Fraud Risks in SMB Acquisitions: Solutions by Industry

A small error in an SMB deal can turn into a big overpayment fast. If a seller misses $50,000 in expenses and the deal is priced at 5x EBITDA, you could overpay by $250,000.

If I were buying a business in the $500,000 to $10,000,000 range, I'd focus on three things first:

• Earnings: Are EBITDA and add-backs supported by bank records, tax returns, payroll filings, and invoices?
• Revenue: Do sales tie to deposits, processor statements, and tax filings - and will top customers stay after closing?
• Liabilities: Are there hidden tax debts, worker classification issues, lease problems, liens, lawsuits, or license transfer issues?

The article breaks fraud risk into four main groups:

• Financial statement manipulation
• Revenue and customer concentration fraud
• Contract and liability misstatements
• Tax and labor compliance gaps

It also shows where each risk hits hardest by industry:

• Services: owner-dependent accounts and client concentration
• Healthcare: billing, coding, and credentialing issues
• Construction: WIP inflation and mechanic's liens
• Manufacturing: phantom or obsolete inventory and site contamination risk
• E-commerce and retail: return-rate masking, ad-spend distortion, and sales tax nexus issues

The main takeaway is simple: don't price the deal from the seller's spreadsheet. I'd rebuild the numbers from source records, test the few items that move value, and treat any unsupported claim as unverified.

If I had to sum up the whole piece in one line, it would be this: verify the source documents before you agree on price, terms, or closing.

7 Financial Red Flags to Avoid When Buying an SMB

The Most Common Fraud Risks in SMB Acquisitions

With the framework in place, the next step is simple: find the fraud patterns that can change valuation and closing risk.

The Four Risk Categories That Matter Most

Each category needs to connect back to source records. And in many deals, these risks show up before diligence is finished.

Where Fraud Typically Appears in the Deal Process

Fraud often shows up early in the teaser, CIM, and LOI. Common warning signs include inflated growth claims, blocked QoE access, and pushback on accrual-based books.

Seller add-backs need extra scrutiny. Treat the seller's cash flow figure as provisional until each add-back is verified. In plain English, every add-back is unproven until it ties back to documents. If an item appears across two or more consecutive years, reclassify it as a recurring operating expense. And if a claim can't be matched to a contract, invoice, bank record, or filing, treat it as unverified.

Revenue and customer diligence is often where fake invoices, phantom customers, and owner-dependent relationships come into view. High customer concentration matters too. If a top customer makes up more than 30% of revenue, there's a bigger chance that relationship won't transfer after closing.

Contract and liability review can bring hidden litigation, bad lease terms, and unpaid taxes to the surface. Compliance diligence should also cover sales tax filings and worker classification, because those issues can survive closing and create successor liability.

A QoE review should rebuild earnings from bank statements, tax returns, invoices, and contracts. The first and most expensive check is earnings quality. That's usually where valuation fraud starts.

Financial Statement Manipulation

Once revenue claims start to crack, the next question is simple: are the earnings real?

Financial statement manipulation can push buyers to pay too much. That's why you need to verify earnings from source records, not from seller-prepared summaries.

Inflated EBITDA, Unsupported Add-Backs, and Hidden Expenses

One of the most common problems is recurring costs dressed up as one-time add-backs. If an add-back shows up in more than one period, treat it with caution. Repeated costs belong in EBITDA.

Payroll needs the same level of scrutiny. Compare payroll records to Form 941 and state unemployment filings. That helps you spot ghost employees and contractors who may have been classified the wrong way.

Working Capital Manipulation and Cash Reconciliation

Working capital problems usually show up in receivables, inventory, and payables. In many deals, those balances get distorted by stale items and last-minute timing moves.

If more than 40% of accounts receivable is over 90 days old, that points to collection trouble or revenue recognition fraud. Aged receivables should be valued at collectible amounts, not face value. Inventory also needs to be tested, not taken at face value. Count it, tie SKU-level data back to the GL, and use unannounced site visits when needed. Inventory disputes can change purchase price and lead to post-close fights.

These checks help separate harmless timing noise from actual balance-sheet manipulation.

How to Verify Earnings Before Closing

The best way to verify earnings is to rebuild them from source records: bank statements, tax returns, payroll reports, invoices, and GL detail. Then test every add-back against those records.

Match each large invoice to a bank deposit. If the revenue doesn't tie out, it isn't verified. Use a cash-to-accrual conversion across 24 to 36 months to get to true EBITDA, since cash-basis books can make profits look better by pulling revenue forward or pushing expenses out. Also compare the P&L to the tax return. In many cases, the tax return is the more honest number because it was filed with the government.

At closing, reconcile EBITDA, working capital, and payroll back to source records. If a line item can't be supported, treat it as unverified.

Clearly Acquired offers a Quality of Earnings service for Main Street and lower-middle-market acquisitions. The engagement rebuilds EBITDA from source documents, normalizes earnings, validates add-backs, and delivers a lender-ready report.

If earnings hold up, move next to revenue quality and customer concentration.

Revenue and Customer Concentration Fraud

After you rebuild earnings, the next step is simple: check whether the revenue is real. Once EBITDA is rebuilt, revenue testing becomes the next gate.

Fake Invoices, Pulling Revenue Forward, and Masked Customer Loss

A few patterns show up again and again. Revenue may be booked before delivery or before the work is done. Some companies issue duplicate invoices. Others hide the loss of a customer to make the business look steadier than it is.

Two red flags stand out fast:

• Invoice dates that don't line up with delivery records
• Slow cash collection after billing

The Brooge Energy SPAC merger case is a clear example. The company later admitted to overstating revenues by 30% to 80% between 2018 and early 2021. Fraud like that often sits in the gap between what was booked and what actually came in.

If the revenue is there on paper, the next question is tougher: does it stick after closing?

Customer Concentration and Relationship Risk

The main issue here is whether the top customer relationship will transfer to the buyer. If it won't, the revenue may disappear the minute the deal closes.

You should price concentration risk into the deal. When one customer makes up 25%-35% of revenue, a 10%-25% price discount is a reasonable structural response. Once concentration goes above 50%, the deal is often beyond repair unless the relationship can be checked on its own and shown to be transferable.

One of the biggest warning signs is owner-dependent revenue. That's when top accounts have no second-tier contact, no CRM history, and no relationship with anyone besides the owner. In plain English, that means the revenue may walk out the door when the owner does.

Revenue Validation Steps That Work

The goal isn't just to confirm revenue exists. The goal is to prove it collected and can happen again.

Start with a three-way reconciliation. Match:

• Merchant-processor statements
• Sales-tax returns filed with the state
• Bank deposit history

Then pull raw general ledger data straight from the source system so no one can slip in after-the-fact adjustments. After that, match every large invoice to a bank deposit. If there's no deposit, treat the revenue as unverified until it ties back to AR aging, contract terms, and cash receipts.

For the top 15 accounts, send contract-confirmation requests on official letterhead. Where it makes sense, run controlled calls to confirm the relationship is real and can transfer after the sale.

If revenue makes it through those checks, move to contracts, liabilities, and compliance.

Contract, Liability, and Compliance Misrepresentation

Once earnings and revenue look right, the next step is the stuff that can stick to the buyer after closing.

A lot of painful post-close losses sit in contracts, tax records, payroll filings, and compliance paperwork. They may not hit EBITDA in a direct way, but they can change deal value and create liabilities that show up later.

Hidden Leases, Vendor Terms, Litigation, and Tax Exposure

Start with assignability. Leases, vendor contracts, and customer agreements may require consent if there's a change of control. That's why it helps to review every material contract early, before the deal gets too far down the road.

Litigation is another area where sellers sometimes gloss over the details. Compare the disclosure schedule to the actual case file. If the disclosure is vague, incomplete, or missing key facts, treat that as a warning sign.

For multi-state businesses, tax exposure can get expensive fast. If the company wasn't properly registered in the states where it operated, back taxes, penalties, and interest can add up to $300,000 to $1.5 million. And yes, that risk can follow the buyer through successor liability, even in an asset purchase. Get tax-clearance letters in every operating state, and use Voluntary Disclosure Agreements where needed before close.

Property issues can be just as nasty. If a site has a history of industrial use, like auto repair, dry cleaning, or light manufacturing, run environmental diligence. Under CERCLA, a buyer of contaminated property can be on the hook for cleanup costs no matter when the contamination happened. A Phase I Environmental Site Assessment usually costs $2,000 to $5,000 and takes two to three weeks. If that review flags contamination, a Phase II assessment often runs $5,000 to $25,000. Problems here can block a transfer, delay closing, or turn into post-close liability.

Licensing, Payroll, and Employee Classification Problems

Licenses and permits need a line-by-line check. Confirm whether each one can transfer, when it expires, and whether the buyer must personally hold a license to run the business. Don't rely on a seller summary. Get the actual permits and licenses, then verify them with the issuing agency.

Payroll can be just as misleading. Misclassifying 1099 workers as W-2 employees can make margins look better than they are. The exposure often lands at 25% to 40% of the misclassified workers' compensation. A simple way to test this risk is to pull Form 941 and state unemployment filings for the past two years, then build a recast that treats all 1099 contractors as W-2 employees.

Legal and Operational Verification Before Close

Before closing, run UCC-1 and county lien searches to spot hidden liens or equipment that's already encumbered. Review the original lease and every amendment, not just the latest version. Get state tax-clearance letters where needed, verify licenses directly with the agency, and talk to employees to confirm payroll classification and overtime practices.

Each of these items can hurt transferability, increase liability, or push the deal back into renegotiation. The safest move is to rely on source documents and third-party checks:

After the legal and compliance stack checks out, tailor diligence to the target's industry risks.

Industry-Specific Controls and Verification Steps

Once legal and compliance review is done, shift your attention to the fraud risks that tend to show up in that specific industry. The point here is simple: each check below ties back to earnings, revenue, contracts, or compliance. And those are the areas that usually move price, deal terms, or both.

Services and Healthcare

In service businesses, the two biggest weak spots are customer concentration and owner-dependent revenue. If one client makes up 35% to 50% of revenue, the business is fragile. That's not a small issue. It means a single lost account can hit cash flow hard.

Start with customer lists pulled straight from the accounting system, not from a spreadsheet the seller made for the deal. Then match large invoices to bank deposits. That helps confirm the revenue exists and wasn't dressed up for sale.

Another common problem in services is employee misclassification. If 1099 contractors should have been treated as W-2 employees, the deal math can change fast. The exposure often lands at 25% to 40% of contractor compensation. Review payroll tax filings and build a pro forma W-2 wage model before closing so you can see the hit in plain numbers.

Healthcare brings another layer of risk beyond normal revenue testing. Billing, coding, and payer recoupment history all need close review. Verify provider credentials directly with the right licensing boards. Review payer mix and claims data for billing patterns that don't fit the business. If diligence turns up irregularities, use a compliance-specific escrow holdback.

Construction and Manufacturing

Construction companies are especially exposed to WIP manipulation. If the work-in-progress schedule is off, EBITDA and working capital can both be off with it. Reconcile the WIP schedule to job files, backlog aging, and project-level cash conversion to confirm that reported progress matches reality.

You should also run mechanic's-lien searches in every county where the business operates. That's one of those checks that feels boring until it saves you from a mess.

Manufacturing deals often run into phantom inventory or obsolete inventory. Both can distort working capital and push the purchase price higher than it should be. Unannounced site visits help here. Count random pallets and compare physical counts to the general ledger. A 5% to 10% gap from book inventory calls for a deeper review.

Don't stop at the count itself. Pair those checks with SKU margins, maintenance logs, and a review of related-party equipment transfers done at below-market prices. If the plant has site contamination risk, a Phase I Environmental Site Assessment is a smart pre-close step.

E-Commerce and Retail

E-commerce and retail deals come with risks that may not show up cleanly in the financial statements. One of the most common is return-rate masking. To test that, reconcile processor statements, sales tax returns, and bank deposits against the seller dashboard. Any mismatch is material.

Ad-spend distortion is another issue. Review ad spend by channel and compare it with revenue growth. That helps you see whether sales growth is being bought with paid traffic instead of coming from a stable business engine.

For multistate sellers, confirm sales tax compliance in every state where they operate and get state tax-clearance letters when available. Successor liability for unpaid sales taxes can survive an asset purchase.

The table below shows the most common fraud exposures by industry, along with the verification methods and pre-close controls that line up with them.

Use the matrix for pre-LOI screening, apply the verification methods under LOI, and move to closing only after the highest-risk items are resolved. The goal is to isolate the risks that can change price before the deal is done.

Conclusion: Verify the Risk Before You Price the Deal

The main SMB acquisition fraud risks come down to three things: earnings manipulation, shaky revenue, and legal or compliance issues that don't show up until later. The controls covered above make it clear which checks matter most in each sector. And each one can affect price, financing, or whether the deal gets approved at all. That's the logic behind every industry-specific control in this article.

The rule is simple: before you price the deal, verify the numbers at the source. That means raw GL detail, bank deposits, processor statements, and sales-tax filings. Start there before you lock in valuation, financing, or close terms.

Skipping this step gets expensive fast. Failed deals can still cost buyers $25,000 to $100,000 in legal, quality-of-earnings, and environmental fees. Thorough verification isn't a luxury - it's the cheapest insurance a buyer can buy.

When the numbers are verified, diligence tends to move faster, surprises drop, and the path to close gets a lot cleaner.

At Clearly Acquired, our Quality of Earnings service rebuilds EBITDA from source records so buyers close on verified numbers, not seller-prepared ones.

FAQs

What documents should I verify first?

Start with key financial documents: 3 to 5 years of profit-and-loss statements, balance sheets, and cash flow statements. Review them side by side with bank statements and tax returns to make sure the numbers line up.

Then check the raw general ledger data, legal and tax compliance, employee records, and revenue from key customers. Clearly Acquired offers AI-native tools that help you review deals, organize data, and move to close with confidence.

How can I tell if EBITDA is overstated?

Look for gaps between reported profits and operating cash flow. When income goes up but cash flow heads the other way, that can point to inflated revenue or costs that aren't showing up where they should.

Go through add-backs line by line. If owner add-backs are above 30% of stated EBITDA, treat that as a material risk.

You'll also want to review the balance sheet and general ledger for operating expenses that may have been moved into capital expenditures. Then compare internal P&Ls against industry benchmarks, tax returns, bank statements, and merchant-processor reports.

Which fraud risks matter most by industry?

Fraud risks change from one industry to the next, but a few problems show up again and again: revenue inflation, employee misclassification, inventory manipulation, hidden tax compliance failures, and related-party contracts.

Service and trade businesses often run into misclassification issues. Manufacturing and distribution companies tend to face more inventory-related risk. And across almost every sector, fake sales, customer collusion, customer concentration, and buried vendor agreements can make a business look healthier than it is - or quietly drain value before a sale.