Buying a website can be faster than building one, but only when the underlying traffic, revenue, assets, and operating requirements are understood before money changes hands. This practical website due diligence checklist gives you a repeatable process for evaluating a listing, testing seller claims, protecting the transaction, and planning the handover.
Overview
A website marketplace listing is a starting point, not proof of value. A polished design, an attractive earnings screenshot, or a confident seller description cannot replace independent verification. Your objective is to determine what you are actually buying, how the business performs, what could reduce that performance, and whether you can operate it after the transfer.
Before making an offer, define the acquisition clearly. Is it a content site, ecommerce store, lead-generation website, membership business, software product, or another online business model? The right checks vary by scenario, but every review should cover five areas:
- Performance: traffic, revenue, conversions, margins, and seasonality.
- Durability: search visibility, customer sources, suppliers, platforms, and key personnel.
- Ownership: domains, content, code, customer data, social accounts, creative assets, and contracts.
- Operations: the daily work, technical dependencies, costs, and time required to keep the business running.
- Transfer: escrow, account changes, documentation, support, and post-closing verification.
Use the checklist below as a working document. Mark each item as verified, partially verified, not applicable, or unresolved. An unresolved item is not automatically a reason to walk away, but it should affect your offer, protection terms, or decision to proceed.
Checklist by scenario
For any website or online business
- Record the legal seller name and confirm who has authority to sell the asset.
- Request a clear list of included and excluded assets. Identify the domain, website files, database, brand materials, email accounts, social profiles, analytics properties, customer records, supplier relationships, and software licenses.
- Review revenue and expense records for a consistent period rather than relying on a single strong month. Ask how each revenue figure was generated and whether it is gross sales, collected revenue, or profit.
- Compare the seller's financial summary with payment processor, advertising, affiliate, subscription, or store-platform records where relevant.
- Request read-only access to analytics and search tools, or conduct a live screen-share review. Check that the account belongs to the business and that the reporting period matches the seller's claims.
- Document recurring work: publishing, customer support, fulfillment, technical maintenance, marketing, bookkeeping, and supplier management.
- List every recurring expense, including hosting, applications, contractors, payment processing, advertising, inventory, refunds, chargebacks, and renewals.
- Identify legal, platform, intellectual-property, privacy, or customer-service issues that could transfer with the business.
- Confirm the proposed transfer method, timeline, training or handover period, and what happens if an asset cannot be transferred.
For a content or affiliate website
- Review traffic by source, landing page, country, device, and month. Look for concentration in one page, keyword, search engine, referral, or affiliate partner.
- Check whether traffic changes align with publishing activity, algorithm updates, technical changes, seasonality, or unusual promotional events.
- Inspect the backlink profile for relevance, editorial context, suspicious patterns, and links that may be removed or controlled by the seller.
- Review the content inventory and confirm that the seller owns the text, images, illustrations, videos, and product claims used on the site.
- Check affiliate agreements, commission terms, account ownership, and whether the buyer is eligible to continue using each program.
- Test important pages, redirects, forms, internal links, structured data, indexing settings, and page templates before closing.
For broader domain research, the guides to domain marketplaces for expired, premium, and brandable domains and hosting for a newly acquired domain provide useful context when the website purchase includes a domain or a planned relaunch.
For an ecommerce business
- Reconcile orders, refunds, cancellations, taxes, shipping charges, payment fees, and inventory costs.
- Review customer acquisition by channel and calculate whether performance depends on paid advertising, discounts, a single marketplace, or a small number of products.
- Check supplier terms, minimum orders, lead times, product authorizations, intellectual-property rights, and inventory ownership.
- Inspect customer cohorts, repeat purchases, average order value, support volume, and common complaints.
- Confirm that the store, payment accounts, product data, customer records, email lists, and advertising accounts can be transferred lawfully and technically.
- Examine outstanding orders, warranties, returns, chargebacks, subscriptions, and obligations that may remain after completion.
For a SaaS or membership business
- Verify active customers, subscription status, cancellations, upgrades, failed payments, and refunds.
- Review source-code ownership, deployment access, repositories, domains, databases, backups, monitoring, and third-party integrations.
- Document security practices, administrator accounts, secrets, data retention, user permissions, and any reported incidents.
- Estimate the technical work required to maintain the product without the seller. A business that depends on undocumented knowledge may require a lower offer or a longer transition.
- Check service terms, privacy commitments, customer contracts, support obligations, and licenses for code or data supplied by third parties.
What to double-check before making an offer
Traffic and SEO verification
Do not evaluate traffic only from a headline total. Compare analytics with search performance, server or hosting information where available, and the business's conversion records. Investigate sudden increases, unexplained geographic changes, direct-traffic spikes, bot activity, and traffic that does not produce expected engagement or revenue.
Review the backlink profile and top-ranking pages rather than assuming that all search traffic is equally durable. Look for dependence on one keyword cluster, expired content, redirects, thin pages, copied material, or links the seller cannot reasonably transfer or maintain. Search visibility can change after an ownership or content change, so treat it as an operating risk rather than a guaranteed asset.
Financial quality
Separate revenue from profit and profit from owner benefit. Recalculate the result after including ordinary operating costs, replacement labor, software, advertising, fulfillment, payment fees, refunds, taxes, and maintenance. Ask whether the seller's reported figures include one-time sales or expenses. A simple monthly schedule showing revenue, direct costs, operating costs, and cash collected is more useful than an isolated earnings claim.
Asset ownership and dependencies
Confirm that the seller owns the domain and can transfer it. Check registrar access, renewal status, transfer restrictions, DNS records, email routing, hosting credentials, and backup procedures. For a fuller domain handover review, see this comparison of marketplace fees, escrow, and transfer policies.
Then map dependencies. Note which services are essential, who controls each account, how accounts will be renamed or transferred, and what happens if a provider refuses a transfer. Do not assume that a seller's personal account, agency account, or bundled software license is included.
Transaction protection
Use a written purchase agreement that identifies the assets, price, payment stages, representations, transition duties, and remedies for undisclosed problems. Use the marketplace's protected process or an appropriate escrow arrangement when available. Confirm the exact release conditions before sending funds, and verify payment instructions through the platform or a trusted channel rather than relying on a changed message or unfamiliar bank details.
Common mistakes
- Relying on screenshots: Screenshots can omit filters, dates, refunds, costs, or account ownership. Prefer live, read-only access or records that can be reconciled.
- Confusing growth with stability: A recent increase may reflect seasonality, a temporary campaign, a viral page, or a platform change. Review a sufficiently broad period and ask what caused the movement.
- Ignoring the buyer's workload: A profitable site may require daily support, technical skills, inventory handling, or content production. Price the work you will personally perform or replace.
- Skipping the backlink and content review: Search traffic may depend on assets with weak ownership, poor quality, or a concentrated risk profile.
- Transferring accounts informally: Shared passwords and personal accounts create security, privacy, and recovery problems. Plan formal ownership changes and rotate credentials after closing.
- Paying before defining the handover: A transfer plan should cover credentials, files, customer communication, open orders, support, documentation, and a final asset inventory.
- Making an offer before resolving material gaps: If verification is incomplete, use a conditional offer or pause. A low price does not automatically compensate for unknown liabilities.
When to revisit
Revisit this checklist before every serious offer, not only when buying a large online business. Website marketplaces, analytics interfaces, payment systems, search practices, privacy requirements, and transfer procedures can change. Update your working version whenever a tool, platform, revenue source, or operating model changes.
It is also useful to repeat the review at practical planning points:
- Before seasonal planning cycles: Confirm inventory, advertising, content, staffing, and cash requirements before a high-demand period.
- After a major traffic or revenue change: Recheck the source of the change and whether it is repeatable.
- Before renewing key services: Review domains, hosting, software, licenses, supplier terms, and payment accounts.
- When workflows or tools change: Update the access map, backup process, security controls, and documented handover steps.
- After acquisition: Compare the transferred assets with the agreement, rotate credentials, verify backups, test payments and forms, and record any missing or incorrect items promptly.
For your next purchase, copy this article into a working document and add columns for evidence, owner, status, and follow-up date. Do not submit an offer until the unresolved items are understood well enough to price, protect, or reject. That disciplined pause is often the most valuable step in learning how to buy a website safely.
