Why did my fintech account get frozen?

Updated August 18, 2026 · Zion Labs US

Answer

Most restrictions trace to one of four causes: an anti-money-laundering review, a sanctions screening block, a court order or garnishment, or failed identity re-verification. Nobody will tell you which one. Where a suspicious activity report has been filed, 31 U.S.C. 5318(g)(2) and 31 CFR 1020.320(e) bar the institution and its staff from notifying any person involved in the transaction that the transaction was reported, so the silence is a legal requirement rather than poor service. Filing that report does not itself require a freeze. A sanctions block does: property blocked under an OFAC programme must be reported to OFAC within 10 business days and cannot be released without a licence.

Nuances and considerations

  • The report and the restriction are two separate decisions. 31 CFR 1020.320 creates a duty to file and a duty to keep the filing confidential. It contains no instruction to block, freeze or close anything. What gives an institution the right to restrict an account is the account agreement.
  • The filing clock is not the release clock. A bank must file within 30 calendar days of initial detection, and may take up to 60 calendar days where no suspect has been identified. Those deadlines govern the paperwork. Neither rule sets a deadline for restoring access, which is why a hold can outlast the review that prompted it.
  • A sanctions block behaves differently from a compliance hold. Property blocked under an OFAC programme must be reported to OFAC within 10 business days, reported again annually, and cannot be released without an OFAC licence. A hit against a similar name is resolved by verifying identity against the list.
  • With a fintech, the regulated deposit-taking entity is usually a partner bank, named in the deposit agreement rather than in the app. That bank has a primary federal regulator and a complaints channel. The app’s support queue has neither.
  • A disputed payment is a different legal claim from a restricted balance. Where a specific electronic transfer was unauthorised or erroneous, Regulation E gives the institution 10 business days to determine whether an error occurred, extendable to 45 days if it provisionally credits the account, and 90 days instead of 45 for point-of-sale debit card transactions and transfers not initiated within a state. Those timetables attach to the transfer, not to account access.
  • The complaint route has published timings. The CFPB forwards a complaint to the company; companies generally respond in 15 days, and where a response is in progress a final response follows within 60 days.
  • This describes US federal rules, and it is general information rather than legal advice.

What to check when an account is restricted

  1. Which legal entity holds the money, and which regulator supervises it? For most apps that is the partner bank named in the deposit agreement.
  2. Which clause of the account agreement is being relied on to restrict access, and has that been stated in writing?
  3. Is this a hold on the account or a block on specific funds? Sanctions blocks and compliance holds have different release paths.
  4. Was a specific transfer unauthorised or erroneous? That is a separate claim with its own statutory timetable.
  5. Are the dates, names and reference numbers of every contact recorded? A regulator complaint is only as strong as its chronology.

Sources

  1. 31 U.S.C. § 5318(g)(2): Reporting of suspicious transactions, notification prohibited · Legal Information Institute, Cornell Law School Supports: That neither the financial institution nor any director, officer, employee, agent or contractor may notify any person involved in the transaction that the transaction has been reported.
  2. 31 CFR § 1020.320: Reports by banks of suspicious transactions · Legal Information Institute, Cornell Law School Supports: The filing deadline of 30 calendar days after initial detection, extendable to no more than 60 calendar days where no suspect is identified, and the confidentiality rule at paragraph (e) barring disclosure of a report or any information that would reveal its existence. The rule sets a reporting obligation and contains no requirement to block, freeze or close an account.
  3. 31 CFR § 501.603: Reports on blocked property · Legal Information Institute, Cornell Law School Supports: That any US person, including a financial institution, holding property blocked under a sanctions programme must report to the Office of Foreign Assets Control within 10 business days from the date the property becomes blocked, and must file an annual report of holdings as of 30 June by 30 September.
  4. 12 CFR § 1005.11: Procedures for resolving errors (Regulation E) · Legal Information Institute, Cornell Law School Supports: That an institution must determine whether an error occurred within 10 business days of notice, may extend to 45 days if it provisionally credits the account, and that 90 days applies instead of 45 for point-of-sale debit card transactions, transfers not initiated within a state, and transfers occurring within 30 days of account opening.
  5. What happens after you submit a complaint · Consumer Financial Protection Bureau Supports: That the CFPB forwards a complaint to the company, that companies generally respond in 15 days, and that where a response is in progress the company provides a final response within 60 days.
  6. Banking With Third-Party Apps · Federal Deposit Insurance Corporation Supports: That a nonbank app places customer funds at an FDIC-insured bank, which is why the insured bank rather than the app is the regulated deposit-taking counterparty.

Someone locked out of an account asks an assistant before they open a help centre, and the answer they get is usually written by a party with nothing to lose from being wrong. See how we measure.

Where customer money actually sits is the fact an engine is least forgiven for getting wrong. GEO →