Due Diligence Checklist for Buying a Business in Sri Lanka

A Practical Buyer’s Guide to Avoiding Expensive Mistakes

Most business buyers in Sri Lanka do not fail because they bought a “bad” business.

They fail because they failed to verify what actually mattered before taking over.

A business can look profitable, busy, and well-known from the outside while hiding operational weaknesses, undocumented liabilities, unstable cash flow, owner dependency, or relationship-based risks that only appear after the takeover.

Due diligence is the process of identifying those risks before money changes hands.

This guide explains what buyers should actually check before buying a business in Sri Lanka, where deals commonly go wrong, and how to identify major warning signs early.

This is written for practical buyers, not corporate lawyers.

---

Why Due Diligence Matters Even More in Sri Lanka

Sri Lankan SMEs often operate differently from larger, fully structured companies.

Many businesses rely heavily on:

• informal operational systems
• undocumented processes
• cash components
• personal supplier relationships
• verbal agreements
• owner-managed decision-making
• trust instead of documentation

This does not automatically mean the business is dishonest.

However, it does mean risk is often hidden beneath daily operations rather than clearly documented.

Many buyers make dangerous assumptions such as:

• “The owner seems genuine.”
• “The business has existed for years.”
• “Everyone knows this place.”
• “The shop always looks busy.”
• “The seller says the business makes money.”

None of these are due diligence.

In Sri Lanka, many business problems appear only after the takeover, when:

• suppliers reduce credit periods
• key employees resign
• landlords refuse lease transfers
• customers were actually loyal to the owner personally
• undeclared cash sales disappear
• licences cannot be transferred
• operational knowledge leaves with the seller
• actual margins are lower than claimed

The goal of due diligence is simple:

Identify problems before they become your responsibility.

---

What Due Diligence Actually Means

Due diligence is:

• verifying important claims
• identifying operational and financial risks
• understanding how the business truly functions
• confirming what can realistically transfer to a new owner

Due diligence is not:

• accusing the seller of dishonesty
• demanding corporate-level audits from small SMEs
• trying to “catch” the owner
• creating unnecessary complexity

The objective is practical:

“What could seriously affect this business after takeover, and am I comfortable with that risk?”

---

Financial Due Diligence: Understanding the Real Numbers

In Sri Lanka, buyers often focus too heavily on revenue while ignoring consistency, sustainability, and operational reality.

At minimum, buyers should request:

• revenue summaries for the last 12–24 months
• approximate monthly profit estimates
• major expense categories
• rent and salary costs
• supplier payment obligations
• available bank statements
• sales reports or POS summaries where applicable

Perfect accounts are uncommon in SMEs.

What matters more is whether the numbers make operational sense.

What Buyers Should Look For

Look for:

• stable monthly patterns
• realistic margins
• consistency between sales and operating scale
• explanations for fluctuations
• alignment between lifestyle and reported income
• reasonable staff and overhead costs

Common Sri Lankan Red Flags

Be cautious if:

• numbers change during each discussion
• the owner avoids basic financial questions
• “cash sales” are impossible to estimate
• profits seem unusually high for the industry
• the owner insists everything is “in their head”
• there is heavy dependence on undocumented transactions
• financial information appears created only for the sale

Many Sri Lankan SMEs underreport revenue for tax reasons.

That creates a difficult situation during a sale because buyers cannot value undocumented income properly.

If earnings cannot be reasonably demonstrated, buyers will discount the value heavily.

---

Cash Flow Matters More Than Profit

Many buyers verify profit but fail to understand cash flow timing.

This is one of the biggest acquisition mistakes in Sri Lanka.

You must understand:

• when money enters the business
• when major payments are due
• whether operations depend on supplier credit
• whether the business regularly experiences cash shortages

Review:

• salary cycles
• rent due dates
• supplier payment periods
• customer payment delays
• seasonal fluctuations
• inventory purchasing cycles

A business may appear profitable while constantly struggling for working capital.

If cash flow timing is weak, the business may become unstable immediately after takeover.

---

Stock and Inventory Due Diligence

Inventory disputes are extremely common during SME acquisitions in Sri Lanka.

Buyers should verify:

• actual physical stock
• damaged inventory
• expired items
• slow-moving products
• obsolete inventory
• stock valuation method

Clarify early:

• whether stock is included in the selling price
• whether stock is valued at cost or selling price
• who bears inventory losses before handover
• how final stock counts will be conducted

Never assume “stock included” has a mutually understood meaning.

---

Lease and Premises Risk: One of the Biggest Sri Lankan Risks

Many buyers underestimate lease risk.

In Sri Lanka, some businesses survive primarily because of location.

A business can lose enormous value if:

• rent increases sharply
• the landlord refuses transfer approval
• lease renewal becomes uncertain
• key operating permissions change

Always review:

• lease agreement
• remaining lease period
• rental escalation clauses
• landlord approval requirements
• transfer conditions
• security deposit terms

Ask directly:

• Will the landlord support the transfer?
• Will the rent remain unchanged?
• Will a new advance payment be required?

Never assume continuity simply because the business has operated there for years.

---

Staff and EPF/ETF Due Diligence

Many Sri Lankan SMEs rely heavily on a few trusted employees.

Buyers should understand:

• who actually runs daily operations
• whether the owner is deeply involved
• which staff are critical
• whether key employees are likely to stay

Also verify:

• EPF/ETF registration
• contribution payments
• salary obligations
• unpaid employee liabilities
• labour disputes
• gratuity exposure

In some businesses, losing one cashier, supervisor, chef, technician, or production manager can seriously damage operations.

---

Owner Dependency: The Hidden Risk Many Buyers Miss

One of the biggest risks in Sri Lankan SME acquisitions is owner dependency.

Ask yourself:

• Does the business function without the owner present daily?
• Do customers deal mainly with the owner personally?
• Do suppliers extend credit because of personal trust?
• Is operational knowledge undocumented?
• Does the owner control every major decision?

Many businesses become weaker immediately after takeover because relationships leave with the seller.

This is especially common in:

• restaurants
• wholesale trading
• distribution businesses
• family-run operations
• service businesses

A highly owner-dependent business should usually trade at a lower valuation.

---

Supplier and Customer Dependency

Check whether the business depends too heavily on:

• one supplier
• one customer
• one distributor
• one contract
• one relationship

Review:

• supplier credit terms
• outstanding balances
• exclusivity arrangements
• customer concentration
• recurring revenue stability

A business with diversified customers and suppliers is generally safer.

---

Tax and Regulatory Due Diligence

Many buyers overlook tax exposure until late in the transaction.

Depending on the business, review:

• VAT status
• income tax filings
• PAYE/APIT obligations
• municipal licences
• industry approvals
• company filings
• import/export permits where applicable

Clarify whether there are:

• outstanding tax disputes
• unpaid liabilities
• regulatory investigations
• renewal risks

Certain licences may be tied to:

• specific individuals
• entities
• locations
• regulatory approvals

Never assume all licences transfer automatically.

---

Digital Asset Due Diligence

Many modern SMEs depend heavily on digital assets.

Verify ownership and transfer access for:

• domain names
• websites
• hosting accounts
• business email systems
• social media pages
• Google Business Profiles
• POS systems
• delivery platform accounts

Access should transfer properly at completion, not “later.”

---

Instalment Deals and Seller Financing

Instalment-based deals are common in Sri Lanka, especially for SMEs.

If instalments are involved, buyers must understand:

• how payments will be structured
• what happens during weak months
• when operational control transfers
• what security exists for both parties
• what happens if disputes arise

Complex payment structures increase risk significantly.

---

Major Red Flags That Should Pause the Deal

Be cautious if:

• answers constantly change
• information is delayed repeatedly
• the seller pressures urgency
• financials improve every meeting
• key documents are avoided
• the owner becomes emotional during reasonable questions
• supplier or staff dependency is extremely high
• the seller refuses basic verification
• nobody besides the owner understands operations

Walking away from a weak deal is not failure.

Bad acquisitions are far more expensive than missed opportunities.

---

When Buyers Should Bring in Professionals

Professional support should be used strategically.

Consider involving:

• accountants for financial review and tax exposure
• lawyers for agreements and structural risk
• advisors for negotiation and transaction discipline

However, buyers should still understand the business personally.

Never outsource common sense.

---

Practical Due Diligence Checklist for Sri Lankan Buyers

Before committing, confirm you have reviewed:

✔ Revenue and profitability
✔ Cash flow timing
✔ Stock and inventory
✔ Lease and landlord position
✔ EPF/ETF obligations
✔ Supplier relationships
✔ Customer concentration
✔ Owner dependency
✔ Staff structure
✔ Assets and equipment
✔ Tax and licence exposure
✔ Digital asset ownership
✔ Operational transferability
✔ Key business risks

If several areas remain unclear, pause before proceeding.

---

Final Thoughts

Good businesses survive scrutiny.

Weak businesses become defensive during scrutiny.

Due diligence is not about trying to “kill” a deal.

It is about:

• understanding operational reality
• identifying hidden risks
• valuing the business correctly
• avoiding expensive surprises after takeover

The most successful buyers are usually not the most aggressive.

They are the most disciplined.

---

Disclaimer

This article is provided for general informational purposes only and does not constitute legal, tax, accounting, investment, or financial advice. Buyers should obtain appropriate professional advice before purchasing any business in Sri Lanka.