PayPal permanently limited your account - getting your money and moving on

"You can no longer do business with PayPal." If that email is sitting in your inbox and there's a peptide store on the other end of it, here is the straight version: the appeal will almost certainly fail, your balance is probably locked for 180 days but usually not forever, and the single worst move you can make right now is opening a new account under someone else's name. Let's walk through it.

What "permanently limited" actually means

PayPal has two kinds of limitation. A temporary limitation asks for documents - ID, supplier invoices, proof of fulfillment - and can be lifted. A permanent limitation is a termination. PayPal has decided your business violates its Acceptable Use Policy and has closed the relationship. There is no document upload that fixes it, because the problem is not your paperwork - it's your product category.

Peptides sold for research fall under the AUP's prohibition on "certain drug paraphernalia" and, more directly, its ban on the sale of substances that present health or regulatory risk. PayPal doesn't publish a compound-by-compound list; its risk team pattern-matches. Vials, milligram quantities, catalog pages full of amino-acid sequences - the classifier flags it, a human confirms it, and the account is done. This is the same posture every mainstream processor takes: Stripe terminates peptide stores the same way, and so does Square. You did not get unlucky. You were on borrowed time from the first sale.

One thing worth knowing: the appeal button exists and costs you nothing except time. File it once, keep it factual, attach your fulfillment records. Real-world reversal rate on a category-based permanent limitation is close to zero - but a clean, documented appeal helps later if you have to argue about the held funds. Do it once, then stop. Repeated appeals and angry phone calls change nothing and occasionally get notes added to your file.

The fund-recovery timeline - early release vs the full 180 days vs never

PayPal's user agreement lets it hold your balance for up to 180 days after a permanent limitation - roughly the outer window in which buyers can dispute charges through their card issuer. Here's how it actually plays out:

Three things you should do in the first 48 hours to protect the balance:

1. Keep the linked bank account open. The release, when it comes, goes to the bank on file. Closing that account is the most common self-inflicted way people turn "180 days" into "never."
2. Export everything now. Transaction history, customer records, dispute logs. Your account access can get further restricted at any point, and you'll want those records for taxes and for any dispute over the balance.
3. Fulfill every outstanding order or refund it. Every chargeback that lands during the hold comes straight out of your locked balance, plus fees. A wave of "where's my order" chargebacks from customers you couldn't ship to is how a five-figure balance becomes a four-figure one.

Mark the 180th day on a calendar. If day 185 passes with no release email, contact PayPal in writing and reference the limitation date. If that goes nowhere, the escalation ladder is: a complaint to the CFPB (PayPal responds to those within 15 days, in our experience quickly and substantively), then small-claims or the arbitration clause in the user agreement for larger balances. Most sellers never need step two.

Were you reported to MATCH? How PayPal terminations differ from card processors

Here's the one piece of genuinely good news. MATCH - Mastercard's Member Alert to Control High-risk merchants list - is populated by acquiring banks when they terminate a merchant account. A standard PayPal business account is not a merchant account; you were a sub-merchant under PayPal's own umbrella, so a routine permanent limitation generally does not generate a MATCH entry the way a termination from a direct acquirer does.

Two caveats. First, if you were on PayPal's advanced credit and debit card processing (Braintree under the hood, with your own merchant ID), you were closer to a true merchant account and a MATCH report becomes plausible - reason code 12, violation of card-network standards, is the one used for prohibited-category terminations. Second, PayPal keeps its own internal blacklist forever: your SSN or EIN, address, bank account, and device fingerprints. That doesn't follow you to other processors, but it permanently ends your PayPal relationship, including personal accounts they link to you.

Practical upshot: a PayPal limitation alone usually does not poison a future application with a real high-risk merchant provider. Answer application questions honestly - "have you ever had a processing relationship terminated" means yes - but you are not radioactive the way a MATCH-listed merchant is.

Do not open a family member's account - that escalates to fraud

This is the move everyone reaches for around day three: your cousin's SSN, your spouse's name, a fresh LLC, same store. Do not.

PayPal's linking is very good. It matches on bank accounts, addresses, phone numbers, IP addresses, device fingerprints, shipping addresses on outbound labels, even the products in the transaction descriptions. The new account typically survives 2-8 weeks - long enough to accumulate a fresh balance - and then gets permanently limited too, with a new 180-day hold on money that now legally belongs to your cousin. You've converted one frozen balance into two, and put a family member's name on PayPal's blacklist alongside yours.

And it's worse than an inconvenience. Knowingly opening a payment account in another person's name to evade a termination is the fact pattern for bank fraud and, when the platform calls it what it is, "true name" application fraud. Processors pursue this more than people assume, because circumvention after termination is exactly what their agreements define as fraud rather than a policy dispute. The frozen balance is a bad month. The workaround can be a criminal referral. Take the L on the timeline and rebuild on rails that actually allow what you sell.

Rails PayPal can't touch: what to stand up instead

The lesson of the limitation is not "hide better." It's that aggregators - PayPal, Stripe, Square, Shopify Payments - will never knowingly serve a peptide store, because Visa and Mastercard put research chemicals in their high-risk registration programs and the aggregators' economics don't support carrying that registration for you. The stores that keep running use rails where no aggregator sits in the middle:

• A real high-risk merchant account. A dedicated MID through an acquirer that knowingly underwrites research-chemical merchants. Expect 4-8% effective rates, a rolling reserve of 5-10%, and a 1-2 week underwriting process where they read your site line by line. This is the only way to take cards durably, and your site has to pass the read-through - more on that below.
• Bank-transfer rails run properly. Zelle, ACH, and wires move bank-to-bank with no card network to ban you. They come with their own operational rules - personal P2P apps have their own peptide problem, which we cover in the Zelle / Venmo / Cash App guide - but run through business accounts with automated payment matching, they are the workhorse rail for most RUO stores right now.
• Crypto with an invoice layer. BTCPay or a hosted invoicing tool, quoted at checkout with a fixed-rate window. Converts a minority of customers but can't be terminated.

The durable setup is layered: bank transfer as the default, a high-risk MID for card buyers once underwriting clears, crypto as the fallback. The full comparison, with named provider types and realistic pricing, is in our peptide payment processing guide.

Fixing the site that got you flagged

Whatever you stand up next, the site itself is now the gating asset. High-risk underwriters read your store the way PayPal's risk team did, and the way the FDA reads it: the totality of the site tells them what the products are really for. The same pages that got you limited will get your merchant application declined - and worse, they're the pages the FDA cited in its 2026 warning-letter wave against peptide sellers.

What a passing site looks like, concretely: research-use-only framing enforced on every page, no dosing or human-use language anywhere (including product descriptions, blog posts, and image alt text), no prohibited compounds in the catalog, a qualified-researcher attestation at the gate, and consent captured on every order. Not as a policy PDF nobody reads - in the code, so a product edit or a new blog post can't silently reintroduce the language that ends accounts. That's the difference between a store that survives underwriting review and one that gets terminated again in month three.

If you're not sure which side of that line your current site is on, run the free 60-second scan - it reads your store the way a risk reviewer does and tells you exactly what would get flagged. Free, instant, no signup.

Questions, answered straight

Disclosure: this guide is general information for store operators, not legal advice. Fund-hold outcomes and reporting practices vary by account history; for a seized balance or anything involving a fraud allegation, talk to a lawyer who handles payments disputes.