The short version: Stripe, Square, PayPal, and similar services are payment aggregators. They board you instantly under one shared master merchant account, then run automated risk monitoring after the money has already started moving. For a clinic, that model is a ticking clock. The freeze is not a glitch, and it usually was not triggered by any one transaction. It is the aggregator model doing exactly what it was built to do.
The automated reasons a clinic gets flagged
Aggregator risk engines look for patterns, not context. A few of these usually fire at once for a healthcare practice:
Pharma-adjacent and "regulated" verticals. Anything that touches injectables, hormones, weight-loss drugs, controlled substances, telemedicine prescribing, or compounded medication reads as pharma-adjacent to an automated model. Ketamine, GLP-1 (semaglutide / tirzepatide), TRT/HRT, and even some IV therapy menus get caught here, regardless of how legal and legitimate the practice is. The model cannot tell a licensed clinic from a problem merchant, so it errs toward freezing.
Recurring and package billing. Memberships, treatment packages, prepaid series, and subscription programs look like the recurring-billing patterns that aggregators associate with high refund and dispute rates. A spike in recurring volume, or a single large prepaid charge, can trip the threshold on its own.
Chargeback ratio above threshold. The card networks treat roughly 0.9% to 1% of transactions in dispute as the danger zone, and aggregators monitor far tighter internal limits. Healthcare gets disputed more than retail because patients forget what a clinical statement descriptor means, or regret a discretionary purchase. A handful of chargebacks in a slow month can push a small clinic over the line.
A descriptor or website that does not match. If the name on the cardholder's statement does not obviously match where they were treated, or your site lacks a clear refund policy, terms, and a real description of services, the model reads ambiguity as risk.
The MATCH list. This is the one that matters most. MATCH (the Member Alert to Control High-Risk Merchants, formerly the TMF or "Terminated Merchant File") is a card-network database of merchants terminated for cause. If a prior aggregator placed you on it, essentially every acquirer can see it for up to five years and most will auto-decline. A surprising number of clinic owners are on MATCH without knowing it.
Why it happens with no warning
Because the Terms of Service allow it. When you signed up in three minutes with no underwriting, you agreed that the provider could suspend, freeze, or terminate at its discretion and hold funds in reserve. There is no underwriter who reviewed and approved your specific clinic, so there is no underwriter to override the model when it flags you. The "decision" is automated, and the email arrives after the fact. This is the structural trade-off of instant boarding: speed on day one, fragility on day ninety.
What to do in the first 48 hours
1. Do not open another generic account. This is the single most damaging reflex. A new Stripe, Square, or PayPal account under the same business, owner, bank, or domain gets linked and frozen again, often within hours, and can deepen a MATCH problem. Resist it.
2. Document everything. Screenshot the dashboard status, save every email, and note the exact balance being held and the date. If you receive an information request, respond completely and on time. The held balance and any path to reinstatement both depend on this paper trail.
3. Protect your patients and your refunds. Patients whose cards were charged but who cannot get a refund will file disputes, which makes everything worse. Communicate proactively and have an alternate way to issue refunds while funds are held.
4. Find out whether you are on MATCH. Before you apply anywhere new, you need to know your status, because it changes the entire approach. A specialized broker can determine this and, where appropriate, work the process to address it.
5. Get a readiness audit before you reapply. Reapplying with the same gaps that got you frozen just resets the clock. A pre-submission audit of your service mix, descriptor, website, and dispute history is what turns a frozen merchant into an approvable one.
How a specialized setup prevents this
A dedicated high-risk merchant account is the opposite of an aggregator. Instead of instant boarding followed by automated termination, an underwriter reviews your specific clinic up front, approves it knowing exactly what you do, and assigns the correct merchant category code so the account is built to accept your vertical. Because the acquirer chose to take you on with full knowledge of your service mix, a legal injectables, ketamine, or GLP-1 practice is not a surprise that trips a model later.
The setup also includes the things aggregators leave to you: a clean, matching billing descriptor; chargeback alerts and dispute representment; reserve terms negotiated in advance instead of imposed in a crisis; and often a backup processing rail so a single freeze cannot take your whole practice offline. The goal is an account that stays open in month twelve, not just month one.
If you run a clinic and you are reading this with a frozen balance, start with our free readiness audit. We will tell you where the risk is and what an approvable setup looks like for your specific vertical. For service-specific detail, see our pages on med spa payment processing and ketamine clinic payment processing.