SHORT ANSWER
Because the processor decided the account carries risk it did not price in, and its terms let it hold money against that risk. Stripe, PayPal, and Square all reserve the right to delay payouts, hold a reserve, or close an account for a restricted category, with or without disputes. The hold exists to cover chargebacks that can still arrive for months after the last sale.
This material is general educational information as of the “last reviewed” date. It is not legal advice and may not reflect later developments or facts specific to your business. Links are provided so readers can inspect the primary or official sources.
01 / THREE DIFFERENT THINGS
A hold, a reserve, and a closure are not the same event
Merchants say “frozen” for all three, but the providers’ own terms treat them separately, and the difference decides what you can do next.
A hold delays the payout of specific transactions. PayPal’s User Agreement describes “Holds based on PayPal’s risk decisions,” placed when PayPal believes “there may be a high level of risk associated with you, your PayPal account, or your transactions.” Stripe’s Services Terms say Stripe “may delay or withhold paying out a Transaction amount” if it “reasonably believes that a Dispute is likely to occur.”
A reserve is money kept back on an ongoing basis. Square’s Payment Terms, section 14, put it plainly: “If some aspect of your business is especially risky, we may need to withhold funds or require that you set aside funds in a reserve to protect against losses.” Stripe defines a Reserve as “collateral funds which Stripe holds and controls to satisfy any liabilities or potential liabilities.”
A closure ends the relationship. Square’s General Terms state that Square “can terminate or deny you access to our services at any time, for any reason.” Stripe’s support page on closures says only that a business that “does not comply with Stripe rules” and cannot be supported “will be notified via email.”
None of this is law. Each provider wrote its own rules, applies them at its own discretion, and can change them. Quotes here were read on September 3, 2026 and may have moved since.
02 / WHY IT HAPPENS WITH A CLEAN RECORD
A restricted category is a reason on its own
Merchants often protest that they have never had a chargeback. The terms do not require one. Stripe’s Services Agreement prohibits using the Services “to conduct a Prohibited or Restricted Business” unless Stripe “has pre-approved” it in writing, and its restricted-business list is applied at the category level. PayPal’s User Agreement lists “Payments for higher-risk categories” among the situations where it holds payments, and separately allows holding a balance where PayPal needs “to protect against the risk of liability” or where the Acceptable Use Policy was violated.
Square’s Payment Terms open the unsupported-industries section by saying Square “can’t process payments for certain types of businesses” because of “limitations from the card brands, our partners, or the law.” The trigger is what the business sells and how it presents it, which a provider can learn from the storefront at any point after onboarding.
That is why a freeze often arrives after months of normal processing. A periodic review, a card-network inquiry, or a customer complaint prompts someone to look at the site, and the site reads as a category the provider does not support.
03 / HOW LONG
What each provider’s terms actually say about duration
Only PayPal publishes numbers. Its User Agreement says risk-based holds “generally remain in place for up to 21 days from the date the payment was received.” Where PayPal limits an account, it may hold the balance “for up to 180 days if reasonably needed to protect against the risk of liability or if you have violated our Acceptable Use Policy,” and longer under court orders or regulatory requirements. Its rolling-reserve example describes “10% and held for a 90-day rolling period.”
Stripe’s Services Terms state no fixed period. Stripe releases Reserve funds “only if, and to the extent that, Stripe is satisfied that the relevant risk exposure has been mitigated.” Stripe’s support page on closed accounts adds that the account owner “will still be responsible for any refunds that are issued or any disputes that arise” after closure. We did not find a published number of days in the documents cited here, so any figure you hear for Stripe is from experience or negotiation, not the terms.
Square’s Payment Terms describe the Reserve as securing “the performance of your obligations” and give Square the right to draw on it, but state no release schedule in the section we read.
The reason holds outlast the last sale is the dispute window. Cardholders can dispute a charge for months after purchase, and the provider is liable to the card network for those disputes whether or not it still has your money. A reserve is the provider keeping enough of your money to cover that tail.
04 / DURING THE HOLD
What a merchant can and cannot do while funds are held
You can respond. Every provider’s notice names a channel and usually asks for something: documents, business details, an explanation of what you sell. Answer completely and on time. PayPal notes it may release a hold earlier, for example after shipment tracking is uploaded, but “any earlier release is at our sole discretion.”
You can keep records. Export transaction history, save the notice, and log every exchange. If the account closes, you still owe refunds and still face disputes, and you will need the records to answer them.
You cannot force a release. The terms give the provider discretion, and the review is theirs. You also cannot open a fresh account with the same provider to route around a closure. Stripe’s agreement prohibits creating an account “on behalf of or for the benefit of a user whose use of the Stripe services was suspended or terminated,” and the other providers have similar rules.
- Read the notice for the exact reason and the exact ask
- Send what was requested, in one complete reply
- Export your transaction and dispute history now
- Keep fulfilling and refunding; open orders do not pause with your payouts
- Do not open a second account with the same provider under another name
05 / WHY SWITCHING ALONE REPEATS THE CYCLE
A new processor sees the same storefront
The next provider’s terms look like the last one’s. Stripe, PayPal, and Square each publish a category list, each reserve the right to review at any time, and each can hold funds against risk. If the storefront still presents as the category they do not support, the review that ends the new account is the same review that ended the old one, only later.
This is reasoning from the published terms, not a statistic. It does mean that the order of operations matters: change what the site says and sells before you apply anywhere, and keep evidence of what changed and when. A provider that sees a storefront with no outcome claims, no bundled injection supplies, and clear buyer controls is reviewing a different business than the one that got frozen.
06 / WHAT TO FIX FIRST
Review the storefront the way a provider’s risk team will
A provider’s review reads the public site. Product names, descriptions, imagery, bundles, testimonials, and linked social accounts all count, and a research-use-only line does not cancel them. The same surfaces FDA cites in its warning letters are the ones a risk analyst screenshots.
- Product names and descriptions that name a health outcome or an approved brand
- Kits, bundles, or cross-sells that supply a route of administration
- Reviews, testimonials, and before-and-after imagery anywhere on the domain
- Blog posts and social accounts the store links to
- Buyer controls at checkout, and whether the policies match what the pages say
QUESTIONS
Related questions
Will I get the held money back?
The terms say reserves are released when the provider is satisfied the risk has passed, and PayPal states outer limits of 21 and 180 days for its holds. Nothing in the documents guarantees release on a date, and RUO Clear cannot promise one either.
I never had a chargeback. Why was I treated as high risk?
Because the category, not your dispute history, triggered the review. Each provider’s terms allow holds and closures for restricted or unsupported business types regardless of performance.
Should I just open an account with a different processor?
Not before changing the storefront. The next provider publishes a similar list and runs a similar review. Applying with the same site tends to reproduce the same result later.
Can RUO Clear get my funds released?
No. RUO Clear helps you document what the storefront says and what you changed. Release decisions belong to the provider that holds the money.
SOURCES
Sources cited
Each source is listed with its class so government authority, agency guidance, enforcement examples, and private policy are never blended into one rule.
Reserve definition and release condition, and the clause allowing Stripe to delay or withhold a payout where a dispute is likely. Read September 3, 2026.
The category list applied at review. Inclusion never predicts a specific merchant's outcome.
States that refunds and disputes remain the account owner's responsibility after closure. Read September 3, 2026.
Risk-based holds up to 21 days, limitation holds up to 180 days, and the rolling-reserve example. Read September 3, 2026.
The policy whose violation the User Agreement cites as a basis for a 180-day hold.
Section 3 on unsupported industries and section 14 on reserves for holding funds. Read September 3, 2026.
Section 12 on termination at any time for any reason, and section 13 on the effect of termination.