Customer concentration risk: what to do when one client pays most of the bills

Concentration is a dependency, not automatically a defect

A large customer can be one of the best assets in a small company. It may provide predictable volume, low acquisition cost, operational learning and a reference that opens a market. The risk appears when the company cannot absorb a change in that relationship. Customer concentration should therefore be analyzed as dependency rather than judged from one revenue percentage. Ask how much revenue, contribution, cash collection and specialized capacity depend on the client, how quickly that demand could be replaced, and whether the contract gives either side meaningful notice before volume changes.

This is why a famous percentage should not become a universal red line. IFRS 8 requires entities within its scope to disclose information when revenue from a single external customer reaches 10% or more of total revenue. That is an accounting disclosure threshold for relevant reporting entities, not a rule that a small business becomes unsafe at 10%. A private founder-led firm may tolerate a much higher share under a long, well-protected contract; another may be vulnerable at a lower share if margins are thin, payment is slow and the customer controls critical intellectual property or staff allocation.

Measure four kinds of concentration

Begin with revenue share, but add gross contribution share. A customer generating 40% of revenue might generate 60% of contribution if it is unusually profitable, making the economic dependency larger than sales suggest. Then measure accounts-receivable concentration: if most unpaid invoices are owed by one customer, a payment delay can create liquidity stress even when annual revenue is diversified. Finally, measure capacity concentration: the percentage of team time, equipment or specialized knowledge that is dedicated to the account and cannot be reassigned quickly.

A fifth lens is pipeline replacement. Estimate how many months of qualified new business would be needed to replace the client’s lost contribution, not merely its revenue. If the company would need ten ordinary clients to replace one anchor account, the sales system may not have enough throughput to respond after a termination. Track these measures monthly or quarterly using rolling periods suited to the business. A seasonal business should not panic because one customer dominates a quiet month; the denominator must reflect normal trading patterns and contract seasonality.

Inspect the contract and relationship before the percentage

Two customers with the same revenue share can create different risk. Review termination rights, notice periods, committed minimums, renewal mechanics, exclusivity, price-adjustment terms, intellectual-property ownership, data access, change-control rules and payment timing with appropriate legal advice. A 50% client with a one-year committed minimum and 90 days’ notice is not economically identical to a 50% client buying month to month with no forecast. Contract protection does not eliminate risk—customers can encounter financial distress or disputes—but it affects the time available to react.

Operational signals matter too. Is the relationship held by one executive? Are procurement and finance contacts known? Has payment timing deteriorated? Are forecasts repeatedly revised down? Is the customer consolidating suppliers or undergoing ownership changes? Keep a small account-risk register with observable indicators rather than relying on sentiment. Do not invent probabilities where there is no evidence; classify conditions such as stable, watch and contingency with written reasons. The aim is earlier preparation, not pretending management can calculate the exact chance of losing a customer.

Scenario table: test the loss before it happens

Use a simple downside table built from the company’s actual monthly economics. The numbers below are illustrative for a firm with $100,000 monthly revenue, $65,000 of contribution before fixed overhead, $50,000 of fixed operating cash costs and a largest client producing 55% of revenue and $38,000 of contribution. The table is not a benchmark; it demonstrates how to translate a concentration percentage into actions and runway.

| Scenario | Largest-client revenue | Monthly contribution after change | Contribution less $50k fixed cost | Immediate implication | |---|---:|---:|---:|---| | Base | $55,000 | $65,000 | +$15,000 | Normal operations | | 25% volume cut | $41,250 | about $55,500 | +$5,500 | Freeze discretionary expansion | | 50% volume cut | $27,500 | about $46,000 | -$4,000 | Activate cost and sales contingency | | Full loss | $0 | about $27,000 | -$23,000 | Runway and restructuring become urgent |

The contribution figures assume the client’s $38,000 contribution changes approximately in proportion to volume while other contribution remains constant. Real costs may be sticky, so a full loss could be worse if dedicated labor cannot be reduced or redeployed immediately. Rebuild the table with actual contribution, cash on hand, notice period, receivables and severance or contract costs where relevant. The useful output is not the red color of a risk score; it is the lead time between a plausible revenue shock and the point at which management would need to cut costs, draw finance or replace demand.

Decide what level is actually tolerable

Set an internal risk appetite using loss capacity rather than copying a generic threshold. A company with twelve months of liquidity, a flexible contractor base, strong pipeline and a multi-year anchor contract can tolerate more concentration than a leveraged business with two weeks of cash and fixed staffing. Define triggers for management review: perhaps a material rise in contribution share, a shortening notice period, overdue receivables, or pipeline coverage falling below a chosen level. The exact numbers are company decisions and should be documented as such.

Financial institutions use formal concentration monitoring because correlated counterparty exposures can magnify losses. FDIC supervisory guidance is addressed to banks and should not be imported as a compliance requirement for an ordinary service company, but the underlying discipline is useful: identify exposures, aggregate them, set limits appropriate to risk and stress adverse scenarios. For a small business, that can be a monthly one-page dashboard. The discipline matters more than sophistication. If management cannot state the cash impact of losing its largest client, the concentration discussion is still descriptive rather than actionable.

Diversify in stages instead of attacking the anchor account

Stage one is defensive: protect the existing relationship and remove avoidable single points of failure. Improve service quality, document the account, build multiple contacts, settle contract ambiguities and keep receivables current. Stage two is capacity-aware acquisition. Create an offer for adjacent customers that uses existing capabilities without immediately requiring a second full organization. Aim first to reduce the largest customer’s percentage through profitable growth elsewhere, not by intentionally shrinking a healthy account.

Stage three is portfolio construction. Add customers with different renewal dates, sectors, geographies or demand drivers where that diversification is operationally sensible. Do not chase random industries merely to make a pie chart look balanced. Every new segment has acquisition cost, learning cost and delivery complexity. OECD reporting on SME finance continues to highlight the financing constraints smaller firms can face; diversification that burns cash rapidly can create a different risk. Sequence sales investment against available working capital and delivery capacity, especially when new customers pay later than the anchor client.

Build replacement capacity before you need it

A concentration plan needs a sales engine capable of replacing contribution. Calculate how many qualified opportunities, proposals and wins are required to replace 25%, 50% or 100% of the anchor account under historical conversion rates. If an ordinary new customer contributes $4,000 per month, replacing $38,000 of client contribution requires roughly ten such customers before allowing for churn and acquisition costs. That arithmetic may reveal that “find more customers” is not a credible emergency plan. The pipeline must be built while the large relationship is still healthy.

At the same time, make delivery capacity portable. Cross-train staff, document customer-specific processes, use reusable components and avoid technical architecture that cannot serve another account without rebuilding. When specialists are dedicated to the anchor customer, identify which skills are transferable and what retraining would be needed after a volume reduction. This is risk reduction even if the customer never leaves because it increases staffing flexibility. It also improves negotiation: the company is less likely to accept uneconomic terms simply because it has no alternative use for the team.

Use triggers, not fear, to manage the relationship

Create three or four management states. In normal state, monitor concentration and keep diversification work moving. In watch state, triggered by evidence such as repeated volume cuts or overdue payments, increase executive contact, slow discretionary commitments and accelerate pipeline activity. In contingency state, update cash forecasts weekly, freeze selected hiring or capital spending, and prepare redeployment. In loss state, execute the pre-agreed plan rather than inventing one under pressure. The trigger definitions should fit the company and be reviewed with finance, legal and account leadership.

Customer concentration risk small business analysis is useful when it preserves nuance. A major client is not a problem merely because it is major; it is a risk when the company lacks time, cash, contractual protection, portable capacity or alternative demand to survive a change. Measure the dependency across revenue, contribution, receivables and capacity, stress the loss with real numbers, and diversify through profitable additions rather than symbolic account-count targets. The objective is resilience without undermining a relationship that may still be strategically valuable. Review the indicators together, because one can offset another: a high revenue share with strong contractual notice and deep liquidity may be manageable, while a lower share paired with overdue receivables and non-transferable staff can be more urgent. The point of the dashboard is to direct attention to the mechanism of failure and the available response time, not to manufacture a single score that looks precise.