Customer Verification in Acquisition Due Diligence: How I Prove the Revenue Is Real

Customer verification during acquisition due diligence is the buyer-side process of independently proving a target business’s customer relationships, revenue concentration, contract quality, and retention risk are what the seller claims. Unlike KYC or AML checks, acquisition customer verification isn’t about identity fraud — it’s about confirming the revenue actually exists, actually renews, and isn’t concentrated in one or two customers who’ll leave the day the seller does. Run before the LOI is binding, ideally under NDA, with a customer interview process, a concentration analysis, a contract review, and a retention risk assessment.

Look, the seller’s numbers tell you what the business did. Customer verification tells you what it’ll keep doing after you own it. Different question. Different answer.

I’ve done 300+ deals in 30 years. The deals that blew up post-close almost always had a customer verification failure I could have caught before the wire went out. One customer that was 45% of revenue. A “10-year contract” that was actually a handshake. A top account that had been shopping the market for six months. The seller doesn’t lie — they just don’t volunteer.

Here’s the exact process I run before I put real money at risk, same one we teach inside Dealmaker Academy.

Customer Interview Process

The customer interview is a direct conversation with the target’s top 5-10 customers, conducted under NDA during confirmatory due diligence, designed to verify revenue, satisfaction, and post-close intent. Skip this step and you’re buying the seller’s story instead of the customer’s reality. They are not the same story.

Here’s how I structure the calls:

• Get seller sign-off in the LOI. Right of contact with top customers is a standard DD provision. If the seller refuses, that’s your answer — walk.
• Position it as a “meet the new owner” call. Not an interrogation. Build rapport first, then ask the real questions.
• Ask five questions every time. How long have you worked with them? What percentage of your spend goes here? What’s the renewal timeline? What would make you leave? Who else did you consider?
• Listen for the pauses. The pause before “yeah, we’ll keep buying” tells you more than the answer.
• Document everything. Notes in writing. Follow-up email confirming what they said. Get offers and commitments in writing, not verbal.

Five calls done properly will surface 80% of the retention risk in the deal. If the customers won’t take your call, that’s data too.

Customer Concentration Analysis

Customer concentration analysis is the numerical breakdown of what percentage of revenue and gross profit comes from each customer, ranked largest to smallest, over the trailing three years. One customer over 15% of revenue is a weakness. Over 25% is a risk factor that has to be priced into the offer. Over 40% and the deal structure has to change — earnout, escrow, or walk.

The concentration workup includes:

• Top 10 customers by revenue, each of the last 3 years. You want to see the list move, not stay static. A static top 10 is a customer relationship at risk of leaving with the owner.
• Top 10 by gross profit, not just revenue. Big revenue at low margin is a different problem than big revenue at healthy margin. Both matter.
• Concentration ratios. Top 1, top 3, top 5, top 10 as a percentage of total. Anything over 25% for the top 1 gets flagged.
• Customer tenure. Length of relationship for the top 10. Long-tenured customers are usually the ones tied to the seller personally.
• Lost customer log. Who left in the last 3 years, and why. Sellers rarely offer this — you have to ask.

This analysis feeds directly into your acquisition target evaluation. Concentration risk isn’t a dealbreaker on its own — but it has to show up in the price or the terms.

Contract Review

Contract review during customer verification is the legal read of every material customer agreement to confirm the revenue is contractual, transferable, and not about to renegotiate. Recurring revenue on a signed contract with an assignment clause is worth 3-4x what the same revenue is worth on a handshake. The contract file tells you which one you’re buying.

What I look for on every material contract:

• Assignment or change-of-control clause. Can the contract transfer to a new owner without customer consent? If not, you need consent letters before close.
• Term and renewal. When does it end? Auto-renew or opt-in? A contract with 3 months left is a lease, not an asset.
• Termination for convenience. Can the customer walk with 30 days’ notice? Common in service contracts. Prices the risk.
• Pricing lock-in. Is the price fixed, escalating, or renegotiable? Owner may have discounted 15% to close the deal and never repriced.
• Exclusivity and non-competes. Does the customer have to buy exclusively from the business? Does the business have to serve only that customer?

Any material contract without an assignment clause needs a customer consent letter before you close. Handle this in parallel with legal DD, not after.

Retention Risk Assessment

Retention risk assessment is the buyer’s judgment on the probability each material customer stays post-close, based on tenure with the seller personally, contract strength, satisfaction signals, and market alternatives. This is the softest part of DD and the one that kills the most deals in year one. Weight it heavy.

The five retention red flags:

• The seller is the salesperson. If the seller personally owns every top account, those accounts are at risk the day they leave. Owner-operator is not the same as owner-investor. You’ll need retention agreements or an earnout structure.
• No documented handoff plan. Who introduces you to the customers? On what timeline? If the seller shrugs, walk.
• Recent customer complaints. Ask for the customer service log. Recent unresolved complaints in the top 10 accounts are a leaving signal.
• Renewal cliffs. Two or more material contracts expiring in the 12 months post-close. That’s a coordinated leaving risk.
• Competitor conversations. If the customer has been quoted by a competitor in the last 6 months, they’re already shopping.

Score each material customer green, yellow, or red. Any red-scored customer over 10% of revenue restructures the deal — indemnity holdback, earnout tied to retention, or seller note contingent on those accounts staying.

Where Customer Verification Fits in Due Diligence

Customer verification is one of four pillars in confirmatory DD, alongside financial, legal, and operational. Run it in parallel, not in sequence. All four have to clear before the wire goes out.

1. Financial verification — bank statements, tax returns, QoE. See the financial assessment framework.
2. Legal verification — corporate records, litigation, IP, and the legal standards for acquisitions.
3. Operational verification — systems, suppliers, employees, and compliance requirements.
4. Customer verification — this page. The revenue-side proof of what you’re buying.

All four feed into the 4-phase due diligence framework and the final go/no-go call.

Deep Dives

The related sub-topics that come up on every customer-side DD workstream:

• Risks of Business Acquisition — the full risk taxonomy customer concentration sits inside.
• Negotiation Tactics for Buyers — how concentration findings turn into indemnity holdbacks and earnout structure.
• Benefits of Thorough Evaluation — why the customer interview call pays for itself 100x over.
• Evaluating Acquisition Costs — how retention risk gets priced into the offer.
• Financial Due Diligence Checklist — the parallel workstream that verifies the numbers behind the customer list.
• Due Diligence Checklist for Buyers — the master checklist customer verification lives inside.

Frequently Asked Questions

What is customer verification during acquisition due diligence?

Customer verification during acquisition due diligence is the buyer’s independent process of confirming a target business’s customer relationships, revenue concentration, contracts, and retention prospects are as represented. It answers the question “will this revenue still be here after I own the business?” and is separate from KYC or AML identity verification.

How do I contact a seller’s customers during due diligence?

Get the right of customer contact written into the LOI. Position the outreach as a “meet the new owner” call under NDA, keep it short, and ask five questions: how long they’ve been a customer, what percentage of their spend goes to the target, when the contract renews, what would make them leave, and who else they considered. Sellers who refuse customer contact are hiding something — walk.

What is a dangerous level of customer concentration in a deal?

Any single customer over 15% of revenue is a weakness. Over 25% is a risk that has to be priced into the offer through a lower price, an earnout, or an indemnity holdback. Over 40% and the deal structure changes materially — you’re buying a customer as much as a business, and if that customer leaves, the business is worth a fraction of what you paid.

What contracts should I read during customer verification?

Every material customer contract — usually every contract representing over 5% of revenue. Read for assignment or change-of-control clauses, term and renewal dates, termination-for-convenience rights, pricing lock-in, and exclusivity. Any material contract without a clean assignment clause needs a customer consent letter before you close.

How do I assess customer retention risk after close?

Score each material customer green, yellow, or red based on tenure with the seller personally, contract strength, satisfaction signals, and market alternatives. Owner-dependent accounts, unresolved complaints, renewal cliffs, and recent competitor quotes are the four retention red flags. Any red-scored customer over 10% of revenue triggers a change to the deal structure — indemnity, earnout, or seller note contingent on retention.

How is acquisition customer verification different from KYC?

Know Your Customer (KYC) and AML compliance verify a customer’s identity to prevent fraud and money laundering. Acquisition customer verification verifies the revenue and relationship the target business has with its customers — a completely different question. Buyers of small and mid-market businesses need acquisition customer verification. KYC is a compliance workstream for the business itself, not for the buyer.

Do I need a lawyer for customer verification?

You need a lawyer for the contract review portion — assignment clauses, change-of-control language, and consent letters have to be read and drafted by counsel. The customer interviews, concentration analysis, and retention scoring you can run yourself with your DD team. Never take legal advice from a course, a coach, or an article — always defer to your counsel.

When during the deal should I run customer verification?

After the LOI is signed with a right of customer contact, during the confirmatory due diligence window before the purchase agreement is binding. Not before the LOI — you don’t have the standing. Not after close — it’s too late. The 30-60 day exclusive DD window is when this work gets done.

---

Next move: pull the top 10 customers list on your next live deal and score concentration before you touch valuation. Then walk the four verification steps in order. Come inside Dealmaker Academy to run this on real targets with the coaching team, or book a coaching call to review a specific deal.