Stripe Shutdown Our Nonprofit's Account, Holding $12k in Donations Hostage

81 points by nickwelsh ↗ HN
Our founder woke up to a gut-wrenching email from Stripe today, reading "We're writing to you because, after conducting a routine review of your Stripe account for Integrate for Good (account ID: [**]), we've found that it presents a high level of risk for customer disputes." We're a very small, hyper local nonprofit and have been using Stripe without any significant issues for over four years. Radar has flagged only one charge in the past year, and we've had just a single dispute since opening our account.

We requested further review of our account and supplied Stripe with further information in the dashboard. Just 45 minutes later, we received a second email confirming their decision to close our account. I find it hard to believe that Stripe was able to "conduct another review of [our] account" in such a short span of time.

While trying to figure out what could possibly present "a high level of risk for customer disputes," only one recent, major incident comes to mind. About two months ago, we experienced a security breach where an unauthorized user gained access to the account owner's Stripe login. They attempted to send six large invoices, of which only two went through. We promptly resolved the issue by resetting passwords and multi-factor authentication, and we refunded the wrongful charges. We contacted Stripe support to ensure everything was in order.

Support was helpful, they said they would escalate the issue and ensure everything was fine. A few days later, the owner's login was disabled by the security team. Getting it enabled again took nearly two months of trying to get in touch with support. Stripe was emailing us, but the emails were going into the ether. The attack hit the owner's inbox as well, as rules were configured to delete all incoming emails from Stripe, something Stripe support caught!

Once we sorted out that mess, we discovered Stripe withheld over $12,000 in donations while the login was disabled. The funds were scheduled to be released today, the same day the account was cancelled. That's $12,000 of donations people have made that we can't access. We are very small, and very much need access to that money to keep our programs running. It took months for us to get there, but only 45 minutes for Stripe to decide to kill our account.

We want to figure out what's going on and how to resolve this, but Stripe has disabled both live chat and phone support for our account. (I'm still able to use those options in other Stripe accounts under the same login).

Overnight, we've gone from planning our largest annual fundraiser, to considering pulling the plug altogether. We are incredibly frustrated by the complete and utter lack of transparency, the inability to contact Stripe, and absolute hopelessness we're feeling. If anyone knows someone we can hop on a call to discuss this situation with, please leave details or contact us at: Founder & Executive Director: bev@integrateforgood.org Director of Technology (me): nick@integrateforgood.org

20 comments

[ 0.28 ms ] story [ 53.6 ms ] thread
imo this is fraud, i don't care what their terms and conditions say

paypal has been doing this forever and its just theft. you cannot offer to hold or transfer funds for people while simultaneously holding unchecked power to take it away without any reason while answering to no one.

it could be that stripe needed another $12K for their own budget and targeted one of their customers.

*People say this is a horrible/worst ever advice*

Maybe notify Stripe about the below action you would be taking, as they have neither released the funds to you nor returned them to the donors. Well if you have contact details of your donors, please write to them and request them to raise a chargeback with reason that payment gateway/processor stripe didn't deliver the funds to intended recepient, this would be more painful and costly for stripe themselves.

This is the worst advice ever. Please don't ask your customers to raise chargebacks because that will essentially cause you to become unbankable from the perspective of VISA, MC and just about every PSP, it will also all but insure that at least some of that $12K is going to be used to pay for chargeback fees, and hopefully there would be some left after the donations all get refunded.

Really, unless you are purposefully trying to get the OP into even more trouble this is stupendously irresponsible.

Stripe will pass all those chargebacks right on to OP, and take them (and the additional chargeback fees) out of the frozen $12k. (That's the intended purpose of these freezes.) This is horrible advice.
"get rid of small customers" .. check
All I can help with is an upvote. Payroll = jobs / lives / mortgages / kids / health etc etc affected. I hope it gets sorted out ASAP.

Stripe and others, up your game.

(c+p my comment from 8mths ago...)

There used to be clear rules about this kind of thing, think cheques. Now, there's a computer attached to a network involved in the path and everything is rancid fudge.

Did you see the greyzone had a fundraiser shutdown by gofundme? Recall wikileaks getting their banking shut down based on an evidence-free accusation from a politician with no recourse. Whether those jounalistic outfits are to your liking is beside the point.

There needs to be clear rules, called "law" and their enforcement needs to be the same for everyone regardless of their popularity, wealth or power. A right to your day in court. This used to be uncontroversial and encroachment on it something met with widespread fiery fury on principle.

One of the Stripe founders used to post on here but haven’t seen him in a few years. I think he took an e-beating in regards to tracking of users and hasn’t been back since.

https://news.ycombinator.com/user?id=pc

All I can say is good luck. At this point probably better off trying to pressure them from the outside via local media, social media, and of course taking them to court. Maybe the backlash will get them to resolve it faster.

> That's $12,000 of donations people have made that we can't access.

So what happens to this money? They can't possibly just get to keep it and use it to buy beer and pizza for company parties, or can they? I guess they could try to push it back as refunds to those who donated. But what if those individuals don't have active accounts or credit cards any longer.

PayPal does this constantly. They must get a lot of pizza.
Banks still process refunds to canceled accounts/cards; they typically wind up sending a check to reconcile it.

It usually gets released, eventually; the freeze is theoretically to prevent Stripe from being on the hook for the chargebacks they think are coming.

I used to work in credit card risk. This money is held in reserve account. Usually the funds are held for 180 days to protect against chargebacks. That number can vary based on the card types and the country the card holder lives in.
Is this a normal US thing, that this is allowed to occur without a real big hammer from the state coming down on them? PayPal does it a lot, too. Most countries financial and banking laws would absolutely not allow these kinds of practices.
This is horrible. For some reason it's always the good organisations that get screwed over, and your org looks fantastic. I hope someone from Stripe turns up here to rectify it, every time one of these stories hits HN it makes me less likely to recommend Stripe to our clients.
Is there a reason for these high balances with payment processors, is there a minimum withdrawal period?

Given the choice, I would have every payment transferred out to a real bank as soon as it landed, and only keep pocket change on balance within Stripe, Paypal etc.

I've noticed that I never see this kind of post from people who are using Authorize.Net, WorldPay, Merchant e-Solutions, Elavon, and similar...i.e. the big old school payment processors that have been around for 20+ years.

It always seems to be the fancy newer processors that started as SV startups.

I don't know if this is because the old school payment processors do this sort of thing less often, or if because the kind of organizations that use old school processors are the kind that probably would not post on HN about problems they have.

As always in these cases, Use. A. Lawyer. Going through customer service is useless. Filing a complaint with their legal department is much more likely to get it resolved quickly.
Why the hell was this post flagged, for starters? It seems like a perfectly legimate request for advice from people on the HN site.

Secondly, my two cents: May not work for stripe, but an excellent post shared somewhere on HN about what one Paypal user who also happened to be a lawyer did to make that trashfire company respond very quickly to his request for an unfreeze might help your case too. It's possible that the same legal procedures apply. Stripe and Paypal are both payment handlers after all.

trying to find it.... And here! https://jessesingal.substack.com/p/i-fought-the-paypal-and-i...