Ecommerce due diligence is what separates buyers who build wealth from buyers who spend six figures learning an expensive lesson. Every major acquisition mistake — overpaid valuations, hidden account flags, misrepresented revenue — comes back to skipped or rushed due diligence.
This guide gives you a complete ecommerce due diligence framework for 2026: what to verify, in what order, and exactly when the numbers tell you to walk away.
Why Ecommerce Due Diligence Is Different From Buying a Traditional Business
Ecommerce businesses have risk vectors that don't exist in brick-and-mortar acquisitions:
Platform dependency — A Shopify store or Amazon FBA business can be shuttered overnight if the platform suspends the account. A restaurant lease can't be cancelled by the landlord at will; an Amazon account can be.
Digital inventory verification — There's no physical warehouse walk. You're verifying inventory counts from spreadsheets, 3PL dashboards, and Amazon FBA inventory reports — all of which can be manipulated.
Traffic and marketing channel risk — Organic search traffic built on thin content can evaporate after a Google algorithm update. Paid traffic that looks profitable at face value may require the seller's specific creative expertise to maintain.
Invisible liabilities — Pending IP claims, DMCA strikes, platform policy violations, and customer chargebacks don't show up on a P&L but can be catastrophic.
The depth of your ecommerce due diligence must match these specific risks. The standard 15-item checklist isn't enough.
Ecommerce Due Diligence Phase 1: Financial Verification
Financial due diligence establishes whether the stated SDE is real and repeatable.
Documents to Request
- Profit & Loss statements (3 years, monthly detail)
- Balance sheet (last 12 months)
- Bank statements (12 months, all accounts)
- Merchant processor statements (Stripe, PayPal, Shopify Payments — 12 months)
- Tax returns (2–3 years, federal business returns)
- Amazon Seller Central revenue reports (if applicable)
- Inventory records with valuation methodology
What to Verify
Revenue reconciliation — Cross-reference P&L revenue against bank deposits and payment processor reports. These three sources must reconcile to within 2–3%. Gaps require explanation; unexplained gaps are a red flag.
Add-back verification — Every claimed add-back to SDE needs documentation. Owner salary? Show payroll records. One-time legal fee? Show the invoice and evidence it's resolved. Sellers commonly inflate SDE by 20–40% through aggressive add-backs.
COGS and margin trend — Are gross margins stable or compressing? Compressing margins (even with growing revenue) signal supplier pricing pressure, increased competition, or product quality issues.
Seasonality normalization — Use trailing 12 months (TTM) as your baseline. Compare TTM to the prior TTM. A business with $200K TTM SDE that earned $280K the year before has a -28% decline — that's not a 3x multiple business.
Owner time investment — How many hours per week does the seller work in the business? If the answer is "40 hours" but they're claiming minimal owner involvement, the stated SDE needs adjustment for management replacement costs.
Our interactive Due Diligence Checklist walks through every financial verification step with specific thresholds for what constitutes a pass versus a flag.
Ecommerce Due Diligence Phase 2: Traffic and Marketing Verification
Revenue is downstream of traffic. Verify the traffic sources before believing the revenue will continue post-acquisition.
For Organic SEO Traffic
- Request Google Search Console read-only access (12 months, all queries)
- Review traffic trend: is it growing, flat, or declining?
- Check core algorithm update dates against traffic dips
- Identify the top 20 landing pages and verify the content quality
- Look for any manual penalties in GSC Search Console → Security and Manual Actions
A business with 60%+ organic traffic from thin content or transient rankings is higher risk than one with brand search volume and strong backlink profile.
For Paid Traffic
- Request Google Ads, Facebook/Meta Ads, and Amazon Ads account access
- Review ROAS (Return on Ad Spend) trend over 12 months
- Identify which campaigns are profitable vs. propped by creative genius of the seller
- Understand whether current ROAS is sustainable without the seller's involvement
Ask the seller: "If you handed this account to an agency on day one, what ROAS would they get?" Honest sellers know the answer.
For Email and Direct Traffic
- Request Klaviyo / Mailchimp audience size and 90-day campaign performance
- Review list health: open rate, click rate, unsubscribe rate
- Verify that the email list is transferable (it almost always is, but confirm)
Email lists are often the most valuable transferable asset in a DTC acquisition. A 50K engaged list can add 0.25x–0.5x to the SDE multiple.
Ecommerce Due Diligence Phase 3: Platform and Account Health
This is the most commonly skipped section. Don't skip it.
Amazon FBA Due Diligence
- Request Seller Central read-only access (not screenshots — actual access)
- Review Account Health dashboard: Order Defect Rate, Late Shipment Rate, Valid Tracking Rate
- Check for any active or past account suspensions (Seller Central → Performance → Account Health)
- Review all ASINs for active IP/counterfeit complaints
- Verify brand registry status and trademark
- Check for any pending A-to-Z claims or chargebacks
A single category suspension on the main ASINs is a walk-away trigger unless the seller can prove resolution.
Shopify / DTC Platform Health
- Request Shopify admin read-only access (or documented screenshots with date stamps)
- Review Shopify Payments or Stripe account standing — holds, reserves, or disputes
- Check for any active chargebacks above 0.5% dispute rate
- Review customer refund and return rate (healthy: under 5%; warning: above 8%)
- Verify domain ownership and confirm transfer is possible
- Check all third-party app subscriptions — which are critical path and must transfer?
Other Platform Checks
For businesses with significant social media following: request platform dashboard access. TikTok Shop accounts, Instagram Business accounts, and YouTube channels are not always automatically transferable and some have minimum ownership period rules before transfer is possible.
Ecommerce Due Diligence Phase 4: Operations and Inventory
Supplier and Inventory Verification
- Request current inventory count by SKU with cost basis
- For FBA: verify against Amazon FBA Inventory dashboard
- For 3PL: request a physical count from the 3PL, not just a report from the seller
- Review supplier contracts: minimum order quantities, pricing terms, exclusivity clauses
- Identify single-supplier dependencies (50%+ of COGS from one supplier = concentration risk)
- Ask: "What happens to pricing if you tell this supplier you're selling the business?"
Inventory is often included in the purchase price. Verify the valuation methodology (cost vs. market value) and that slow-moving inventory isn't being inflated. Write down obsolete inventory in your offer.
Operations and Systems
- Review all documented SOPs
- Meet the VA team or contracted workers: will they stay post-acquisition?
- Understand all software subscriptions: tools, apps, automation — document monthly cost
- Verify customer service response time and satisfaction data
- Identify any operational dependencies on the seller's personal accounts
Ecommerce Due Diligence Phase 5: Legal and IP Verification
- Trademark search for all brand names, product names, and slogans (USPTO for US, EUIPO for EU)
- Review any past or pending litigation
- Verify the entity structure: are you buying assets or equity? (Most ecommerce deals are asset purchases)
- Review all existing contracts: supplier agreements, 3PL contracts, software licenses
- Confirm no revenue-sharing agreements or affiliate deals that survive acquisition
- Verify that all content (product photos, descriptions) is owned or properly licensed
For Amazon sellers: "brand registry" trademark protection doesn't transfer automatically — you'll need to update the brand registry to your entity post-close.
When to Walk Away: Ecommerce Due Diligence Red Flags
These findings should trigger immediate re-evaluation or termination:
Walk away:
- Revenue that cannot be reconciled across P&L, bank, and processor statements
- Active account suspension (Amazon, Shopify, Google Ads) without documented resolution
- SDE add-backs that exceed 30% of stated SDE without clear documentation
- Any pending or threatened IP litigation
- Seller refuses to provide direct platform access (only screenshots)
Renegotiate price:
- Revenue trend declining 15%+ YoY (demand a lower multiple)
- Single-supplier dependency (add contingency provisions or escrow hold)
- Owner works 30+ hours/week (adjust SDE downward for management replacement costs)
- Inventory value is inflated by 20%+ based on actual cost analysis
Use the Deal Analyzer to model how each red flag adjusts the effective price you're paying relative to normalized SDE.
Structuring Your Offer After Due Diligence
Once due diligence is complete, revise your LOI to reflect what you found. Common post-DD adjustments:
- Purchase price reduction if revenue was overstated or margins were misrepresented
- Working capital peg adjustment if inventory was overvalued
- Seller financing note (10–20% held back) if there's platform risk that couldn't be fully resolved
- Earnout tied to 90-day post-close revenue if the seller's involvement is essential to near-term performance
Finalize your revised offer with our LOI Builder, which includes fields for all standard post-DD adjustments.
For financing: use our SBA Loan guide to ensure you know what lenders will scrutinize — many of the items in this due diligence checklist are the same things SBA underwriters will ask for.
Frequently Asked Questions
How long does ecommerce due diligence typically take?
Standard ecommerce due diligence takes 2–4 weeks for a sub-$500K acquisition and 4–8 weeks for deals above $1M. The variance is almost entirely driven by how quickly the seller provides documentation and access. Build this timeline into your LOI with explicit diligence period clauses (typically 30–45 days).
Should I hire a professional to do due diligence for me?
For deals above $500K, hiring a quality-of-earnings (QoE) accountant for the financial section is strongly recommended — expect to pay $3K–$8K for this. For operational and platform due diligence, buyers who've operated ecommerce businesses can often self-perform. Below $250K, most buyers self-perform and rely on checklists like this one combined with seller calls and direct platform access.
What is the most commonly missed item in ecommerce due diligence?
Platform account health, especially Amazon suspension history. Buyers focus heavily on financials and miss that the account driving those financials has two prior Category suspensions that were narrowly resolved. A clean P&L on a fragile account is a ticking clock.
Can I do due diligence before signing an LOI?
Sellers rarely grant full due diligence access before an LOI is signed — it's too much work for what might be a non-serious buyer. The standard sequence is: NDA → preliminary financials → LOI → full due diligence. You can request a "data room preview" before the LOI to verify revenue at a high level, but full platform access comes after you're under LOI.
What happens if I find issues during due diligence?
You have options: renegotiate the price (most common), request escrow holdbacks for specific risks, add earnout provisions, or walk away. The LOI due diligence period is specifically designed to give you this flexibility. A well-drafted LOI protects your earnest money deposit if due diligence uncovers material misrepresentation.
Start Your Acquisition With the Right Tools
Thorough ecommerce due diligence separates good deals from expensive mistakes. Use our Due Diligence Checklist to work through every section systematically, build your offer with our LOI Builder, and browse verified listings where the financial data has already been audited. In 2026, buyers who skip steps are the buyers paying premium prices for deteriorating assets.