5 Red Flags in Due Diligence That CIMs Won’t Tell You
Every red flag in this article comes from a real deal. Names and details are changed, but the patterns are exact. If you're doing CIM analysis and think the numbers look clean, read this first.
Red Flag #1: The Cash Position Snapshot
What the CIM shows: "Cash and equivalents: $440,000 as of fiscal year end."
What the bank statements reveal: The operating account hit negative $65,000 in June. The $440K figure was a single-day balance on September 30 — the last day of the fiscal year — after a customer paid a large invoice that had been outstanding for 90 days.
Why it matters: A point-in-time cash balance tells you nothing about cash flow patterns. The business had six months of negative or near-zero cash, suggesting chronic working capital strain. If you're financing this deal, the bank wants to know the range, not the snapshot.
Red Flag #2: The Hidden Holding Company
What the CIM shows: Three owners with total compensation of $290,000.
What the bank statements reveal: Monthly transfers of $5,271 to a holding company controlled by the majority owner. That's $63,252 per year in distributions not disclosed in the CIM's owner compensation table. Total extraction: $353,000+, not $290,000.
Why it matters: This directly affects SDE calculation. Higher owner extraction means higher add-backs, which means higher SDE, which means the multiple is actually lower than it appears. Or it means the owners are taking more than the business can sustainably support.
Red Flag #3: The "0% Interest" Equipment Note
What the CIM shows: "Equipment financing: $450,000 balance, non-interest bearing, matures December 2022."
What the bank statements reveal: Monthly payments that don't match a zero-interest amortization schedule. The reconciliation shows interest payments on this facility at an estimated 5-6% rate.
Why it matters: If you assumed 0% interest in your DSCR calculation, your debt service is understated. The actual annual cost of this debt is $27K-$32K higher than the CIM implies. In a deal where bankability is marginal, this could flip the DSCR below the 1.25× SBA threshold.
Red Flag #4: Selective Year Presentation
What the CIM shows: Three years of financials — FY2018, FY2019, FY2020 — showing consistent growth.
What's missing: FY2021 data. The CIM was prepared in late 2021 but only presents through FY2020. Why? Because FY2021 had a COVID wage subsidy of $22K that inflated margins, and the unadjusted EBITDA margin dropped to 22.9% from the CIM's claimed 29.2%.
Why it matters: Selective year presentation is the most common form of CIM manipulation. Always ask for the most recent 12 months, even if they're unaudited. The years the broker didn't include are usually the years that tell the real story.
Red Flag #5: Related Party Obligations
What the CIM shows: Total debt of $716,000.
What the bank statements and corporate filings reveal: An additional $163,000 in related party advances from the holding company, $50,000 in capital leases not on the debt schedule, and a $689,000 machinery purchase commitment with deposit payments already underway.
Why it matters: Total obligations are $883,000+ — 23% more than the CIM disclosed. Related party transactions are the number one place where debt hides. The holding company, the owner's other businesses, family trusts — all of these can create obligations that the CIM conveniently omits.
How to Protect Yourself
The common thread in all five red flags: the CIM was technically accurate but structurally misleading. No single number was fabricated. But the combination of point-in-time snapshots, selective disclosure, and omitted obligations painted a picture that didn't match reality.
The solution is systematic cross-referencing. Every claim in the CIM should be verified against source documents. Bank statements are the single most powerful verification tool — they can't be retroactively edited, and they show every dollar that moved.
The broker can argue with your opinion. They can't argue with their own bank statements.