How to Find Off-Market Businesses to Buy (the Public-Records Method)

If you're running a search, self-funded or otherwise, you already know the problem. The deals you can see are the deals everyone can see. You open BizBuySell, filter by industry and geography, and you're looking at the same listings as every other buyer, picked over and broker-priced, often listed because the easy sales already happened. The good operators aren't in that search box. The 18-year-old HVAC company whose owner is thinking about retirement but hasn't called a broker is off-market, because it isn't for sale yet.

That is the gap this guide is about. Below is a fair walk through the five ways searchers actually find off-market businesses, then a step-by-step look at the one method most guides skip: building a target list from public records before you pick up the phone. It's the method Scouly is built on. You can also do it by hand, for free, with nothing but government data, so this guide covers both.

What "off-market" actually means (and why the best SMB deals are)

Plenty of buyers hear "off-market" and picture something distressed. In small business it usually describes a healthy company whose owner hasn't decided to sell yet, or who wants a quiet, relationship-driven process instead of a public auction. Owner age is why the category is so big. The Census Bureau's 2019 Annual Business Survey found that over half of U.S. business owners were age 55 and over. A transition that starts with a 62-year-old owner thinking out loud to his accountant is off-market for months before it is anything else.

Two consequences follow for a buyer:

The five ways searchers find off-market deals

No single channel is "the" answer. Serious searchers run several at once. Here is honest coverage of all five, then a comparison table.

1. Direct outreach

Cold-calling, direct mail, and email to owners who fit your criteria. Highest control, highest effort, and entirely dependent on having a good list, which is where the public-records method (below) earns its keep.

2. Brokers and intermediaries

Brokers and M&A advisors bring you deals that are on-market or about to be. Build relationships with them, but understand what you're getting: deals heading toward a process, seen by other buyers. Marketplaces like BizBuySell sit here too. They're a fine tool for listed deals and a different category from off-market sourcing. The full comparison is at Scouly vs BizBuySell.

3. Network and referrals

Accountants, lawyers, bankers, and other owners are some of the best sources of "I know someone who might sell." Slow to build. High-trust once it exists.

4. Communities

Searchfunder and ETA-focused Slack and Discord groups are where searchers share deal flow and the occasional off-market lead. Worth being in as a supplement to your own sourcing.

5. Public-record sourcing

Using government and registry data to identify operators that fit your thesis before they're listed and before you talk to anyone. Most guides mention it in one sentence. It deserves the rest of this article, because it's the one method that lets you build proprietary deal flow at scale on a searcher's budget.

Side by side

MethodCostTime to first owner conversationProprietary or shared
Direct outreachPostage, phone time, list buildingDays to weeks once you have a listProprietary if your list is
Brokers and intermediariesFree to you (seller pays), but a premium is priced inWeeks, when a mandate matchesShared with every buyer the broker knows
Network and referralsCoffee and timeMonths to years to buildProprietary, low volume
CommunitiesFree or a membership feeUnpredictableShared with the whole group
Public-record sourcingFree datasets, or $35/month on Scouly's Operator planDays to build the list, then the same as direct outreachProprietary

The public-records method, step by step

A real operating business leaves a public-record footprint. Read those records like an analyst and you can assemble a ranked target list: operators old enough to be succession-ripe, with evidence of real revenue, in fragmented markets no consolidator has locked up. You can do every step yourself. Where a signal maps to how Scouly scores a target, it's noted.

Step 1. Registry longevity: find the succession-ripe operators

Every state's business registry (usually the Secretary of State) publishes company formation dates. A business operating for 15, 20, or 30 years is far more likely to have an owner approaching a transition, and far more likely to be a durable company than a recent startup. Pull formation dates for your vertical and metro and filter for longevity. How to actually run those lookups state by state is in the state business registry lookup guide. (In Scouly, this is the longevity signal, one of the three scored inputs.)

Step 2. SBA 7(a) and 504 loan data: confirm real, bank-underwritten revenue

The highest-signal public dataset most searchers never touch. The SBA publishes 7(a) and 504 loan disclosure data showing which businesses borrowed, how much, and when. A business a bank underwrote for an SBA loan has had its financials scrutinized by a lender, which is strong third-party evidence the company is real and generating cash. The data is free and public on data.sba.gov. Cross-reference SBA borrowers in your vertical and metro against your longevity list. (In Scouly, this is the sba_loan signal, also scored.)

Full guide: SBA loan data as an acquisition signal.

A note on honesty. SBA loan data tells you a business borrowed and was underwritten. It does not tell you the company's EBITDA or current profitability. Treat it as evidence of a real operating business worth a conversation. Profitability gets verified in diligence, never inferred from a loan record.

Step 3. PPP payroll data: estimate scale (and label it an estimate)

Paycheck Protection Program loan data, also public, includes loan amounts and reported jobs figures that let you roughly gauge payroll size and headcount band. Useful for sizing, but it is an estimate, and the data is several years old. Use it to sort "probably a 5-person shop" from "probably a 40-person operation." Don't use it to state a company's exact size. (In Scouly, PPP is a payroll_snapshot evidence signal. It informs the picture but is deliberately not scored, precisely because it's an estimate.)

Full guide: Using PPP loan data to estimate payroll.

Step 4. Form 5500 filings: corroborate headcount on larger targets

Businesses that sponsor employee benefit plans (typically larger ones) file Form 5500 with the Department of Labor, and those filings are public through EFAST and include participant counts. For a bigger target, a 5500 corroborates employee count. Most small targets won't have one, so treat its absence as neutral. (In Scouly, this is the headcount evidence signal, evidence-only and unscored.)

Full guide: Form 5500 filings in business acquisition.

Step 5. Market fragmentation: pick the right market as well as the right company

Even a great target sits inside a market. Roll-up math works in a fragmented market: many small independent owners, no dominant consolidator, several candidates you could buy and no single player setting the price. Using the same SBA and registry data, look at how many independent operators exist in a vertical and metro. Dozens of small, separately-owned, SBA-borrowing operators is a more workable hunting ground than a market already consolidated by a regional chain. (In Scouly, this is the fragmentation signal, the third scored input.)

Full guide: Market fragmentation and roll-up sourcing.

Turning a list into a pipeline

A target list is not deal flow. The work is converting it:

  1. Write a thesis. Define what you're looking for: vertical, size band, geography, owner profile, the economics you need. A clear thesis turns a spreadsheet of companies into a ranked shortlist. There's a worked template in how to write an acquisition thesis.
  2. Rank targets against it. Score each operator on the signals above. The ones old enough, with SBA-confirmed revenue, in a fragmented market rise to the top.
  3. Sequence outreach before a listing exists. Start owner conversations on your top targets. The advantage of off-market sourcing is timing. You're talking to an owner before they've decided to run a process instead of bidding against five buyers after. The letters, emails, and sequencing that actually get replies are covered in the owner outreach guide.

Scouly's Thesis builder does this ranking step for you against the public-record signals above. The free Explorer tier lets you browse anonymized operators and unlock 10 full profiles at no cost. The manual version, a spreadsheet plus the government datasets named above, works too. The method matters more than the tool.

One boundary worth stating plainly: a sourcing tool's job ends at the target list and the ranking. Scouly never contacts owners on your behalf. The conversation is yours to start, and should be. Sourcing improves the odds and ordering of who you talk to. It shouldn't automate the relationship.

A worked example (the shape of it)

Say your thesis is HVAC and plumbing in the Dallas-Fort Worth metro. Run the five steps in order. Longevity (15+ years). SBA 7(a)/504 borrowers for revenue evidence. PPP for a rough headcount band, labeled as the estimate it is. Fragmentation (many owners, no regional consolidator). You end up with a ranked list of long-tenured, revenue-evidenced, succession-plausible operators that aren't listed anywhere. That is the list you start calling.

If you'd rather not assemble that by hand, that exact cut is what Scouly's market pages surface. Either way the output is the same: a proprietary, ranked list, ready for outreach.

Funeral homes are worth a look if you want a vertical that almost never lists publicly. The state cuts are at Rhode Island, Utah, South Dakota, New Mexico and New Hampshire.

A word on what this method can and can't do

Public-record sourcing improves your odds and ordering. It does not guarantee deal flow, and it has real limits worth knowing:

Within those limits, the public-records method is the most scalable way for a searcher to build proprietary deal flow without an enterprise budget. It's also the part of sourcing most buyers leave on the table.

Vertical playbooks

The method above is general. The signals read differently in each industry, and every vertical Scouly covers has a dedicated guide specializing the method:

UK buyer? The register-based version of this method is in the Companies House sourcing guide.

Frequently asked questions

What does "off-market" mean for a business acquisition? An off-market business is one that isn't publicly listed for sale. For small businesses it usually means a healthy company whose owner hasn't decided to sell yet, or who wants a private, relationship-driven sale instead of a public listing. The usual driver is owner age and succession. Distress is the exception. These transitions tend to start as a quiet conversation months before any broker is involved.

Can I find off-market businesses to buy for free? Yes. The core datasets are all public and free: SBA 7(a)/504 loan data, PPP loan data, Form 5500 filings from the Department of Labor, and every state's business registry. Cross-referencing them by hand is exactly the public-records method above. Scouly automates the cross-referencing and ranking, and the free Explorer tier includes 10 profile unlocks, but the underlying data is open to anyone.

Is this different from BizBuySell? Yes, it's a different category. Marketplaces like BizBuySell show businesses that are already listed for sale, which every other buyer also sees. The public-records method finds operators that aren't listed at all. Marketplaces suit on-market processes where you're comfortable bidding against other buyers. Public-record sourcing builds proprietary deal flow before a listing exists, so you're the first conversation the owner has.

Does SBA loan data tell me how profitable a business is? No. It confirms a business borrowed and was underwritten by a bank, which is strong evidence it's a real company with real revenue. It does not reveal EBITDA, margins, or current profitability. Treat a loan record as a reason to start a conversation, then verify the financials in diligence with tax returns and bank statements from the owner.

How old is PPP data, and can I still use it? The program ended on May 31, 2021, so the payroll and jobs figures in the public file are five years stale or worse. That still makes it useful for sorting a 5-person shop from a 40-person operation. Treat every figure as an estimate of size band, and confirm current headcount with the owner or a Form 5500 filing where one exists.

How many businesses does the public-records method cover? Scouly tracks 173,769 companies across 7 verticals (HVAC and plumbing, dental, manufacturing, landscaping, auto repair, funeral homes, veterinary) built from SBA 7(a)/504 loan files, PPP data, Form 5500, state registries, UK Companies House and OpenStreetMap establishment density. Doing it by hand, coverage depends on how many datasets you cross-reference and how many states you pull.

Sources


Ready to build a target list without the spreadsheet? Build your thesis, free, and see off-market operators in your market on Scouly's market pages.

By Nishkal Dachepelly, founder of Scouly. . .