Red Flags in Financial Due Diligence:

In every company sale there comes a moment when the numbers stop telling their own story and someone has to get their hands into the accounts. That moment is financial due diligence, and its mission is not to confirm that everything is fine: it is to find whatever might make a buyer overpay, inherit a problem or, quite simply, walk away from the table. We call those warning signs red flags.

A red flag does not always kill a deal. Most of the time it reprices it: it adjusts the price downward, forces the contract's warranties to be redesigned, or turns part of the payment into a conditional earn-out. But to negotiate with that knowledge you have to detect the flag first. And there is a principle worth fixing before we go any further: a red flag is not proof of fraud or of a demonstrated accounting error. It is an indicator that raises the need for further evidence. Its value lies not in accusing, but in knowing where to look.

This article runs through the fifteen signs that most often appear in the middle market and the Spanish family business, explains why they matter, and adds what almost no introductory piece offers: how to prioritise them with a score, which situations should skip that score and escalate immediately, how to log them with discipline, and what the great real-world frauds teach us. It serves both the buyer about to invest and the seller who wants to get ahead of problems before sitting down to negotiate.

In due diligence, finding the problem early is good news: what ruins a deal is not the red flag, it is the red flag that appears after signing. — Maraz Corporate Finance

What a red flag is (and is not)

Let us clear up a misunderstanding from the outset. A red flag is not just any accounting error or a mis-posted invoice. It is a finding that affects one of these three dimensions of the deal:

  • The price (because real earnings are lower than presented).
  • The risk (because the buyer may inherit a future contingency),
  • Or the very viability of the business (because it reveals a structural weakness that threatens cash generation).

And there is a nuance that separates the seasoned analyst from the beginner: dangerous red flags rarely live alone. A single sign almost always has an innocent explanation. It is their combination that sets off the alarm. Sales growth of 30% may be perfectly healthy; sales +30% combined with receivables +70%, a rising collection period and negative operating cash flow tells a different story. That triangulation between the income statement, the balance sheet and cash tells you more than any single ratio.

That is why rigorous due diligence does not stop at checking that the figures add up. It looks for the distance between the picture the seller presents and the economic reality of the business. Red flags live precisely in that gap. We group them into four families: quality of earnings, quality of the balance sheet, hidden contingencies and behavioural signals.

Family 1 · Earnings quality is not what it seems

This is the most important category, because the price of almost any company is set as a multiple of EBITDA. If EBITDA is inflated, so is the price. This is where a Quality of Earnings analysis does its work.

1) EBITDA with aggressive or unjustified adjustments

The seller presents a "normalised" EBITDA full of add-backs: expenses that, according to them, will not recur and are therefore added back to earnings. Some are legitimate (a one-off lawsuit, an extraordinary severance payment). Others are cosmetics: directors' salaries that will in fact still be needed, marketing spend cut just before the sale, or "non-recurring" items that have appeared for three years running. Every euro of unjustified add-back is multiplied by the multiple, so a EUR 200,000 adjustment can inflate the price by more than a million.

Red flag:  Add-backs exceeding 15–20% of EBITDA, "extraordinary" items recurring year after year, or normalisations with no documentary support.

2) Low-quality revenue or customer concentration

Not every euro of turnover is worth the same. Recurring, contracted revenue is worth far more than one-off revenue or revenue dependent on a single customer. If 40% of sales depend on one customer with no long-term contract, that revenue is fragile: the day that customer leaves, the business wobbles. The same applies to sales concentrated in the last months of the year (a possible artificial pull-forward of billing to fatten the year of the sale).

Red flag:  Concentration above 20–25% in one customer, contracts expiring right after closing, or an unexplained sales spike in the last quarter before the deal.

3) Early or forced revenue recognition

Recording as a sale what is not yet one —an undelivered order, a service not rendered, a project invoiced in advance— inflates the period's earnings at the expense of the future. It is one of the most common manipulations and one that reprices a deal the most when it comes to light, because the buyer discovers they are buying earnings that have already been "spent". The rules of revenue recognition (control, not invoice or collection) mark the boundary. The most reliable technical signal: contract assets (work in progress, unbilled revenue) growing much faster than sales, or quarter-end billing spikes that reverse into credit notes weeks later.

4) Margins that deviate from the sector without explanation

A margin well above competitors' may be a genuine competitive advantage… or a sign that something does not add up: costs not being allocated, expenses capitalised that should hit the P&L, or provisions that have not been booked. Due diligence compares margins with the sector's and demands an explanation for every material deviation.

Family 2 · The balance sheet hides surprises

If EBITDA determines enterprise value, the balance sheet determines how much of that value actually reaches the seller's pocket, because that is where the net financial debt and working-capital adjustments come from that build the bridge to the share price. In middle-market deals, the balance sheet often moves the price more than the income statement itself.

5) "Hidden" debt and debt-like items

Bank debt is visible at a glance. The problem is the items that behave like debt but are not labelled as such: deferrals with the tax authority or social security, shareholder loans, dividends approved but unpaid, litigation provisions, accrued bonuses, or deferred-payment commitments. Each of these reduces the share price euro for euro, so detecting them is hard cash for the buyer. Two increasingly common figures deserve special attention: reverse factoring (supplier finance) that disguises financial debt as trade debt, and factoring with recourse, which artificially improves the closing cash without transferring the risk. Both distort net debt and, in leveraged companies, can strain the covenants set out in a financial due diligence.

Red flag: Differences between declared debt and real economic debt; balances with public authorities outside ordinary terms; shareholder and director accounts; reverse factoring or recourse factoring not reclassified.

6) Manipulated or insufficient working capital

Working capital (inventory, receivables and payables) is the oil that keeps the engine running. A seller can dress it up right before the sale: delaying payments to suppliers, accelerating customer collections with discounts, or reducing stock. The result is an artificially low working-capital picture that the buyer will have to "top up" with cash after closing. That is why a target normative level of working capital is negotiated —usually the average of the last 12 months— and the price is adjusted for the deviation.

7) Overstated or non-existent assets

Obsolete inventory valued at as-new prices, uncollectible receivables still on the balance sheet without provision, fixed assets that no longer work, or property, plant and equipment that does not physically exist. All of this inflates net worth and, if not corrected, the buyer pays for value that is not there. In the family business it is also common to find non-operating assets —real estate, vehicles, artwork— mixed in with the operating ones.

8) Cash quality: is it real cash or trapped cash?

Not all the cash on the balance sheet is free. There may be cash pledged as collateral, minimum operating balances the business needs to function, or seasonal cash that will be there on closing day but gone weeks later. Confusing trapped cash with surplus cash is a mistake that overvalues equity. Practical rule: no cash is treated as free until a bank confirms it independently.

Family 3 · The contingencies that appear later

These are the most feared red flags, because they do not affect today's earnings but an uncertain future payment. They are managed with reps & warranties, specific indemnities and, in serious cases, price retentions or escrows.

9) Tax contingencies and non-time-barred years

In Spain, the tax authority can review the last four years (and more where obligations were undeclared). Poorly documented related-party transactions, aggressive deductions, mis-settled VAT or dubious carried-forward tax losses are time bombs that go off after closing. In addition, the acquirer can be jointly and severally liable for certain of the transferor's tax debts, so the seller's tax problem becomes the buyer's problem.

Red flag: Related-party transactions with no transfer-pricing documentation; deferrals or open inspection proceedings; deductions or tax reliefs on shaky grounds.

10) Employment and social-security contingencies

Bogus self-employed contractors, unpaid overtime, chained temporary contracts, de facto consolidated salary supplements, or a workforce with seniority that inflates the cost of a future dismissal. In a share purchase, the company —and therefore the buyer— inherits the entire employment liability, including the transfer-of-undertaking rules under Article 44 of the Spanish Workers' Statute.

11) Litigation, guarantees and off-balance-sheet commitments

Ongoing lawsuits, guarantees given to third parties, cross-guarantees within the family group, contracts with change-of-control clauses that trigger on the sale itself… Everything that does not appear on the balance sheet but can become a payment obligation. Due diligence tracks these commitments down precisely because the seller rarely mentions them spontaneously.

12) Change-of-control clauses

Key contracts —with customers, suppliers, banks or landlords— that let the counterparty terminate or renegotiate if ownership of the company changes. Discovering after closing that the main supply contract can be cancelled because of the deal itself is one of the most expensive surprises there is.

Family 4 · Behavioural signals

These do not come from any single account, but from how the other party behaves during the process. A good adviser reads them as well as they read a balance sheet.

13) Information that arrives late, incomplete or shifting

When responses are systematically delayed, documents arrive in dribs and drabs, or the figures change from one version to the next without explanation, the problem is rarely mere disorganisation. Opacity during due diligence usually foreshadows that there is something the seller would rather not show. A well-prepared data room, by contrast, is a sign of soundness.

14) "Management" accounts that do not reconcile with statutory accounts

In many family SMEs two realities coexist: the statutory accounts and the "real" ones the owner keeps. When the two do not reconcile —sales the owner claims to have but that are not recorded, or personal expenses run through the company— the buyer faces a double problem: they cannot trust the figures and, if the seller admits to undeclared income, a tax contingency surfaces.

15) Excessive dependence on the owner (key-man risk)

If the business works because the owner knows every customer, negotiates every purchase and makes every decision, what is left when the owner leaves after the sale? Dependence on the founder is one of the most characteristic red flags of the family business and one of the most heavily penalised in the multiple, because it compromises the continuity of the business under new ownership.

The 15 red flags at a glance

# Red flag Main impact
1 Aggressive EBITDA add-backs Price (overvaluation)
2 Customer concentration Risk and price
3 Forced revenue recognition Price
4 Anomalous margins vs sector Price and reliability
5 Hidden debt / debt-like items Share price
6 Manipulated working capital Share price
7 Overstated or fictitious assets Price
8 Trapped vs surplus cash Share price
9 Tax contingencies Risk (future payment)
10 Employment contingencies Risk (future payment)
11 Litigation and off-balance-sheet guarantees Risk
12 Change-of-control clauses Business viability
13 Opacity in the process Behavioural signal
14 Double bookkeeping Reliability and tax risk
15 Owner dependence Viability and multiple

 

How to prioritise: not all red flags carry the same weight

Detecting fifteen signs is useless if you do not know which ones matter. Any moderately complex company will have red flags; the useful question is not "are there red flags?", but "which are material, which can be quantified, which can be mitigated and what remains unverified?". To structure that conversation, it helps to score each sign across five dimensions, each from 0 to 5:

Variable Weight Question
Economic impact 30% How much does it affect EBITDA, cash, net debt, working capital or equity value?
Probability 25% What reasonable probability is there that the exposure materialises?
Systemic nature 15% Is it an isolated exception or does it reveal a broader process failure?
Transmission to the deal 20% Does it directly affect price, financing, the SPA or the investment thesis?
Urgency 10% Could it block closing, trigger a default or require immediate action?

 

Weighted and taken to a 0-to-100 scale, signs above 80 require an immediate committee and contractual protection or a rethink of the deal; between 65 and 79, resolve before closing or cover in the contract; between 45 and 64, dig deeper and reflect in valuation sensitivity; below 45, document and monitor without consuming disproportionate resources.

The cluster effect. When three or more signs form a single economic chain —rising sales, customers growing faster, the collection period stretching and operating cash turning negative— the combined risk far exceeds the sum of the parts. A prudent practice is to apply a 10-point premium to the score in those cases. The conclusion is then not "there is fraud", but something more precise and more useful: reported revenue may not represent real cash generation, and EBITDA should not be used as a valuation base until it is independently validated.

When to skip the score: mandatory escalation triggers

A weighted average is sometimes too lenient. There are circumstances that, regardless of the score the model produces, must trigger immediate escalation to the deal committee. They are not debatable: they are red lines.

Trigger Mandatory response
Material cash that cannot be confirmed externally Do not count it as cash; escalate immediately
Bank, accounting or contractual document apparently falsified Forensic DD and deal committee
Undisclosed material financing default Review enforceability and closing financing
Beneficial ownership (UBO), sanctions or critical AML unresolved Do not close until legal / compliance is resolved
Material gap between accounts and presented statements, unbridged Suspend the Quality of Earnings (QoE) analysis
Management blocks confirmations or access to evidence Raise the reliability risk of all the information
Material contingency that cannot be quantified Extreme scenario + contractual protection
Side agreement altering material revenue Reopen revenue recognition and QoE
Related-party transaction with no clear business purpose Forensic + tax and legal review
Credible indication of fraud not investigated Forensic investigation before any decision

 

The common thread across all these triggers is the reliability of the information. When the very integrity of the data is in question, no price adjustment offsets the risk: first you restore confidence in the figures, and only then do you negotiate over them.

What the great frauds teach: six cases and one common lesson

The financial frauds that reached the courts rarely presented themselves, at first, with the label "fraud". They appeared as a debt discrepancy, as sales that did not convert into cash, as documentation that could not be verified, or as systematically optimistic forecasts. Exactly the kind of sign that rigorous due diligence pursues. Here are six cases —two Spanish, four international— and what each one leaves as a practical lesson.

Case What happened Lesson for due diligence
Pescanova (ESP) In March 2013 the company reported to the regulator discrepancies between its accounts and its real bank debt; years later, a final conviction for falsifying financial information. Debt is confirmed independently. Reconciling bank–accounts–contracts is a first-level procedure, not a detail.
Luckin Coffee (CHN) Fictitious sales of more than USD 300m through related parties, with alteration of accounting and bank records and of the operating database itself. Dashboards are not evidence if their source can be manipulated. You have to trace order → delivery → invoice → collection end to end.
Wirecard (GER) Press and whistleblower allegations about non-existent cash that supervision did not pursue with enough scepticism or scope. A credible allegation is not "external noise": it must change the scope, independence and depth of the diligence.
Carillion (UK) Unqualified audits for 2014–2016 before an abrupt liquidation in 2018, with unsustainable cost-to-complete estimates and project margins. In project businesses, EBITDA depends on estimates. You have to go down to contract and project level, not stay at the consolidated accounts.
WorldCom (USA) Operating costs improperly capitalised and misuse of provisions to sustain margins; altered documentation and restricted access. A sharp jump in capitalisation coinciding with margin pressure demands proof of economic substance.
Symbol Technologies (USA) Manipulation of receivables, cut-off, collections and revenue recognition on goods not yet shipped. Revenue, receivables, delivery and cash are four faces of the same test. Analysing them in silos hides the inconsistencies.

 

The cross-cutting lesson is twofold. First: external evidence —bank, customer, tax- and legal-adviser confirmations— outweighs management's explanation. Second: the cases do not license seeing fraud in every cash deterioration or every missed forecast. A single red flag does not prove manipulation; the analyst's job is to prove or rule out alternative explanations with evidence, not to turn an indication into an accusation.

Practical red-flag checklist

Use it as a first filter. Ticking several boxes does not mean the deal is unviable: it means those points need deeper work and should be brought to the negotiating table with data. A buyer uses it to know where to press; a seller, to plug the gaps before the other side finds them.

Quality of earnings

☐  Are the EBITDA add-backs documented one by one and genuinely non-recurring?

☐  How much weight does the largest customer carry over sales? Is there a contract and until when?

☐  Is any revenue recognised before delivering the product or rendering the service?

☐  Are margins in line with the sector? Is every deviation explained?

Quality of the balance sheet

☐  Are there debts with the tax authority, social security or shareholders outside ordinary terms?

☐  Is there reverse factoring or recourse factoring that should be treated as debt?

☐  Has working capital behaved abnormally in the last few months?

☐  Are uncollectible receivables and obsolete inventory provisioned?

☐  How much of the cash is genuinely free and how much does the business need to operate?

Contingencies

☐  Are there related-party transactions documented with a transfer-pricing report?

☐  Are there open tax inspections or risk years not yet time-barred?

☐  Are there bogus self-employed contractors, unpaid overtime or latent employment liabilities?

☐  What litigation, guarantees or cross-guarantees exist inside and outside the group?

☐  Does any key contract have a change-of-control clause?

Behaviour

☐  Does information arrive complete and on time, or in dribs and drabs and with shifting versions?

☐  Do the statutory accounts reconcile with the owner's management information?

☐  Does the business survive without the owner? Is there a second management tier?

From intuition to method: the Red Flag Register

The difference between a loose comment in a meeting and a negotiable finding is the discipline of logging. A good due diligence team keeps a single red-flag register throughout the process, with one golden rule: first the fact is recorded, then the hypothesis, and only at the end the conclusion. Confusing those three moments is the most common source of unfounded accusations.

Example. Fact: receivables +65% against sales +18%; collection period from 54 to 79 days. You do not write "the company is inflating sales". You set out hypotheses —collection deterioration, a legitimate change of mix, or aggressive recognition— and design the tests that discriminate between them: ageing of balances, contracts, subsequent collections, confirmations and cut-off analysis. The conclusion comes with evidence, not before.

Each logged red flag should capture, as a minimum, these fields:

Field Content
ID / Area RF-001…; Revenue, cash, tax, debt, etc.
Description Observed fact, avoiding premature conclusions
Potential amount € / range / "to be determined"
Periods affected FY24, FY25, last twelve months, forecast…
Score I-P-S-T-U 0–5 in each dimension → 0–100
Evidence High / Medium / Low
Source Accounts, contract, bank, customer confirmation…
Quantified effect On QoE / working capital / net debt / tax / forecast
Action Close / adjust / protect / forensic / no-go
Owner and status FDD / tax / legal / commercial · open / mitigated / closed

 

The investment-committee dashboard

The committee does not need the fifteen fiches: it needs to see, at a glance, how the key figures change once the findings are incorporated. An executive view compares the picture reported by the seller with the picture adjusted by due diligence, so that each material red flag translates into a visible difference on an economic metric.

Metric Reported DD-adjusted Comment
Normalised EBITDA (QoE) Recurring add-backs reversed
EBITDA → cash conversion Real working capital and maintenance capex
Maintenance capex Deferred investment the buyer will have to make
Net financial debt Debt-like items, supplier finance, recourse factoring
Normative working capital (% sales) 12-month average, adjusted for window dressing
Contingencies (tax/employment/litigation) Quantification and coverage instrument

 

The virtue of this bridge is that it stops the report dying in qualitative observations. It forces each sign to be closed with a concrete economic consequence: a price adjustment, a net-debt definition, a working-capital level or a protection clause. A red flag that appears in the report but is not connected to any of those decisions is, from the deal's point of view, incomplete.

Buyer and seller: two uses of the same list

For the buyer, red flags are negotiating ammunition. Each one detected in time translates into a price adjustment, a specific warranty in the contract (a rep & warranty), a specific indemnity that operates from the first euro, or a retention of part of the payment until the risk clears. Encountering them is, literally, the return on the investment in due diligence. A technical detail that avoids disputes: beware double-dipping —if a contingency has already been deducted from net debt when setting the price, it cannot be claimed again through an indemnity.

For the seller, the best defence is not to let the other side find them. A prior review —a vendor due diligence or simply an orderly preparation— allows you to fix what is fixable, document what is justifiable and anticipate the explanation for what cannot be changed.

Arriving at the negotiation with your homework done avoids last-minute discounts and conveys an image of soundness that sustains the price. Four mistakes are worth avoiding above all: presenting EBITDA adjustments with no support, changing the perimeter or the KPI definitions mid-process, responding late to the critical items, and giving incompatible figures to different buyers. Each one turns a quantifiable problem into a credibility problem, which is punished more heavily than the original finding.

Conclusion about Red Flags in Financial Due Diligence

Red flags are not the enemy of a deal: they are its alarm system. The one that appears during due diligence is negotiated; the one that appears after signing is litigated. That is the whole difference, and it is the reason it is worth investing in rigorous analysis before buying or selling.

In the middle market and the Spanish family business —where management accounts, the owner's add-backs and tax and employment contingencies are daily fare— an expert eye marks the distance between paying the fair price and inheriting a problem. And the best due diligence does not set out to "find errors": it sets out to determine how much of EBITDA is sustainable, how much genuinely converts into cash, what obligations the buyer inherits, and how much of the business plan can be defended with evidence. Detecting the sign in time is, almost always, what separates a good deal from an expensive one.

At Maraz Corporate Finance we deliver financial due diligence for buyers and sellers in the middle market and family-owned segment. If you are preparing a deal —as a buyer or as a seller— and want to know which signs to watch before signing, let's talk.

 

Javier de Rojas Roca de Togores

Partner - Maraz Corporate Finance

 

FAQs about red flags in financial due diligence

What is a red flag in financial due diligence?

It is an inconsistency, anomaly or exposure that questions the quality of earnings, cash generation, the value of the balance sheet, the level of debt or the credibility of the business plan, and which —because of its possible effect on price or risk— requires further evidence. It is not proof of fraud or of a demonstrated error: it is an indicator that raises the need to investigate. Its value lies not in accusing, but in flagging where to look before signing.

Does a red flag mean the deal has to be cancelled?

Almost never. Most red flags do not break the deal: they reprice it. They translate into a price adjustment, a specific warranty in the contract, an indemnity, or turning part of the payment into a conditional earn-out. Only a small group of findings —fraud, unverifiable cash, contingencies impossible to quantify— justifies walking away. The practical rule: the red flag that appears during due diligence is negotiated; the one that appears after signing is litigated.

What are the most common red flags in the Spanish family business?

The four most frequent are aggressive EBITDA adjustments with the owner's add-backs, double bookkeeping (statutory versus "management"), unprovisioned tax and employment contingencies —bogus self-employed contractors, poorly documented related-party transactions, open inspections— and excessive dependence on the owner (key-man risk). In the family SME it is common for several to appear together, and it is that combination, more than any single sign, that sets off the alarm.

How are red flags prioritised when many appear at once?

By scoring each sign across five dimensions —economic impact, probability, systemic nature, transmission to the deal and urgency— and taking them to a 0-to-100 scale. Those above 80 require an immediate committee; between 65 and 79, resolve or protect before closing; below 45, document and monitor. When three or more signs form a single economic chain (for example sales, customers and cash moving inconsistently), the combined risk exceeds the sum of the parts and the priority should be raised.

What is the difference between buy-side due diligence and Vendor Due Diligence?

Both use the same list of red flags, but with opposite purpose. In buy-side due diligence the buyer looks for the signs to negotiate price and contractual protections. In Vendor Due Diligence (VDD) it is the seller who gets ahead: they detect and fix or document the red flags before opening the process, to avoid last-minute discounts and sustain the price. Preparing a VDD is usually one of the best pre-sale investments.

Which situations force immediate escalation, without waiting for the valuation?

There are red lines that skip any score: material cash that cannot be confirmed with a bank independently, apparently falsified documentation, unresolved beneficial ownership (UBO) or money-laundering risks, material gaps between the accounts and the presented statements with no explanation, or management blocking access to evidence. In all these cases the problem is not price but the reliability of the information: first you restore confidence in the figures and only then do you negotiate over them.