Introduction

In lower middle-market acquisitions ($5M–$20M), deals may appear attractive on the surface – steady EBITDA, clean financials, and a cooperative seller.

But, in one recent $10 million acquisition review, we uncovered multiple risks that were not immediately visible – risks that could have materially impacted valuation and post-acquisition returns.

Here are five critical red flags every investor and buyer should watch for.

1. Inflated EBITDA Through Aggressive Adjustments

At first glance, the business reported:

• EBITDA: ~$2.1M

But after deeper analysis:

• Add-backs included non-recurring expenses that were actually recurring
• Owner expenses were understated historically but normalized upward artificially

Adjusted EBITDA (true view): closer to $1.5M–$1.6M

Why this matters:

Valuation multiples applied to inflated EBITDA can lead to overpaying by 20–30%.

2. Customer Concentration Risk Hidden in Plain Sight

Revenue appeared diversified — until we analyzed properly:

• Top 2 customers = 48% of total revenue
• No long-term contracts in place
• One customer was already renegotiating pricing

Risk:

• Immediate revenue drop post-acquisition
• Reduced bargaining power
• Lower valuation multiple in reality

3. Working Capital Misrepresentation

The deal assumed a “normalized” working capital level.

But:

• Inventory included slow-moving and obsolete stock
• Receivables aging showed delays beyond 90–120 days
• Payables were being stretched unusually

Impact:

• Buyer would need to inject additional cash post-closing
• Effective purchase price becomes higher than agreed

4. Undisclosed Operational Dependencies

The business was heavily dependent on:

• A single operations manager
• Informal vendor relationships (no contracts)
• Founder-led sales process

None of this was clearly disclosed upfront.

Risk:

• Key person dependency
• Operational disruption post-exit
• Transition challenges

 These are not visible in financials – but critical for continuity.

5. Compliance and Regulatory Gaps

Surface-level checks showed “compliance in place”

But deeper review revealed:

• Minor but repeated regulatory non-compliances
• Inconsistent documentation
• Exposure to future penalties or operational restrictions

Why it matters:

Even small compliance gaps can:

• Escalate during audits
• Delay integration
• Create reputational risks

Key Takeaways for Buyers

This deal wasn’t “bad” — but it was misunderstood at first glance.

What changed after proper diligence:

• Valuation expectations were renegotiated
• Risk protections were built into the deal
• Buyer avoided potential post-acquisition surprises

What This Means for You

If you’re acquiring a business in the $5M–$20M range:

• Don’t rely on surface-level financials
• Don’t accept EBITDA at face value
• Don’t ignore operational and behavioural risks

Most importantly:

The real risks are often not visible in standard reports

An effective investigative audit and due diligence reveals the true strength of target companies. 

By,

Team AnBac Advisors