Running financial due diligence on a retail acquisition target

A generic M&A checklist (revenue quality, working capitalworking capitalWorking capital is the difference between a company's current assets and current liabilities, measuring short-term liquidity and the funds available to run daily operations.View full definition →, debt schedule) misses all four. A retail-specific DD process has to test them explicitly.

Red flag 1: lease liabilities

Since ASC 842 (US GAAP lease accounting standard, effective for most companies since 2019) and IFRS 16 (the equivalent international standard, effective 2019), operating leases must appear on the balance sheet as a "right-of-use asset" and a corresponding lease liability. This closed the old loophole where retailers kept billions in store leases off-balance-sheet.

But DD still needs to go deeper than the balance sheet number:

• Lease term vs. store performance: A 10-year lease on a declining-sales location is a liability the buyer inherits, not an asset.
• Renewal options and escalators: Many US retail leases include annual rent escalators (commonly 2 to 4%, as an estimate) that compound over a decade.
• Change-of-control clauses: Some landlords can terminate or renegotiate leases when ownership changes. This is critical in a buyout and often missed.
• Percentage rent: Common in shopping malls, where rent scales with store sales, meaning a rent bill can rise even without a lease renewal.

Worked example: Target has 140 stores, average annual rent $220,000, average remaining term 6 years, no early termination rights.

Total remaining fixed lease liability ≈ 140 × $220,000 × 6 = $184.8 million.

If 20 of those stores are loss-making and locked in for the full term, that's a genuine liability a buyer should price into the deal, not just a note in the appendix.

Red flag 2: supplier concentration

Retail margins depend on supply chain terms. DD should quantify:

• % of cost of goods sold (COGS) from top 3 suppliers. Above 30 to 40% (a common informal threshold used by DD teams) signals pricing power risk.
• Payment terms drift. If days payable outstanding (DPO) has been quietly extended to prop up cash flow, that's a working capitalworking capitalWorking capital is the difference between a company's current assets and current liabilities, measuring short-term liquidity and the funds available to run daily operations.View full definition → risk that reverses post-close.
• Exclusive or single-source contracts. A private-label supplier relationship without a backup manufacturer is a single point of failure.

A useful public reference for benchmarking supply chain and working capitalworking capitalWorking capital is the difference between a company's current assets and current liabilities, measuring short-term liquidity and the funds available to run daily operations.View full definition → norms is CFI's guide to working capital metrics, which is free and retailer-relevant.

Red flag 3: chargeback and payment exposure

Retailers processing card payments operate under rules set by the card networks (Visa, Mastercard) and, in the US, oversight touching the Durbin Amendment (part of the Dodd-Frank Act, which regulates debit card interchange fees) and PCI DSS (Payment Card Industry Data Security Standard, a private-sector security requirement for handling card data, not a government law but contractually mandatory).

Chargebacks (customer-initiated payment reversals, often for fraud or disputed transactions) matter in DD because:

• High chargeback ratios (commonly a red flag above 1% of transaction volume, per card network guidelines) can trigger network fines or processor account termination.
• E-commerce and BNPL (buy-now-pay-later) heavy retailers carry higher chargeback exposure than in-store-only chains.
• A pending processor dispute is a contingent liability that should be escrowed or price-adjusted, not ignored.

Check to run: pull 24 months of chargeback data by channel, and confirm no processor has issued a warning notice or reserve requirement. A processor holding a rolling reserve (withholding a percentage of sales pending dispute resolution) is a real cash flow drag that reduces the target's usable working capitalworking capitalWorking capital is the difference between a company's current assets and current liabilities, measuring short-term liquidity and the funds available to run daily operations.View full definition →.

Red flag 4: regulatory fines and compliance exposure

Retail regulation spans several bodies depending on geography:

• FTC (Federal Trade Commission) in the US: enforces advertising, pricing, and data privacy rules.
• CFPB (Consumer Financial Protection Bureau) in the US: relevant if the target offers store credit, financing, or BNPL products.
• CMA (Competition and Markets Authority) in the UK and European Commission DG COMP in the EU: enforce competition law and consumer protection, including the EU's Unfair Commercial Practices Directive.
• GDPR (General Data Protection Regulation) in the EU/UK: fines for mishandled customer loyaltycustomer loyaltyYour customers' propensity to repeatedly purchase from you and resist competitive offers, driven by satisfaction, habit, trust, and switching costs.View full definition → or payment data can reachreachThe number of unique people exposed to your message in a given period. Unlike impressions, reach counts each person once, no matter how often they see it.View full definition → up to 4% of global annual turnover.

DD should request:

1. All regulatory correspondence and consent decrees from the past 5 years.

2. Any pending class actions (common in US retail around labor classification or accessibility, e.g. ADA, Americans with Disabilities Act, website compliance suits).

3. Data breach history and associated notification costs, since breach remediation in the US commonly runs into millions once notification, credit monitoring, and legal costs are included (estimate, varies widely by breach size).

Unresolved fines or open investigations should be treated as a holdback (a portion of purchase price withheld in escrow) rather than assumed away.

Building the DD checklist

A workable retail financial DD checklist condenses to five modules:

| Module | Core Question | Typical Data Requested |

|---|---|---|

| Lease liability | What are total fixed and contingent rent obligations? | Lease schedule, escalators, change-of-control clauses |

| Supplier concentration | How dependent is COGS on few vendors? | Top 10 supplier list, contract terms, DPO trend |

| Payment/chargeback | What is contingent processor liability? | 24-month chargeback data, processor agreements, reserve balances |

| Regulatory exposure | What fines or suits are open or probable? | Correspondence with regulators, litigation log, breach history |

| Working capitalWorking capitalWorking capital is the difference between a company's current assets and current liabilities, measuring short-term liquidity and the funds available to run daily operations.View full definition → quality | Is cash flow real or manufactured pre-sale? | Inventory aging, DPO/DSO trend, return reserves |

Each red flag should mapmapUsing software to automate repetitive marketing tasks and campaigns, enabling personalisation at scale across channels like email, web, and social.View full definition → to a specific price or structure adjustment: a purchase price reduction, an escrow holdback, a warranty in the sale agreement, or a walk-away condition.

Key Takeaways

• Lease liabilities under ASC 842/IFRS 16 are now on-balance-sheet, but DD must still stress-test store-level performance against remaining lease term and escalators, not just the headline number.
• Supplier concentration above roughly 30 to 40% of COGS is a common informal threshold that should trigger contract review and continuity planning.
• Chargeback ratios and processor reserve holds are real, quantifiable liabilities: request 24 months of data by channel before signing.
• Open regulatory investigations (FTC, CFPB, CMA, GDPR-related) should convert into escrow holdbacks or price adjustments, never be waved through as "pending."
• Every red flag identified in DD should tie to a concrete deal mechanic: price cut, holdback, warranty, or walk-away clause, not just a footnote in the report.