All articles

Restaurant Profit

Merchant Processor Holding Funds? What to Do

Why processors like Toast freeze deposits or set reserves, what the contract lets them do, how MATCH works, and how to escape a POS or card-machine lease.

13 min read
Photo: Hammad Hassan / Unsplash

The short answer

A merchant processor holds funds when its risk model sees possible losses: a large or unusual ticket, a chargeback spike, a bank-account change or a closing account. Toast's terms let it defer payouts for the length of an investigation and set a non-interest reserve. Most holds clear fast with itemized documentation; long reserves track the roughly 120-day card dispute window.

A merchant processor holds your funds when its risk model decides a loss is possible and your contract lets it act first and explain later. For restaurants, the usual triggers are a big catering or event ticket, a sudden volume jump, chargebacks, a changed deposit account or a notice that you are leaving. Most short holds clear within a business day or two once you send documentation. Longer reserves follow the card networks' dispute window, typically about 120 days.

This guide covers what your processor's contract actually allows, using Toast's published terms as the worked example, what the MATCH list really requires, the escalation path that works (and the one that does not), and how to get out of the equipment leases that often come bundled with the account.

Why do processors hold funds or set reserves?

Processors hold funds because they are on the hook first. When a cardholder wins a dispute, the network pulls the money from the acquirer and the processor, and then they try to collect it from you. If you have closed, gone quiet or emptied the account, they eat the loss. A hold or reserve is how they make sure your money is still there when a dispute lands.

Card networks typically allow cardholders to dispute within 120 days of the payment, with longer windows for some prepaid future events (Stripe docs). That single number explains most "we are holding your funds for 120 days" emails. For a restaurant, disputes are usually rare, but catering deposits, prepaid events, gift cards and online orders carry more risk than a card tapped at a table.

Here are the triggers that come up most, and what to do about each:

TriggerWhat the processor seesTypical fix
Outlier ticket (catering, buyout, big bar tab)Amount far above your averageItemize the check; keep the signed invoice or event contract
Volume spikeNew season, second location, festival weekTell your processor in advance, in writing
Chargebacks or refunds risingRatio moving toward network thresholdsRespond to every dispute; fix the cause (descriptor, online order errors)
Bank account changePossible account takeoverExpect a short security hold; change accounts on a slow day
Missing verificationOwner, EIN or bank documents incompleteSend what is asked, in one package
Account closingFuture disputes with no one to collect fromNegotiate the reserve amount and release date in writing
Unpaid invoicesBilling hold on the accountClear or dispute the balance

What does Toast's contract actually let it do?

More than most owners realize. Toast's Payment Processing Terms start by saying Toast "acts in the capacity of a payment facilitator, not a bank or payment processor," and then grant it broad room to hold money. The clauses that matter:

  • Investigations. Toast "may defer payout or restrict access to Merchant's funds for the entire time it takes for Toast to complete its investigation or resolve the dispute."
  • Reserves for almost any risk. Toast "may require a Reserve for any reason" to protect against chargebacks, excessive refunds, liens, garnishments, "credit risk based on Merchant's processing history, or other indications of performance problems."
  • No interest. "Funds in the Reserve will not bear interest and may be commingled with other funds."
  • Debits without notice. You authorize Toast to withdraw from the reserve or any linked bank account "without prior notice to Merchant" to collect amounts owed.
  • Likely chargebacks. Toast may withhold a potential chargeback amount until a chargeback is assessed, the dispute period expires, or it decides one will not occur.
  • Termination. On notice of termination, Toast may estimate anticipated chargebacks, refunds and fees, and withhold that amount from settlements as a reserve.

The same terms include a clause that cuts the other way and is easy to miss: if you do not report a payment processing error "within thirty (30) days of when it first appears" in your transaction history, you are deemed to have waived your right to the money. Holds are Toast's protection. The 30-day clock is yours to watch.

Note

Toast is the example, not the outlier. Square, Stripe, Clover and bank-owned processors publish similar reserve and hold language. Download your own agreement and search for "reserve," "withhold," "delay" and "investigation" before you need them.

What should you do in the first 48 hours of a hold?

Treat it as a document request, even if nobody has asked for documents yet. Toast says large-transaction holds are "reviewed by a member of the Toast team no later than the following business day," and that "a $50,000 transaction for Open Food is much more likely to be delayed than a $50,000 transaction with a fully itemized list" (Toast Support). It also recommends keeping "a signed invoice or receipt" for large transactions and tips.

  1. Get the reason in writing. Screenshot the notice, with date, stated reason and any deadline.
  2. Send one complete package. Itemized check, signed catering contract or BEO, deposit receipt, customer contact, photos of the event if relevant, and your business documents (EIN letter, voided check, ID).
  3. Explain the pattern, not just the ticket. "We cater two events a month; here are the last six" beats "this is legit."
  4. Protect payroll and rent. Line up a short-term cash plan now. One owner in r/ToastPOS wrote that after switching bank accounts, funds were still being held two weeks later and it was "really starting to mess with my payroll and now my rent."
  5. Stop running the trigger. If one large ticket caused the hold, do not split it or re-run it. Duplicate attempts look worse.

Toast's Instant Deposit FAQ also notes that a recently changed settlement account can put your bank account on a temporary security hold for instant payouts, and that these holds "are usually lifted within a few days" (Toast Support). If you need to change banks, do it early in a slow week, not the Thursday before payroll.

Upload 12 months of processor statements and 90 days of payouts, no logins. We reconcile what was held, released and deducted, and flag fees and errors you still have time to claim.
Get a free leak scan

How do rolling reserves work, and how do you get one lifted?

A rolling reserve withholds a percentage of each day's card sales and releases each slice after a set period. Industry guides commonly quote 5% to 10% held for about 180 days (Merchant Cost Consulting), but no card network rule sets those numbers. Your agreement and your processor's risk team do. A fixed or upfront reserve is a lump sum held instead. Either way, on a thin restaurant margin, 5% of card sales sitting idle for six months is a real working-capital hit.

Reserves come off when the risk case for them weakens. That means asking with evidence:

  • Clean history since the reserve started: low dispute and refund rates, no returned ACH debits.
  • Documentation of the thing that triggered it: the catering contract, the seasonal pattern, the new location's lease.
  • Financial strength: recent bank statements or a P&L.
  • A specific ask: a lower percentage, a cap on the total held, or a release date, confirmed in writing.

If you are leaving a processor, negotiate the exit reserve before you give notice. Toast's terms let it estimate future chargebacks and withhold that amount on termination, and the terms say it releases what remains once your obligations are satisfied and you sign any documents it reasonably requests. Get that estimate and a release date in writing.

What is the MATCH list, and should a restaurant worry?

MATCH is Mastercard's terminated merchant file. When an acquirer terminates a merchant for a listed reason, it must add the business and its principal owners, and most processors automatically decline listed applicants. Entries stay active for five years, and only the acquirer that listed you can remove or correct an entry (Stripe docs on MATCH and VMSS).

The thresholds matter because processors sometimes wave MATCH around loosely. Per Stripe's summary of Mastercard's criteria:

MATCH codeTriggerRemoval
04 Excessive chargebacksMastercard chargebacks over 1% of monthly Mastercard sales transactions and $5,000+ in the same monthOnly if added in error
05 Excessive fraudFraud-to-sales 8%+ with 10+ fraud transactions totaling $5,000+ in a monthOnly if added in error
12 PCI DSS non-complianceFailed PCI requirementsAcquirer can remove after verified compliance
03, 11, 13, 14Laundering, collusion, illegal transactions, identity theftOnly if added in error

Visa runs a parallel database, VMSS, with an excessive-disputes code at 1,000 disputes and 1.8% in a month, also listed for five years. A typical dine-in restaurant is nowhere near those numbers. The realistic MATCH risks for restaurants are an account used by someone else to launder transactions, a data compromise with no PCI remediation, or a principal with a fraud conviction. If you are unsure whether you have been listed, Mastercard accepts inquiries at matchbusinessowner@mastercard.com.

Where do you escalate when the processor stops answering?

Escalate in writing, in this order, and keep every message.

  1. The processor's risk or underwriting team, not general support. Ask for the specific reason, what document would resolve it, and a date.
  2. A formal written complaint to the processor's legal or compliance address listed in your agreement, citing the clause they are relying on.
  3. The sponsor bank. Payment facilitators process through an acquiring bank; your agreement or statement names it.
  4. Your state attorney general. Most AG offices take small-business complaints about deceptive practices, and they act on patterns. See the Northern Leasing case below.
  5. The FTC at ReportFraud.ftc.gov if the conduct looks deceptive. The FTC has used its authority for small-business merchants: it sued First American Payment Systems in 2022 over hidden three-year terms and $495 cancellation fees, obtaining $4.9 million in redress (FTC), and later sent $2.6 million to 5,588 businesses (FTC).
  6. Arbitration or small claims, per the dispute clause in your agreement, for a defined sum you can document.

Watch out

The CFPB is not your venue. Its complaint portal covers consumer financial products only, such as personal checking, credit cards and loans (CFPB). A restaurant's merchant account is a commercial contract. Filing there costs time and usually goes nowhere.

Why are POS and credit card machine leases a trap?

Because the lease is usually a separate, non-cancellable finance contract that survives the processing relationship, your business closing, or the machine breaking. Owners often sign it inside a stack of processing paperwork and discover it only when they try to leave.

The best-documented case is New York's. In 2016 the state attorney general sued Northern Leasing Systems and affiliates, alleging they trapped small businesses in leases "for over-priced credit card processing equipment." In June 2020 the court found the method of procuring leases "deceptive," rescinded the leases, ordered restitution and vacated 29,617 default judgments. The AG had logged more than 5,600 complaints since 2010, and over 95% of those sued lived outside New York; restaurants and bars were among the targets (NY AG press release). In September 2023 the court awarded over $680 million against Northern Leasing, though the AG says no funds had been collected as of its January 2025 update (NY AG).

The owner stories on Reddit rhyme with the court record. A restaurant owner in r/smallbusiness whose building burned down was told it would cost about $1,300 to get out of a card-machine lease they did not remember signing. Another r/smallbusiness owner described a $45-a-month, 60-month terminal lease that, after an autopay failure, was accelerated to the full remaining balance plus roughly $1,000 more.

How to get out of an equipment lease

  1. Find the actual lessor. It is often not your processor. The name is on the lease and on the bank debit.
  2. Read four terms: length, "non-cancellable" language, buyout or early-termination amount, and automatic renewal at end of term. Many leases renew month-to-month unless you give notice inside a narrow window.
  3. Ask for the payoff in writing, then negotiate. Lessors often accept less than the full remaining payments for a clean exit.
  4. Return equipment with tracking if the lease requires it, and keep proof.
  5. Do not simply revoke the ACH authorization before confirming what you owe; a default can trigger acceleration, as the Reddit example shows.
  6. Complain to your state AG if the lease was misrepresented as part of processing, signed without disclosure, or is being enforced in a far-away court.

Tip

Before signing any POS deal, ask for the total of all hardware payments, the term, the buyout amount and the lessor's legal name on one page. If the rep cannot produce it, the hardware is not "free."

How to prevent the next hold

Prevention is mostly paperwork you do once. Tell your processor in writing about seasonal peaks, catering programs and new locations. Itemize large checks instead of ringing "Open Food." Keep signed contracts and receipts for big tickets and large tips. Answer every chargeback, even small ones. Change bank accounts early in a quiet week. And reconcile your payouts against sales every week, so a missing deposit is a same-week question instead of a month-end surprise. Our guide to Toast sales and payout reconciliation walks through that match step by step.

Holds are one part of what your processor costs you. The larger, slower leak is usually in the rate itself: see what Toast processing actually costs, how to audit a Toast processing statement and how to negotiate Toast processing rates, or run your numbers through the processing fee calculator. For every other place a restaurant loses recoverable money, start with the restaurant profit leak audit.

Frequently asked questions

Why is my payment processor holding my funds?
Because its risk model thinks a loss is possible. Common triggers are a ticket far larger than your normal average, a jump in volume, a run of chargebacks or refunds, a change to your deposit bank account, missing verification documents, or notice that you are closing the account. Toast's terms also let it defer payouts while it investigates or resolves a dispute.
How long can a processor legally hold my money?
As long as the contract allows, which is usually open-ended. Toast's Payment Processing Terms say a reserve is held 'for such period of time as is consistent with Toast's liability for the potential risks,' and that it may withhold a likely chargeback amount until the dispute window expires. Card networks typically allow cardholders 120 days to dispute, which is why many long holds run about four months.
Does Toast pay interest on a reserve?
No. Toast's Payment Processing Terms state that funds in the reserve will not bear interest and may be commingled with other funds. Toast also takes a security interest in reserve funds and may debit linked bank accounts without prior notice to collect amounts it says you owe.
Can I file a CFPB complaint about a frozen merchant account?
Generally no. The CFPB's complaint portal covers consumer financial products such as personal checking accounts, credit cards and loans, not business merchant accounts. Better routes are a written escalation to the processor's risk team, your state attorney general's consumer or business protection office, the FTC at ReportFraud.ftc.gov for deceptive practices, and your sponsor bank.
What is the MATCH list and can a restaurant end up on it?
MATCH is Mastercard's terminated merchant file. Acquirers must add merchants terminated for listed reasons, and entries last five years. The excessive chargeback code requires Mastercard chargebacks above 1% of monthly Mastercard transactions and $5,000 or more in the same month. Most restaurants never approach that, but an account closed for fraud, laundering or PCI non-compliance can still be listed.
How do I get out of a credit card machine or POS lease?
Read the lease, not the processing agreement: they are often separate contracts with different companies. Look for the lessor's name, the term, whether it is non-cancellable, the buyout amount and end-of-term renewal clauses. Negotiate a buyout in writing, return equipment with tracking, revoke ACH authorization only after confirming what you owe, and complain to your state attorney general if the sale was deceptive.
Is it better to lease or buy a card terminal?
Buying is almost always cheaper. Equipment leases are typically long, non-cancellable finance contracts that can total several times the device price. If your POS provider finances hardware, get the total of payments, the term and the buyout figure in writing before you sign.
Send exports, not logins. We return a written list of what your restaurant looks to be owed or overpaying, what each item is worth, and which deadlines are still open.
Get a free leak scan