buyer request?

The appropriate scope depends on the size and complexity of the business, but a practical initial request may include:

The absence of a particular document does not automatically prove that a business is unsuitable. Many SMEs have less formal reporting than larger companies.

However, weak information increases uncertainty. That uncertainty may affect the price, deal structure or decision to proceed.

The legal risks depend partly on whether the buyer is purchasing shares or selected assets.

Share purchase

In a share purchase, the buyer acquires ownership of the company itself.

The company continues to hold its contracts, employees, assets and liabilities, subject to any consents or change-of-control provisions. Historic liabilities generally remain within the company after the acquisition.

Asset purchase

In an asset purchase, the buyer acquires specified assets and may assume selected liabilities.

This can provide greater flexibility, but the individual assets, contracts, licences and employees may need to be transferred separately. Some responsibilities can also transfer by law.

Neither structure is universally safer. The correct approach depends on the target, tax position, contracts, employees, licences and liabilities.

Confirm ownership of key assets

Check whether the seller owns or has the right to transfer:

• Equipment.
• Stock.
• Vehicles.
• Websites.
• Domain names.
• Telephone numbers.
• Software.
• Trademarks.
• Designs.
• Databases.
• Customer records.
• Intellectual property.
• Property rights.
• Social media accounts.
• Licences and accreditations.

An important asset may be used by the company without being owned by it.

Software could be licensed to the owner personally. Equipment may be financed. Intellectual property may have been created by a contractor without a written assignment. A domain name may be registered in the name of a former employee.

These issues may be resolvable, but should be identified before completion.

Review important contracts

Material agreements may include:

• Customer contracts.
• Supplier contracts.
• Property leases.
• Finance agreements.
• Distribution arrangements.
• Franchise agreements.
• Software licences.
• Insurance policies.
• Public-sector frameworks.
• Joint ventures.
• Shareholder agreements.

Check for:

• Assignment restrictions.
• Change-of-control clauses.
• Termination rights.
• Automatic renewals.
• Exclusivity.
• Minimum purchase commitments.
• Personal guarantees.
• Price-review provisions.
• Service-level obligations.
• Unusual penalties.

Do not assume that a long-standing relationship will continue automatically after ownership changes.

Investigate employment matters

Employees may be a major source of value, but can also create liabilities or transition risk.

Review:

• Employment contracts.
• Salary and bonus arrangements.
• Commission schemes.
• Holiday entitlement.
• Pension compliance.
• Contractors and employment status.
• Grievances or disciplinary matters.
• Tribunal claims.
• Long-term absence.
• Key-person dependency.
• Restrictive covenants.
• Informal benefits.
• Planned pay increases.
• Retention risk.

TUPE may apply to certain asset purchases, transferring employees and associated obligations to the buyer. Specialist employment advice should be taken where relevant.

Check tax and regulatory compliance

Tax due diligence may consider:

• Corporation tax.
• VAT.
• PAYE and National Insurance.
• Employment status.
• Research and development claims.
• Director or connected-party transactions.
• Capital allowances.
• Late filings.
• Payment arrangements.
• Existing HMRC enquiries.

Regulatory checks will depend on the sector and may cover:

• Operating licences.
• Professional registrations.
• Data protection.
• Health and safety.
• Environmental permits.
• Product certification.
• Food hygiene.
• Care-sector regulation.
• Transport licensing.
• Financial-services permissions.

Confirm whether each permission belongs to the company, a site or an individual. Some approvals may not transfer automatically.

Business acquisitions increasingly involve the transfer of customer data, employee records, cloud systems, administrator accounts and digital assets.

Cybersecurity should therefore form part of operational due diligence.

The ICO recommends using appropriate technical and organisational controls to protect personal information and maintaining processes to recognise, assess and record personal data breaches.

A buyer should investigate:

• Previous cyber incidents or data breaches.
• Cybersecurity policies.
• Back-up and recovery arrangements.
• Access permissions.
• Multi-factor authentication.
• Reliance on individual administrator accounts.
• Software licences.
• Third-party processors.
• Data-retention practices.
• Privacy notices.
• Business-continuity arrangements.
• Ownership of website and cloud accounts.

The ICO also recommends risk assessments and due diligence before external IT suppliers are given access to systems and assets. That principle is equally relevant when a buyer assesses the target company’s technology supply chain.

A legitimate acquisition can still be exposed to fraud during the transaction.

Deals involve confidential information, multiple advisers and large payments. Criminals may impersonate a party or compromise an email account to substitute false payment details.

Verify bank instructions independently

Before transferring money:

• Confirm the recipient’s legal identity.
• Check the account name.
• Verify the details using a trusted telephone number.
• Treat last-minute changes as a warning sign.
• Ask your solicitor how funds will be held and released.
• Avoid relying only on an email confirmation.
• Do not transfer funds to an individual unless your advisers have confirmed the reason.

A fraudulent message may appear in an existing email chain. Independent confirmation should therefore take place through a different communication channel.

Use professional completion arrangements

Your solicitor should explain:

• Where the funds will be held.
• What must happen before they are released.
• Which completion documents must be signed.
• How ownership will transfer.
• How deferred or retained amounts will be treated.
• Whether escrow or another mechanism is appropriate.
• Who will make post-completion filings.

Avoid informal payment arrangements intended to bypass the agreed completion process.

Control confidential information

A buyer may disclose proof of funds, identification, financing information and strategic plans.

Protect that information by:

• Using secure document-sharing systems.
• Limiting access.
• Checking recipients.
• Using strong passwords.
• Enabling multi-factor authentication.
• Redacting irrelevant information.
• Keeping a record of disclosures.
• Avoiding unsecured public Wi-Fi when handling deal documents.

Understand the purpose of the NDA

An NDA enables confidential information to be shared subject to restrictions.

It may cover:

• The identity of the business.
• Financial information.
• Customer and supplier data.
• Trade secrets.
• The existence of the sale process.
• Contact with employees or customers.
• The use and return of documents.

An NDA does not verify that the information supplied is accurate. It protects confidentiality; it is not a substitute for due diligence.

Due diligence is the buyer’s central protection

Due diligence is the structured investigation carried out before the acquisition becomes unconditional.

Its purpose is to:

• Test the assumptions behind the offer.
• Confirm ownership and transferability.
• Assess sustainable earnings.
• Identify liabilities.
• Understand operational dependencies.
• Support financing.
• Plan the transition.
• Decide what protections are needed in the sale agreement.

Valius was developed in response to a business-buying process described in its materials as fragmented and outdated, with buyers facing inconsistent seller data, manual due diligence and limited access to quality opportunities. The platform’s stated direction includes verified listings, richer information and tools supporting confidentiality and due diligence.

Platform-level verification can improve the quality of the starting point. It does not replace independent buyer due diligence.

Main due diligence workstreams

The review should be proportionate to the deal.

A smaller company may not require the same process as a major corporate transaction. However, smaller businesses can depend more heavily on informal arrangements, owner knowledge and undocumented procedures.

Prioritise the issues that could change the decision

Not every due diligence finding deserves the same attention.

Prioritise anything that could:

• Make the acquisition unsuitable.
• Reduce maintainable profit.
• Change the valuation.
• Prevent funding.
• Require third-party consent.
• Create a material liability.
• Disrupt trading.
• Change the preferred deal structure.
• Require an indemnity, retention or price adjustment.

Maintain an issues log recording:

This provides a clearer decision-making record than relying on disconnected emails.

Use the Heads of Terms to establish protection early

Heads of Terms, sometimes called a Letter of Intent, record the proposed commercial principles before the detailed legal documents are prepared.

They are often mainly non-binding, although provisions such as confidentiality, exclusivity and costs may be binding.

They may cover:

• Purchase price.
• Share or asset structure.
• Payment at completion.
• Deferred consideration.
• Earnout terms.
• Debt and cash.
• Working capital.
• Due diligence.
• Funding conditions.
• Exclusivity.
• Seller handover.
• Restrictive covenants.
• Timetable.
• Professional costs.

Your offer should usually be subject to appropriate due diligence, funding and legal documentation.

Greater clarity at this stage can reduce later disagreement, although the document should not create certainty where important information remains outstanding.

Use the sale agreement to allocate risk

Due diligence reveals risks. The sale agreement determines how some of those risks are allocated.

Warranties

Warranties are contractual statements made by the seller.

They may cover:

• Accounts.
• Assets.
• Contracts.
• Employees.
• Tax.
• Litigation.
• Intellectual property.
• Compliance.
• Information supplied to the buyer.

If a warranty is inaccurate and the buyer suffers a recoverable loss, the buyer may have a contractual claim, subject to the agreement’s terms and limitations.

Warranties do not replace due diligence. A later claim may be expensive, uncertain or subject to caps and time limits.

Indemnities

An indemnity may be used for an identified liability.

For example, if a specific historic tax matter remains unresolved, the seller may agree to compensate the buyer for defined losses arising from it.

The wording, cap, duration and claims process should be considered carefully.

Retentions and deferred consideration

Part of the purchase price may be retained or paid later.

This can be used to:

• Bridge a valuation gap.
• Link payment to future performance.
• Protect against specific risks.
• Support the buyer’s cash flow.
• Allow completion accounts to be finalised.

Deferred consideration creates additional legal and commercial issues, including security, interest, repayment dates, default and set-off rights.

Restrictive covenants

The buyer may ask the seller not to:

• Compete with the business.
• Solicit customers.
• Recruit employees.
• Interfere with supplier relationships.

The scope and duration should be reasonable and professionally drafted.

Match the response to the risk

A due diligence finding does not always mean the buyer should withdraw.

Possible responses include:

Deal structure can help allocate manageable risk. It should not be used to disguise a fundamentally unsuitable acquisition.

Know when to walk away

Time, professional fees and emotional commitment can make it difficult to stop a transaction.

Those sunk costs should not determine whether the acquisition proceeds.

Consider withdrawing where:

• The seller refuses routine verification.
• Important information is repeatedly withheld.
• Material explanations keep changing.
• The financial records cannot be reconciled.
• A major liability cannot be quantified.
• A critical contract or licence will not transfer.
• The business is substantially more dependent on the owner than disclosed.
• The seller pressures you to avoid professional advice.
• Payment instructions cannot be verified.
• The return no longer justifies the risk.

Buyer protection checklist

Before completing an acquisition, confirm that you have:

• Verified the legal identity of the business.
• Confirmed the seller’s ownership and authority.
• Verified any intermediary independently.
• Understood whether the transaction involves shares or assets.
• Reviewed the Information Memorandum critically.
• Met the owner and relevant managers.
• Tested the reason for sale.
• Reconciled financial information.
• Challenged EBITDA adjustments.
• Assessed revenue quality and customer concentration.
• Reviewed cash flow and working capital.
• Identified debt and debt-like items.
• Confirmed ownership of important assets.
• Reviewed key contracts and consents.
• Investigated tax, employment and regulatory matters.
• Assessed IT, data and cybersecurity risks.
• Made the offer subject to suitable conditions.
• Appointed appropriate legal, financial and tax advisers.
• Verified payment instructions independently.
• Addressed material risks in the sale agreement.
• Prepared a transition and handover plan.

No checklist can remove all acquisition risk. A structured process can significantly reduce preventable mistakes and help the buyer make a more informed decision.

How Valius supports a more transparent buying process

The UK business-sale market has traditionally required buyers to search across several sources, compare inconsistently presented opportunities and manage documents and conversations through disconnected systems.

Valius is designed to make that process simpler, more accessible and more transparent.

The platform brings together UK business opportunities and supports buyers through the process of learning, searching, engaging with sellers and managing acquisitions. Its stated approach includes verified listings, structured information and tools supporting confidentiality and due diligence.

Valius can help buyers begin from a more organised and informed position. Each buyer must still complete independent commercial, financial, tax and legal checks before acquiring a business.

Final thoughts

Protecting yourself when buying a business is not about expecting the worst from every seller.

It is about establishing what is true, what is supported by evidence and what remains uncertain.

A disciplined buyer will:

• Verify the opportunity and seller.
• Test material claims.
• Review the quality of earnings and cash flow.
• Investigate legal and operational liabilities.
• Protect confidential information and payments.
• Use due diligence to inform the price and deal structure.
• Walk away when the remaining risk is unacceptable.

Some findings will lead to a revised valuation. Others may require an indemnity, deferred consideration, a retention or a more detailed handover.

A small number will show that the deal should not proceed.

The strongest buyers are not those who avoid risk entirely. They are those who understand what they are accepting before they commit.

Browse verified UK business opportunities and manage your acquisition search through Valius.