Tag Archives: due diligence

Cannabis M&A: Take Care of the Due Diligence Essentials

By Michael G. Lux
No Comments

As the regulated cannabis industry matures, M&A activity is expected to continue accelerating. Whether they are existing licensed businesses looking for acquisition opportunities or new investor groups seeking to enter or expand their positions in the industry, investors should recognize the special due diligence challenges associated with cannabis industry transactions.

Above all, investors should avoid the temptation to omit or short-circuit long-established due diligence practices, mistakenly believing that some of these steps might not be relevant to cannabis and hemp operations. Despite the unique nature of the industry, thorough and professional financial, tax and legal due diligence are essential to a successful acquisition.

Surging M&A activity

Over the past few years, as the cannabis industry matured and the regulatory environment evolved, M&A activity involving cannabis and hemp companies has undergone several cycles of expansion and contraction. Today, the expansion trend clearly has resumed. Although the exact numbers vary from one source to another, virtually all industry observers agree that 2021 saw a strong resurgence in cannabis-related M&A activity, with total transactions numbering in the hundreds and total deal values reaching into billions of dollars. Moreover, most analysts seem to agree that so far, the pace for 2022 is accelerating even more.

Today, many existing cannabis and hemp multistate operating companies are in an acquisitive mood as they look for opportunities to scale up their operations, enter new markets, and vertically integrate. At the same time, the projections for continued industry growth over the next decade have attracted a number of investment funds and private equity groups, which were formed specifically for the purpose of investing in cannabis and hemp businesses.

These two classes of investors often pursue distinctly different approaches to their transactions. Unlike the largely entrepreneurial cannabis industry pioneers now looking to expand, the more institutional investors are accustomed to working with professional advisers to perform financial, tax and legal due diligence as they would for a transaction in any other industry.

Among both groups, however, there is sometimes a tendency to misunderstand some of the transactional risk elements associated with cannabis M&A deals. In many instances, buyers who are generally sensitive to potential legal and regulatory risks will underestimate or overlook other risks they also should examine as part of a more conventional financial and tax due diligence effort.

For example, since much of the value of a licensed cannabis operation is the license itself, investors often rely largely on their own industry understanding and expertise to assess the merits of a proposed acquisition, based primarily on their estimation of the license’s value. This practice provides acquirers with a narrow and incomplete view of the deal’s overall value. More importantly, it also overlooks significant areas of risk.

Because cannabis acquisition targets typically are still quite new and have no consistent earning records, acquirers also sometimes eschew quality of earnings studies and other elements of conventional due diligence that are designed to assess the accuracy of historical earnings and the feasibility of future projections.

Such assumptions and oversights often can derail an otherwise promising transaction prior to closing, causing both the target and the acquirer to incur unnecessary costs and lost opportunities. What’s more, even if the deal is eventually consummated, short-circuiting the normal due diligence processes can expose buyers to significant unanticipated risk down the road.

Recurring issues in cannabis acquisitions

The most widely recognized risks in the industry stem from the conflict between federal law and the laws of various states that have legalized cannabis for medical or adult recreational use. The most prominent of these concerns relates to Section 280E of the Internal Revenue Code (IRC 280E).

Although its use is now legal in many states, cannabis is still classified as a Schedule I substance under the federal Controlled Substances Act. IRC 280E states that any trade or business trafficking in a controlled substance must pay income tax based on its gross income, rather than net income after deductions. As a result, cannabis businesses are not entitled to any of the common expense deductions or tax credits other businesses can claim.

The practical effect of this situation is that cannabis-related businesses – including growers, processors, shippers and retailers – often owe significant federal income tax even if they are not yet profitable. Everyone active in the industry is aware of the issue, of course, and any existing operating company or investment group will undoubtedly factor this risk into its assessment of a proposed acquisition target.

The challenge can be exacerbated, however, by other, less widely discussed factors that also affect many cannabis businesses. These issues further cloud the financial, tax and regulatory risk picture, making thorough and professional due diligence even more critical to a successful acquisition.

Several of these issues merit special attention:

  • Nonstandard accounting and financial reporting practices. As is often the case in relatively young, still-maturing businesses, acquisition targets in the cannabis industry might not have yet developed highly sophisticated accounting operations. It is not uncommon to encounter inadequate accounting department staffing along with financial reporting procedures that do not align with either generally accepted accounting principles or other standard practices. In many instances, company management is still preparing its own financial statements with minimal outside guidance or involvement by objective, third-party professionals. Significant turnover in the management team – and particularly in the chief financial officer position –is also common, as is a general view that accounting is a cost center rather than a value-enhancing part of the management structure.

Such conditions are not unusual in young businesses that are still largely entrepreneurial in spirit and practice. In the cannabis industry, however, this situation is also a reflection of many professional and business services firms’ longstanding reluctance to engage with cannabis operators – a hesitancy that still affects some organizations.

When customary business practices are not applied or are applied inconsistently, acquiring companies or investors should be prepared to devote more time and attention – not less – to conventional financial due diligence. The expertise of professional advisers with direct experience in the industry can be of immense benefit to all parties in this effort.

  • Restructuring events or nonrecurring items in financial statements. Restructuring events and nonrecurring items are relatively common in many new or fast-growing businesses, and they are especially prevalent among cannabis operations. In many instances, such companies have engaged in multiple restructuring events over a short period of time, often consolidating operations, taking on new debt, and incurring various one-time costs that are not directly related to the ongoing operations of the business.

The inclusion of various nonrecurring items within the historical financial statements can make it much more difficult for a buyer or investor to accurately identify and assess proforma operating results, especially in businesses that have not yet generated consistent profits. Here again, applying previous experience in clearing up the noise in the financial statements can help improve both the accuracy and timeliness of the due diligence effort.

  • Run-rate results inconsistent with historical earnings or losses. A company’s run rate – an extraction of current financial information as a predictor of future performance – is a widely used tool for creating performance estimates for companies that have been operating for short periods of time or that have only recently become profitable. In cannabis businesses, however, run-rate estimates sometimes can be unreliable or misleading.

Because it is based only on the most current data, the run rate often does not reflect significant past events that could skew projections or recent changes in the company’s fundamental business operations. Because such occurrences are relatively common in the industry, the results of run-rate calculations can be inconsistent with the target company’s historical record of earnings or losses.

  • Historical tax and structuring risks new owners must assume. Like many other new businesses, cannabis operations often face cash flow and financing challenges, which owners can address through alternative strategies such as debt financing, stock warrants, or preferred equity conversions. Such approaches can give rise to complex tax and financial reporting issues as tax authorities exercise their judgment in interpreting whether these items should be reported as liabilities or equity derivatives. The situation is often complicated further by various nonstandard business practices and the absence of sophisticated accounting capabilities, as noted earlier.

As a consequence, financial statements for many cannabis companies – including a number of publicly listed companies – often contain complex capital structures with numerous types of debt warrants, conversion factors and share ownership options. Although an acquisition would, in theory, clean up these complications, buyers nevertheless must factor in the risk of previous noncompliance that might still be hidden within the organization – a risk that can be identified and quantified only through competent and thorough due diligence.

Not as simple as it seems

On the surface, the fundamentals of the cannabis industry are relatively straightforward, which is one reason it appeals to both operators and investors. For example, participants at every stage of the cannabis business cycle – growing and harvesting, processing and packaging, shipping and distribution, and ultimately marketing and retailing – can readily apply well-established practices from their counterparts in more conventional product lines.

The major exception to this rule, of course, is the area of regulatory compliance, which is still shifting and likely will continue to do so for the foreseeable future. Outside of this obvious and significant exception, however, most other aspects of the industry are relatively predictable and manageable.

When viewed in this light and in light of the continued growth of the industry, it is easy to see why cannabis-related acquisitions are so appealing to existing business operators and outside investors alike. It is also easy to understand why buyers might feel pressure to move quickly to take advantage of promising opportunities in a fast-changing industry.

As attractive as such opportunities might be, however, buyers should take care to avoid shortcuts and resist the urge to sidestep established due diligence procedures that can reveal potential accounting and financial statement complications and the related compliance risks they create. The unique nature of the cannabis industry does not make these practices irrelevant or unnecessary. If anything, it makes professional financial, tax, and legal due diligence more important than ever.


Crowe Disclaimer: Qualified organizations only. Independence and regulatory restrictions may apply. Some firm services may not be available to all clients. Given the continued evolution and inconsistency of various state and federal cannabis-related laws, any company should seek competent legal advice relating to its involvement in the cannabis industry, including when considering a potential public offering as a cannabis-related company.

Cannabis Banking: The Ins, the Outs & the Unknowns

By Tamara L. Kolb, Amy Bean, Caitlin Strelioff
No Comments

As the legal cannabis market expands, banks and nonbank financial institutions (NBFIs) across the United States continue to explore how to safely provide banking and other financial services to cannabis-related businesses (CRBs) and other CRB ecosystem players. At the same time, these organizations are taking into account changes they might need to consider relative to their Bank Secrecy Act ( BSA), anti-money laundering (AML) and related compliance programs. 

Regulatory conundrum

The Controlled Substances Act (CSA) identifies the cannabis plant and all its derivatives as a Schedule 1 controlled substance. Schedule 1 controlled substances have a “high abuse potential with no accepted medical use,” and they cannot be “prescribed, dispensed, or administered.” Because cannabis remains classified as a Schedule 1 controlled substance, the CSA “imposes strict controls on possession, manufacturing, distribution, and dispensing” of cannabis.

Under the Money Laundering Control Act of 1986 (MLCA) and the BSA as amended, covered banks and NBFIs are prohibited from providing financial services to businesses that are engaged in illicit activities. Because federal law prohibits the distribution and sale of cannabis, financial transactions involving CRBs are therefore deemed to be transactions that involve funds derived from illegal activities.

As of Feb. 3, 2022, 18 states, two territories, and the District of Columbia have enacted legislation to regulate cannabis for adult use. Thirty-seven states, the District of Columbia and four territories have approved comprehensive, publicly available medical and cannabis programs. Eleven states allow for the use of low-THC, high-CBD substances for medical reasons in limited situations or as a legal defense.

The growing divide between federal prohibition and state legalization of the cannabis industry creates a precarious position for federally regulated banks and NBFIs with the main concern involving exposure to legal, operational and regulatory risk. The situation begs the question: How might the federal government and regulators pursue and prosecute players in the legal cannabis industry?

The current economic trajectory predicts that retail sales of legal cannabis products in the U.S. will surpass an estimated $41.5 billion annually by 2025, and many banks and NBFIs are eagerly awaiting the federal green light to do business with CRBs without fear of prosecution or legal ramifications.

From 2018 forward, Congress has made several attempts to pass legislation that would protect CRBs when cultivating, distributing, marketing, and selling cannabis products in their state-legalized form. These efforts to declassify cannabis-related activity as a specified unlawful activity have thus far been unsuccessful.

The House passing the MORE Act back in 2020

Passage of the Secure and Fair Enforcement Banking Act of 2021 (SAFE Banking Act) and the Marijuana Opportunity Reinvestment and Expungement Act of 2021 (MORE Act) would enable banks and NBFIs to provide financial services to CRBs. The SAFE Banking Act would provide a safe harbor for banks and NBFIs that provide financial services to CRBs. The MORE Act would deschedule cannabis from the CSA entirely.

Questions to ask

Banks and NBFIs interested in providing financial services to CRBs should ask these questions:

  • Do we adequately understand our risk, and what are the implications for our organization? How should we augment our risk assessment process and our controls?
  • To what extent are we willing to accept the risk of banking CRBs? Do we have the ability to identify CRB customers, and if so, do we have any?
  • How should we advise the board of directors about setting risk appetite?
  • What customer due diligence (CDD) and enhanced due diligence (EDD) will we need to safely continue with existing customers and onboard new ones?
  • How will we monitor for unusual and suspicious activity? What will be the alerting and judgmental criteria?
  • How will our resource needs change so that we stay abreast of new processes and controls?

Risk appetite considerations

In order to determine whether to accept or prohibit CRBs, banks and NBFIs should identify the level of acceptable risk they are willing to take on. Several key components need to be considered, such as:

  • The board of directors’ stance on legal cannabis, given that good governance recommends and regulators expect that the board sets risk appetite
  • Cannabis laws in states within the customer footprint and the impact on customers’ communities
  • Risk profile, customer base, geographic location, products, and services
  • Relationship with regulators and any recent deficiencies or weaknesses in the BSA and associated compliance programs
  • Ability to implement appropriate controls and staffing

 Developing a strategic road map

If the decision is made to bank CRBs, banks and NBFIs should perform an assessment of compliance maturity for existing BSA/AML program processes and controls to identify potential gaps and develop a strategic road map that helps the organization achieve its vision for future state compliance and sustainable operations. 

A well-developed and well-articulated strategic road map visualizes what actions or key outcomes are needed to help organizations achieve their long-term goals. When creating the road map, banks and NBFIs need to demonstrate a keen understanding of their desired strategy, outcomes, markets, and products for onboarding and banking CRB customers. Specifically, banks and NBFIs need to define and explain how desired outcomes and business strategies create risk and exposure.

In addition to a road map, banks and NBFIs should develop and document a detailed risk-based approach that is aligned to the organization’s risk tolerance to determine necessary compliance steps when banking CRB customers.

Specifically, the following activities should be considered when developing a CRB banking program that meets regulatory expectations:

  • Identifying BSA/AML control gaps related to CRB risk identification and mitigation and formulating a plan to address them
  • Updating a board-approved policy framework
  • Updating detailed operating policies and procedures
  • Planning for capacity, developing job descriptions, and onboarding new personnel
  • Training for all three lines of defense, senior management, and the board
  • Developing and documenting a phased or full approach to acceptance of CRB customers
  • Developing and documenting a CRB program oversight policy

CRB risk framework

A three-tiered CRB risk framework first proposed in 2016 has quickly become the cannabis industry standard. The framework has evolved and expanded comprehensively to consider many types of CRBs, and evolving legal systems continue to refine the framework.

This framework is intended to help banks and NBFIs differentiate types of CRBs and their corresponding risks, and it separates CRBs into three tiers and details risks for each tier. The following exhibit summarizes the approach:

Risk framework by tier

Level Risk
Tier 1 Direct
Tier 2 Indirect with substantial revenue from Tier 1
Tier 3 Indirect with incidental revenue from Tier 1

Source: CRB Monitor

Even the most conservative of risk appetites equivalent to outright prohibition is not devoid of significant risk considerations. Residual risk frequently encompasses a large number of indirect connections in the total CRB ecosystem. Common examples are printers, lawyers, accountants, landlords, and even utilities and taxing authorities, and all of these are subject to regulatory scrutiny and, importantly, visibility to law enforcement. Also, policies to prohibit or restrict will be audited and examined for compliance, and exceptions will require explanations.

This panorama necessitates expertise and prudence in identifying and evaluating risks within the many layers of CRBs. For example, consider a bank or NBFI that banks a CRB’s employee or vendor. If a bank fails to properly implement controls that would allow it to identify and mitigate risk associated with banking CRBs, it will be susceptible to severe violations of the BSA, including civil money penalties, criminal penalties, and regulatory enforcement actions. 

Implementing necessary precautions

A well-developed road map should consider and implement the following activities:

  • Understanding the most current state and federal cannabis laws and regulations to ensure the bank or NBFI’s compliance
  • Understanding the local, state, or tribal program to ensure CRB customers are compliant with the program
  • Implementing a CRB risk assessment
  • Implementing executive approval practices for direct CRBs
  • Developing adequate risk ratings (possibly through a risk-based, tiered approach) and corresponding monitoring for CRB customers that includes:
    • Integrating various customer onboarding and AML solutions at both onboarding and periodic levels
    • Scheduling regular reviews to include recurring enhanced due diligence, site visits, and transaction monitoring
    • Monitoring for suspicious activity, including red flags, via open sources for adverse information about the CRB customers and related parties such as beneficial owners
  • Performing adequate CDD and EDD that will validate that the CRB-offered products, services, and programs are compliant with most current state laws and regulations by:
    • Collecting appropriate documentation as evidence of compliance, perhaps including a comprehensive onboarding questionnaire, beneficial ownership information, and contracts for the growing, harvesting, transporting and processing of the product
    • Reviewing applications and supporting documentation used to obtain a legal cannabis state license
    • Understanding the normal and expected activity of the organization’s CRB customers and their product usage
  • Developing adequate training programs and governance and oversight programs to address this customer type by:
    • Updating existing policies and procedures to review inherent risk presented by banking CRB customers
    • Updating annual training for employees
  • Auditing initial program design and periodic operational effectiveness

Moving forward cautiously

The ins, outs, and unknowns of cannabis banking are complex, and they require banks and NBFIs to be extremely vigilant with current policy and aware of new developments. Overall, the idea of creating a cannabis program might seem like a daunting task, but with appropriate guidance and care, organizations can provide services in compliance with laws and regulations.

Crowe disclaimer: Qualified organizations only. Independence and regulatory restrictions may apply. Some firm services may not be available to all clients. Given the continued evolution and inconsistency of various state and federal cannabis-related laws, any company should seek competent legal advice relating to its involvement in the cannabis industry, including when considering a potential public offering as a cannabis-related company.