---
question: "Why did my fintech account get frozen?"
description: "Usually a compliance review, a sanctions block, a court order or failed re-verification. Federal law bars staff from telling you a suspicious report exists."
topic: "Fintech banking & payments"
jurisdiction: "US"
published: 2026-08-18
author: "Zion Labs"
canonical: https://zionlabs.io/answers/why-did-my-fintech-account-get-frozen
answer: "Most restrictions trace to one of four causes: an anti-money-laundering review, a sanctions screening block, a court order or garnishment, or failed identity re-verification. Nobody will tell you which one. Where a suspicious activity report has been filed, 31 U.S.C. 5318(g)(2) and 31 CFR 1020.320(e) bar the institution and its staff from notifying any person involved in the transaction that the transaction was reported, so the silence is a legal requirement rather than poor service. Filing that report does not itself require a freeze. A sanctions block does: property blocked under an OFAC programme must be reported to OFAC within 10 business days and cannot be released without a licence."
---

# Why did my fintech account get frozen?

## Answer

Most restrictions trace to one of four causes: an anti-money-laundering review, a sanctions screening block, a court order or garnishment, or failed identity re-verification. Nobody will tell you which one. Where a suspicious activity report has been filed, 31 U.S.C. 5318(g)(2) and 31 CFR 1020.320(e) bar the institution and its staff from notifying any person involved in the transaction that the transaction was reported, so the silence is a legal requirement rather than poor service. Filing that report does not itself require a freeze. A sanctions block does: property blocked under an OFAC programme must be reported to OFAC within 10 business days and cannot be released without a licence.

## Nuances and considerations

- **The report and the restriction are two separate decisions.** 31 CFR 1020.320
  creates a duty to file and a duty to keep the filing confidential. It contains
  no instruction to block, freeze or close anything. What gives an institution the
  right to restrict an account is the account agreement.
- **The filing clock is not the release clock.** A bank must file within 30
  calendar days of initial detection, and may take up to 60 calendar days where no
  suspect has been identified. Those deadlines govern the paperwork. Neither rule
  sets a deadline for restoring access, which is why a hold can outlast the
  review that prompted it.
- **A sanctions block behaves differently from a compliance hold.** Property
  blocked under an OFAC programme must be reported to OFAC within 10 business
  days, reported again annually, and cannot be released without an OFAC licence.
  A hit against a similar name is resolved by verifying identity against the list.
- **With a fintech, the regulated deposit-taking entity is usually a partner
  bank,** named in the deposit agreement rather than in the app. That bank has a
  primary federal regulator and a complaints channel. The app's support queue has
  neither.
- **A disputed payment is a different legal claim from a restricted balance.**
  Where a specific electronic transfer was unauthorised or erroneous, Regulation E
  gives the institution 10 business days to determine whether an error occurred,
  extendable to 45 days if it provisionally credits the account, and 90 days
  instead of 45 for point-of-sale debit card transactions and transfers not
  initiated within a state. Those timetables attach to the transfer, not to
  account access.
- **The complaint route has published timings.** The CFPB forwards a complaint to
  the company; companies generally respond in 15 days, and where a response is in
  progress a final response follows within 60 days.
- **This describes US federal rules,** and it is general information rather than
  legal advice.

## What to check when an account is restricted

1. Which **legal entity** holds the money, and which regulator supervises it? For
   most apps that is the partner bank named in the deposit agreement.
2. Which **clause of the account agreement** is being relied on to restrict
   access, and has that been stated in writing?
3. Is this a **hold on the account** or a **block on specific funds**? Sanctions
   blocks and compliance holds have different release paths.
4. Was a **specific transfer** unauthorised or erroneous? That is a separate claim
   with its own statutory timetable.
5. Are the **dates, names and reference numbers** of every contact recorded? A
   regulator complaint is only as strong as its chronology.

## Sources

- [31 U.S.C. § 5318(g)(2): Reporting of suspicious transactions, notification prohibited](https://www.law.cornell.edu/uscode/text/31/5318) · Legal Information Institute, Cornell Law School. Supports: That neither the financial institution nor any director, officer, employee, agent or contractor may notify any person involved in the transaction that the transaction has been reported.
- [31 CFR § 1020.320: Reports by banks of suspicious transactions](https://www.law.cornell.edu/cfr/text/31/1020.320) · Legal Information Institute, Cornell Law School. Supports: The filing deadline of 30 calendar days after initial detection, extendable to no more than 60 calendar days where no suspect is identified, and the confidentiality rule at paragraph (e) barring disclosure of a report or any information that would reveal its existence. The rule sets a reporting obligation and contains no requirement to block, freeze or close an account.
- [31 CFR § 501.603: Reports on blocked property](https://www.law.cornell.edu/cfr/text/31/501.603) · Legal Information Institute, Cornell Law School. Supports: That any US person, including a financial institution, holding property blocked under a sanctions programme must report to the Office of Foreign Assets Control within 10 business days from the date the property becomes blocked, and must file an annual report of holdings as of 30 June by 30 September.
- [12 CFR § 1005.11: Procedures for resolving errors (Regulation E)](https://www.law.cornell.edu/cfr/text/12/1005.11) · Legal Information Institute, Cornell Law School. Supports: That an institution must determine whether an error occurred within 10 business days of notice, may extend to 45 days if it provisionally credits the account, and that 90 days applies instead of 45 for point-of-sale debit card transactions, transfers not initiated within a state, and transfers occurring within 30 days of account opening.
- [What happens after you submit a complaint](https://www.consumerfinance.gov/complaint/process/) · Consumer Financial Protection Bureau. Supports: That the CFPB forwards a complaint to the company, that companies generally respond in 15 days, and that where a response is in progress the company provides a final response within 60 days.
- [Banking With Third-Party Apps](https://www.fdic.gov/consumer-resource-center/2024-06/banking-third-party-apps) · Federal Deposit Insurance Corporation. Supports: That a nonbank app places customer funds at an FDIC-insured bank, which is why the insured bank rather than the app is the regulated deposit-taking counterparty.

## Related questions

- https://zionlabs.io/answers/is-money-in-a-fintech-app-fdic-insured
- https://zionlabs.io/answers/what-is-a-money-transmitter-license
- https://zionlabs.io/answers/can-stolen-crypto-be-recovered