Payment Processor Disputes · Memo

PayPal's Adverse-Action Notice Obligations: What the Statutes Actually Require

Counsel for merchants whose PayPal accounts have been limited or terminated tend to start with the wrong statute. I am going to map the actual notice and disclosure rules that apply, and the points where they create real leverage.

The federal statute counsel first reach for is the Equal Credit Opportunity Act, 15 U.S.C. sections 1691 to 1691f, and its Regulation B notice provisions at 12 C.F.R. section 1002.9. ECOA imposes adverse-action notice obligations on creditors who deny applications for credit or take adverse action on existing accounts. The threshold question for any PayPal matter is whether PayPal's action against the account is an adverse-action event covered by ECOA. The answer is usually no for the merchant payment-processing relationship and sometimes yes for PayPal Working Capital, Pay in 4, and other credit products PayPal extends through bank partners.

What ECOA covers and what it does not

ECOA defines credit at 15 U.S.C. section 1691a(d) as the right granted by a creditor to defer payment of debt or to incur debt and defer its payment. The standard PayPal merchant account is a payment-processing relationship: PayPal accepts funds from buyers, holds them subject to chargeback risk, and remits to the merchant. That is not a credit transaction in the ECOA sense. The merchant is not being granted the right to defer payment of debt. ECOA's adverse-action notice obligation does not apply to the underlying merchant relationship.

Where ECOA does apply is when PayPal has extended a credit product, typically through WebBank or one of its other bank partners. PayPal Working Capital advances, PayPal Business Loan, the deferred-payment options under Pay in 4, and similar products are credit. If PayPal limits, terminates, or denies one of those products, the merchant is entitled to ECOA adverse-action notice within thirty days of the decision under 12 C.F.R. section 1002.9. The notice must state the specific reasons for the adverse action or include a statement of the merchant's right to request the specific reasons within sixty days.

Counsel who reach for ECOA on a routine merchant-account freeze are reaching for a statute that does not apply to the freeze. Counsel who reach for ECOA on a credit-product denial that PayPal handled without a compliant adverse-action notice are reaching for a statute that does apply and that creates a clean federal cause of action under 15 U.S.C. section 1691e, with statutory damages, actual damages, and attorney's fees on a successful claim.

The FCRA overlay

The Fair Credit Reporting Act, 15 U.S.C. sections 1681 to 1681x, is the second federal statute worth checking. FCRA's section 1681m imposes adverse-action notice obligations on users of consumer reports who take adverse action against a consumer based in whole or in part on information from a consumer report. If PayPal pulled a consumer report (a credit report, or an alternative data score derived from a consumer report) and used it to support an adverse-action decision, FCRA's notice obligations attach. The notice has to identify the consumer reporting agency, state that the agency did not make the decision, and include the consumer's right to obtain a free copy of the report and to dispute its accuracy.

The harder FCRA question is whether the small-business-owner data PayPal uses in some risk decisions counts as a consumer report. FCRA's coverage of small-business credit decisions has been litigated and the case law is split. For sole proprietors and certain single-member entities, the credit information used is often the owner's personal credit, and FCRA does apply. For larger merchants, the analysis is more contested. The drafting and litigation move: pull the records of what data PayPal used and trace whether any of it came from a consumer reporting agency. The discovery answer drives the FCRA exposure.

The contractual notice obligations

The User Agreement, the Acceptable Use Policy, and the various processing addenda create contractual notice obligations independent of federal law. PayPal's User Agreement permits limitation and termination on broad grounds. The reservation language is similar to what you find in Stripe's agreement and other major processors. The implied covenant of good faith and fair dealing under California law (PayPal is headquartered in San Jose and the User Agreement points to California law for most merchants) constrains how the discretion may be exercised.

The standard pattern: PayPal limits the account, requires documentation from the merchant, and conditions release on the documentation. The documentation request lives in the resolution center. The frustration for counsel is that the timeline is opaque, the criteria are not stated, and the support channel does not produce an escalation path. The breach-of-contract analysis turns on whether PayPal's request is reasonable and whether the limitation has continued for longer than the documentation review can reasonably justify. As with Stripe, the implied-covenant claim is the lever.

State-law unfair-trade-practice overlay

California's Unfair Competition Law, Bus. and Prof. Code section 17200, reaches conduct that is unlawful, unfair, or fraudulent. A pattern-and-practice claim against PayPal for inadequate notice, inconsistent application of the Acceptable Use Policy, or de facto fund retention beyond a commercially reasonable period has been pleaded as a UCL action. McGill v. Citibank N.A., 2 Cal. 5th 945 (2017), preserves the right to seek public-injunctive relief under the UCL against an arbitration clause that purports to waive it. PayPal's User Agreement contains an arbitration clause, and the McGill issue is live for any UCL claim that seeks injunctive relief on a sitewide basis.

The other state-law statute to consider, depending on the merchant's state, is the analog consumer-protection statute (California's CLRA does not apply to most B2B disputes, but states like New York, Massachusetts, Texas, and Florida have unfair-trade statutes with different reach). For matters involving holds on settlement funds, conversion is a viable common-law claim once the funds have been held beyond the contractual period. Conversion gets harder to plead the closer the conduct is to the express text of the User Agreement.

What I would do on intake

For a counsel inheriting a PayPal limitation matter, the workup I run before drafting anything is straightforward.

• Pull the complete account history: the activity that triggered the limitation, the documentation requests in the resolution center, every response, every PayPal communication.
• Identify whether PayPal extended any credit product (Working Capital, Pay in 4) to the merchant. If yes, ECOA notice obligations attach and likely a separate cause of action.
• Check whether PayPal pulled any consumer report data on the merchant or owner. If yes, FCRA notice obligations attach.
• Document the operational impact: missed payroll, lost customers, emergency capital, redirection costs. The consequential damages drive settlement value.
• Calendar the User Agreement's hold period and the date by which PayPal's continued retention crosses into commercially unreasonable territory.

The demand letter that follows is structured around the contractual breach (implied covenant on the merchant account), the federal statutory breach if any (ECOA, FCRA), the UCL public-injunctive-relief claim where applicable, and a specific request for release of funds plus consequential damages documented. PayPal's legal team reads letters that show this structure. It does not read letters that recite frustration without a theory.

One reality check. A meaningful percentage of PayPal limitation matters are factually justified. The merchant has been running a pattern that the AUP prohibits, has had a chargeback ratio above the network thresholds, or has received funds in circumstances that triggered a legitimate fraud alert. Before drafting the demand, the workup needs to honestly assess whether the merchant has a clean story. If the merchant has actually been running the pattern PayPal flagged, the leverage is in negotiating a wind-down rather than fighting for restoration.

Sergei Tokmakov, Esq., CA Bar #279869. This memo is attorney commentary on legal questions and is not legal advice. Reading it does not create an attorney-client relationship. Past matter outcomes depend on facts and the responding party; nothing here is a prediction of result.