Traffic Risk Is the Hidden Killer in Digital Asset Deals — Here’s How I Underwrite It

Traffic risk is the number one thing that separates a good digital asset deal from an expensive mistake. I have reviewed hundreds of acquisition targets over the years, and I can tell you with confidence: most buyers spend 80% of their due diligence time on revenue and almost none on understanding where that revenue actually comes from.

That is backwards.

Revenue multiples matter. But a content site earning $4,000 per month at a 35x multiple is worth every dollar of that $140,000 — or it is worth exactly zero — depending on one thing: how stable and diversified that traffic is.

What Traffic Risk Actually Means

Traffic risk is the probability that your acquisition’s visitor flow drops significantly after you own it. It is not the same as revenue risk, though the two are tightly linked. You can have a site with 40,000 monthly sessions, solid RPMs, and clean advertiser relationships — and still lose 70% of revenue in 90 days if a Google core update decides your content is no longer authoritative enough to rank.

In my underwriting process, I break traffic risk into four categories: source concentration, keyword concentration, brand dependency, and recency of traffic pattern.

Source Concentration

If more than 60% of a site’s traffic comes from a single channel, that is a concentration risk. Organic search is the most common single channel for content sites, and it is also the most volatile. Google has run multiple broad core updates in the past two years alone, and sites that looked pristine before an update have come out the other side down 40% or more. I have seen it happen to properties that were publishing quality content. It is not always about quality — it is about Google’s constantly shifting understanding of topical authority, helpful content signals, and E-E-A-T.

Social-first sites carry their own risk. A Facebook-dependent traffic model looked defensible in 2018. The organic reach collapse of the past five years has gutted entire categories of content businesses. Never buy a site where the channel itself is in secular decline.

Keyword Concentration

This one is subtler and most brokers will not flag it. Pull the top 20 keywords driving organic traffic in Ahrefs or Semrush. What percentage of total organic traffic do they represent? I have evaluated sites where the top three keywords alone drove 55% of all search traffic. That is not a content business — that is a single-keyword bet. One featured snippet lost, one competitor who outranks you on a head term, and the revenue curve looks very different.

What I want to see: a long-tail distribution where no single keyword represents more than 3–4% of total organic traffic, and the top 20 keywords combined represent no more than 30%. That is a resilient content portfolio.

Brand Dependency

Some traffic is sticky because people are searching for the site by name. That is good — it signals genuine audience. But when a seller’s Google Search Console shows a meaningful percentage of branded queries, ask what happens to those branded searches after a domain change or ownership transition. If the brand is the seller, that goodwill does not transfer to you.

The FTC has guidelines on deceptive business practices that are worth understanding here — ftc.gov — because misrepresented brand equity in an asset sale can create post-close liability that buyers never anticipate.

Recency of the Traffic Pattern

Here is what most due diligence guides will not tell you: a 24-month traffic trend that looks stable is not the same as a traffic trend that has been tested. The Google Helpful Content update era has introduced volatility that was not present in prior years. When I evaluate a trailing 24-month chart, I specifically want to see whether that chart includes at least two major Google update cycles. If the seller’s revenue history only goes back 14 months, you are missing data from some of the most disruptive algorithm periods in recent history.

Ask for Google Search Console data going back to the account’s creation, not just 12–16 months. Sellers who resist this request are telling you something.

How I Build a Traffic Score

Before I make any offer on a content or affiliate site, I run a simple traffic scorecard:

  • Source diversification (what percentage is non-search?)
  • Keyword Herfindahl — concentration index across top 100 keywords
  • Update exposure — did the site experience any major volatility in the last 24 months?
  • Branded vs. non-branded split in GSC
  • Referring domain growth or decline trend (are other sites still linking to this property?)

Properties that score well on all five get a full multiple. Properties that score poorly on even two of these get a discount — or pass from me entirely.

The business you are acquiring is not the revenue it earns today. It is the infrastructure that produces that revenue. Traffic is that infrastructure. Underwrite it accordingly.

Looking for more on digital asset due diligence? Read our piece on how to evaluate revenue multiples before you buy for the financial side of the same equation.