How to Buy a Shopify Store: Due Diligence

TL;DR: Verify the business with seller-authorized financial, traffic, customer and operational records. Public apps, pixels, themes and Plus flags can identify integrations to inspect; they cannot confirm revenue, profitability or fraud. Set the purchase conditions around reconciled evidence and transferable assets.

Some links in this article are affiliate links. We may earn a commission if you purchase through them, at no extra cost to you.

What public research can establish

The earlier 91,694-store acquisition benchmark has no retained matching output and has been removed. A related, retained StoreInspect extract collected on February 3, 2026 covers 83,258 stored rows:

The five bands total 83,202, leaving 56 unknown-tier rows. These are historical denormalized store fields, not a current active-business census. The retained web/scripts/blog-data/valuation-stats.ts and valuation-data-summary.md warn that traffic is estimated, Plus detection can give false positives and the sample is selected. Observation ages were not bounded.

The variation helps you decide which integrations and maintenance requirements to inspect. It does not supply a revenue threshold or a reason to reject a sparse-tech store. Raw app entries include payments, signatures can be stale and backend or native functions may be invisible.

The old “99.6% rule,” minimum app counts and “expected stack by revenue” tables have been removed. A free Dawn theme or unconfirmed Plus status is not evidence that a seller's financial claims are false.

Define the acquisition you can operate

Before comparing listings, write down the product model, market, operating workload, capabilities and total capital you can support. Separate purchase consideration from inventory, working capital, transaction costs, financing and contingency needs.

Buying an existing business does not guarantee transferable product-market fit or day-one cash flow. Demand, supplier terms, staff, customer permissions and acquisition channels may change after transfer. Inspect what you will actually own and operate.

Find listings without treating vetting as a guarantee

Investigate current listings or offers from Empire Flippers, FE International, Quiet Light, Acquire.com or Flippa. Private introductions may also lead to a business to evaluate.

Check the provider's current eligibility, fees, diligence scope, exclusivity, transfer and payment terms in writing. This guide does not rank listing quality, claim an 80% rejection rate or retain unchecked commissions.

OpenStore is another provider to investigate on its current terms. The unsupported 24-hour-offer and 20–30% discount promises have been removed. Do not submit a Shopify password to a buyer or intermediary; use an authorized access mechanism with a defined scope.

Establish the earnings basis

An owner-operated business may be assessed using Seller's Discretionary Earnings; a managed operation may use adjusted EBITDA. Confirm the earnings period, actual add-backs and replacement management cost before choosing a multiple. The store valuation guide has a worked, explicitly hypothetical example.

FE International's September 22, 2026 guide describes broad owner-operated SDE ranges, rather than universal size bands. Its primary valuation discussion, checked October 10, 2026, is context for comparisons. The StoreInspect dataset contains no completed-sale prices or financial outcomes.

An asking price is not a comparable completed transaction. Record the earnings measure, transaction date, inventory treatment, owner workload and deal structure for any comparison. Avoid fixed +0.3× adjustments for age, apps or growth without matching evidence.

Seven areas of diligence

1. Technology and asset ownership

Use Store Inspector to note the public theme, app and pixel evidence and its date. With seller-authorized access, compare it with the installed apps, invoices, licenses, custom code, domains and integration accounts.

Record what transfers, what must be recreated and what depends on the seller's personal account. Verify any Plus-dependent feature against the merchant's current plan. The Plus identification guide explains why checkout appearance alone is inconclusive.

Do not multiply visible apps into software spend. Ask for invoices and contract terms. A missing support widget may reflect email support or an invisible helpdesk.

2. Financial statements and revenue

Obtain statements and source records for a consistent period. Ask for the accounting basis, order/sales reports, refunds, processor transactions, payouts, bank receipts, inventory movement, supplier costs, fulfillment expenses and acquisition spend.

Build a documented bridge rather than expecting revenue to equal a bank deposit. Shopify's payout documentation, checked October 10, 2026, distinguishes transaction activity, fees, payouts and timing.

Hypothetical settlement example:

This is a simplified cash bridge, not an income statement. Collections can include tax or orders from another reporting period; refunds, foreign exchange, chargebacks and released reserves need their own treatment. Match the $88,000 to the appropriate bank receipt and explain any timing difference. An unexplained discrepancy deserves investigation; there is no universal acceptable 5–10% gap.

3. Traffic and acquisition

Request authorized analytics access or exports covering the same months and compare session definitions, countries, devices, channels and bot effects. Google Search Console addresses Google search performance, not all-channel store visits. An external Similarweb estimate is context, not financial verification.

Reconcile acquisition spend and resulting orders with returns and contribution. A channel spike may have a legitimate explanation; obtain the campaign or referral evidence. App/pixel counts cannot independently validate a traffic tier that uses those inputs. See checking Shopify traffic.

4. Customer and permission records

Inspect repeat-order cohorts, refunds, disputes, subscriber consent records and the rights and conditions governing transfer and future use. Compare periods and definitions rather than judging a business by universal open-rate or repeat-rate thresholds.

Open tracking alone does not prove customer engagement. A stored email list is not automatically transferable permission to market. Have the actual transaction and destination-market requirements reviewed before transfer.

5. Products, suppliers and fulfillment

Inspect samples and the actual delivery journey. Confirm landed costs, supplier contracts, stock condition, lead times, minimum orders, substitutions and alternatives.

For a dropshipping operation, verify fulfillment and product quality rather than using listing style as a verdict. Dropshipping signals can generate questions; supplier and delivery evidence answers them.

6. Workload and continuity

Document owner tasks, staff, contractors, support volume, scheduled work and failures. Observe the operation rather than assuming that an advertised two-hour week includes every task.

Estimate the cost of replacing work you cannot perform. Check which supplier, employee, integration or acquisition channel is a single point of failure. Put required seller assistance into the proposed transition terms.

7. Legal and contractual transfer

Identify entity and asset ownership, trademarks, domains, licenses, supplier rights, tax obligations, disputes and liabilities relevant to the deal. Asset and share transactions need different documentation and treatment.

Have the agreement and required diligence reviewed by appropriate advisers for the actual jurisdiction and structure. The old $100,000 threshold and $2,000–$5,000 legal-cost promise have been removed; complexity cannot be inferred from price alone.

One risk and evidence table

A seller declining an earnout is not proof of dishonesty; deal preferences and incentives vary. A delayed response or refusal of one access method also requires context. If essential claims remain unsupported after reasonable alternative evidence is offered, make that specific gap a condition of proceeding.

A hypothetical screening example

A listing claims $80,000 monthly net sales. Public inspection finds a free theme and one email signature. That observation cannot revise revenue to $20,000–$30,000 or prove a bad deal.

Request the sales report definition, processor activity, bank settlement bridge, costs and owner workload for the claimed period. If the seller cannot substantiate the relevant claims, document the missing evidence and decide whether to continue. This is an illustrative workflow, not a StoreInspect seller interaction or disappearing-listing case.

Set conditions for closing and transition

An acquisition process can include initial screening, confidentiality arrangements, preliminary evidence review, deeper financial/operational/legal diligence, negotiated terms and closing. Their sequence and duration vary with the agreement, financing and approvals.

Before closing, specify the assets, liabilities, inventory treatment, payment mechanism, transfer steps, unresolved conditions and seller support. Confirm the store and related accounts can be transferred on the intended terms. Do not release funds merely because public technology matches a benchmark.

After transfer, confirm authorized access, integrations, supplier arrangements, payouts and customer service continuity. Change access credentials through the agreed process, retain records and address reproducible failures. Base later growth tests on measured economics rather than a mandatory week-by-week growth calendar.

Common questions

How much capital do I need?

Model purchase consideration, inventory, working capital, costs, debt service and contingencies for the actual business. The article has no evidence for a universal total of two or three times the purchase price.

Does a 3× multiple imply a three-year payback?

Only in a simplified hypothetical calculation where $300,000 total invested capital produces $100,000 of distributable annual cash after necessary costs every year. SDE can include compensation for the buyer's labor, and changes in working capital, capex, financing, tax or performance change the result. Flat revenue alone does not establish payback.

How do I verify claimed revenue?

Reconcile seller-authorized sales and accounting records through processor activity to bank receipts, using consistent periods and explained adjustments. Public app counts cannot do that.

Should I use a broker?

Compare the provider's actual services, current terms and responsibilities with the work you need. This guide does not claim a guaranteed fee recovery or lower acquisition risk.

For bulk public screening, StoreInspect for investors can help collect technology context. Use the store audit workflow to organize observations, and keep the financial decision tied to the records above.