M&A Due Diligence Investigations: A Buyer’s Guide to Risk

What financial statements do not tell you

Every M&A transaction carries risks that the numbers alone do not reveal. The target company’s accounts may be accurate, its legal compliance impeccable, and its market position genuine – but the management team may have undisclosed conflicts of interest, the key customer relationships may depend on a single person who plans to leave, and the company’s main competitor may be six months from launching a product that renders the target’s offering obsolete. Financial and legal due diligence addresses what can be verified from documents. Investigative due diligence addresses the questions that documents cannot answer.

This article explains what investigative due diligence involves in UK M&A transactions, what buyers should look for beyond the data room, and how professional investigators reduce the risk of acquiring a business that is not what it appears to be.

Why financial due diligence is not enough

Standard due diligence in M&A transactions focuses on financial performance, legal compliance, tax, employment, and intellectual property. Accountants examine the numbers. Lawyers review the contracts. Both rely primarily on documents provided by the seller – documents that the seller has chosen to include in the data room.

The limitation is obvious: the seller controls the information flow. Material risks that the seller is unaware of will not appear. Material risks that the seller is aware of but prefers not to disclose may also not appear, at least not prominently. Non-disclosure may be deliberate, or it may result from the seller’s genuine belief that an issue is immaterial when the buyer would view it differently.

Investigative due diligence fills this gap. It provides an independent assessment of the people, relationships, and circumstances behind the transaction – factors that determine whether the business you are buying will perform as expected after completion.

What investigative due diligence covers

Management and key personnel

The people running a business determine its performance. Investigative due diligence examines the backgrounds of directors, senior managers, and key employees. This includes verifying their stated qualifications and career history, checking for undisclosed directorships in competing or conflicting businesses, identifying any history of regulatory action, disqualification, or legal proceedings, assessing their financial standing (are they personally in financial difficulty that might affect their judgment?), and checking for reputational issues that could affect the acquired business.

In smaller businesses, the founder or managing director often is the business. Their relationships with clients, suppliers, and staff are the company’s principal assets. If that person plans to leave shortly after completion, or if they have a non-compete clause that is unenforceable because it is too broadly drafted, the business you are buying may be worth less than you think.

Beneficial ownership and connected parties

Company structures can obscure the true ownership of a business. Nominee directors, offshore holding companies, and complex group structures may hide the involvement of individuals who would raise concerns if their connection were known. Investigative due diligence traces the ownership structure to identify the true beneficial owners and their other business interests.

Connected party transactions, deals between the target company and businesses owned by its directors or their associates, are a particular risk area. A target company that pays above-market rates to a supplier controlled by the managing director’s spouse is leaking value. These transactions may be legal and disclosed in the accounts, but their nature and pricing warrant scrutiny during due diligence.

Litigation and regulatory history

Court records, tribunal decisions, and regulatory actions are a matter of public record. Investigative due diligence searches these records to identify current and historical legal proceedings involving the target company, its directors, and its connected entities. A company that has been the subject of repeated employment tribunal claims may have management culture problems. A company whose directors have faced regulatory sanctions in previous roles raises questions about compliance standards.

Customer and supplier concentration

Financial due diligence identifies customer and supplier concentration from the accounts. Investigative due diligence assesses the stability of those relationships. If 40 per cent of revenue comes from a single customer, what is the contractual position? Is the contract terminable on notice? Is the relationship dependent on a personal connection that may not survive a change of ownership?

Similarly, if the business depends on a single supplier for a key input, what happens if that relationship breaks down? Is the supplier itself financially stable? Are there alternative suppliers, or does the target company’s product specification lock it into a single source?

Market intelligence and competitive position

Understanding the target company’s competitive position requires intelligence that goes beyond market reports. Who are the real competitors, and what are they planning? Is the market growing or contracting? Are there regulatory changes on the horizon that could affect the business model? Is the target’s pricing maintainable, or has it been cutting margins to maintain market share ahead of a sale?

Market intelligence does not require espionage. It requires systematic research using public sources, industry contacts, and professional knowledge of the sector. An experienced investigator with sector knowledge can identify risks that a generalist adviser would miss.

Reputational risk

The target company’s reputation among customers, suppliers, employees, and regulators affects its post-acquisition performance. Investigative due diligence assesses reputational risk through media analysis, review of online reviews and complaints, regulatory correspondence, and enquiries within the relevant industry.

A company with a history of customer complaints, negative press coverage, or regulatory warnings carries reputational baggage that the buyer will inherit. This does not necessarily make the acquisition a bad idea, but it should be reflected in the price and in the buyer’s post-acquisition plan.

Red flags in M&A due diligence

Certain patterns should prompt deeper investigation. Sellers who are reluctant to disclose information beyond the data room minimum. Directors with complex personal financial arrangements or a history of business failures. Ownership structures that seem unnecessarily complex for the size and nature of the business. Material transactions with connected parties that were not immediately disclosed. Key employees with restrictive covenants that may not be enforceable. Customer relationships that depend entirely on the personal connections of the departing founder.

None of these factors is automatically disqualifying. But each one represents a risk that should be understood, quantified, and either mitigated through the transaction documentation (warranties, indemnities, retention, or price adjustment) or accepted with open eyes.

The process

Scoping

Investigative due diligence begins with a scoping discussion to define what the buyer needs to know. This is shaped by the nature of the target business, the size of the transaction, the buyer’s risk appetite, and the areas where the buyer has identified gaps in the information available from standard due diligence.

A small acquisition of a well-known business in a familiar sector may require only a focused background check on the directors and a review of litigation history. A larger acquisition of a business in an unfamiliar market, with overseas operations and a complex ownership structure, may require detailed investigation across multiple jurisdictions.

Research and investigation

The investigation draws on public records (Companies House, Land Registry, court records, regulatory databases), media and online sources, industry contacts and sector knowledge, and, where appropriate, discreet enquiries within the target’s market. All research is conducted lawfully and within data protection boundaries. The investigation does not involve surveillance, deception, or any form of covert intrusion – it is a desk-based and open-source research exercise supplemented by professional analysis.

Reporting

Findings are presented in a confidential report that sets out the verified facts, identifies risks and concerns, and provides context to help the buyer assess the significance of each finding. The report is designed to be used alongside the financial and legal due diligence reports, and can be shared with the buyer’s legal advisers for incorporation into the transaction documentation.

The report does not make a recommendation on whether to proceed with the transaction. That decision is the buyer’s. The investigator’s role is to ensure that the decision is made with full knowledge of the risks.

International M&A due diligence

Cross-border transactions introduce additional risks. Company registration and transparency requirements vary between jurisdictions. Beneficial ownership may be harder to establish in countries with less developed public registers. Litigation and regulatory history may be difficult to search in jurisdictions where court records are not digitised or publicly accessible.

UKPI works with established partners in key international jurisdictions to conduct overseas due diligence. This allows us to search foreign company registers, property records, and court databases, and to provide local market intelligence that a UK-based desk exercise cannot deliver.

Costs and timescales

The cost of investigative due diligence depends on scope and complexity. A focused background check on a UK-based target’s directors and litigation history can be completed in three to five working days for between £2,000 and £5,000. A detailed investigation covering international operations, complex ownership structures, and market intelligence may take two to four weeks and cost between £10,000 and £30,000.

These costs are modest relative to the value of most M&A transactions and the potential cost of acquiring a business with undisclosed problems. A £20,000 investigation that prevents a £5 million mistake is money well spent. A £5,000 investigation that confirms the buyer’s expectations and provides confidence to proceed is equally worthwhile.

Working with UKPI

UKPI provides investigative due diligence services for M&A transactions of all sizes. Our investigators include former financial crime investigators and corporate intelligence professionals with experience across multiple sectors and jurisdictions.

We work alongside your legal and financial advisers, providing the investigative dimension that complements their document-based analysis. Our reports are used by private equity firms, corporate acquirers, family offices, and professional advisers to inform acquisition decisions.

For a confidential discussion about due diligence for a planned acquisition, call 0800 043 1754 or contact us online. We can scope an investigation to match your requirements and timeline.

Post-acquisition investigation

Due diligence does not end at completion. The first six to twelve months after an acquisition often reveal information that was not available or not visible during the pre-deal process. Customers who were loyal to the previous owner may not transfer their loyalty to the new one. Employees who smiled through the acquisition process may leave once their retention bonuses vest. Suppliers who offered favourable terms to the previous owner may renegotiate when the relationship changes.

Post-acquisition investigation addresses problems that emerge after the deal closes. If the acquired business underperforms relative to the assumptions that justified the purchase price, investigation can determine why. Was the financial information provided during due diligence accurate? Were material facts concealed? Are there warranty or indemnity claims that the buyer can pursue against the seller?

In some cases, post-acquisition investigation reveals that the seller engaged in deliberate misrepresentation – inflating revenue, concealing liabilities, or failing to disclose material litigation. These discoveries can support claims for breach of warranty, fraudulent misrepresentation, or adjustment of the purchase price under the terms of the share purchase agreement.

Sector-specific risks

Different sectors present different due diligence risks. Technology acquisitions carry IP ownership risks – who actually owns the code? Were contractors properly assigned? Are there open-source licence obligations that restrict commercial use? Healthcare acquisitions involve regulatory compliance risks, CQC registration, and safeguarding history. Construction and manufacturing acquisitions require assessment of environmental liabilities, health and safety records, and compliance with building regulations.

Financial services acquisitions are governed by the Financial Conduct Authority’s change of control requirements. The FCA will assess the fitness and propriety of the new controllers, and failure to obtain FCA approval before completion can result in the acquisition being unwound. Investigative due diligence in regulated sectors includes assessment of compliance history, regulatory correspondence, and any ongoing or anticipated regulatory proceedings.

Retail and hospitality acquisitions require scrutiny of lease arrangements, employee contracts (including TUPE obligations), seasonal revenue patterns, and customer review histories that reveal quality or service issues the seller may prefer not to highlight.