The Outlier Lab

Funds Availability Holds

Delaying when deposited or pulled funds become spendable or withdrawable, matched to how long reversal risk lasts on the funding rail; Reg CC sets bank check-hold rules.

What it is

Every funding rail has a reversal window: the period during which money that appears to have arrived can still be pulled back. Fraud happens when you make value available before that window closes and the value then leaves on a rail that can't be reversed.

Funding railCan come back viaTypical reversal exposure (conceptual)
Check / mobile deposit (RDC)Return as unpaid; counterfeit, altered or duplicate presentment claimsDays for standard returns; longer for some claims (warranty or fraud claims)
ACH debit (you pull from an external account)Returns: NSF and administrative (R01–R04) 2 banking days; unauthorized consumer returns (R05, R07, R10, R11) 60 calendar daysThe long tail is the unauthorized-return window
Card funding (debit or credit)ChargebacksGenerally 120 calendar days from the transaction processing date; up to 540 days where fulfillment is deferred
Incoming ACH creditRarely returned, but now subject to RDFI fraud monitoring under the 2026 Nacha rules, and to R17 (False Pretenses) and expanded R06 returns available since the October 2024 rulesUsually short, but mule and False Pretenses credits can be recalled
RTP / FedNow / wire inNot reversible by the sender's bank; recall requests are voluntaryLow reversal risk, high inbound mule risk
Marketplace sale proceedsBuyer disputes, INR/SNAD claims, chargebacksUntil the claim window closes
Cashback / reward creditMerchant reversal of the commission; returns; receipt fraud findingsUntil the merchant confirms, often 30–90 days

A hold closes the gap between "funds are spendable" and "funds are final". Instant availability is a credit decision, because you are lending the customer money against a deposit that may be reversed. Treat it with the same discipline as credit: underwrite it, limit it, and price the loss (Velocity and Exposure Limits).

Diagram: Deposit / pull / credit arrives, Score: depositor, source, item, amount, Availability policy, Instant or next-day availability (within limit), Partial availability now, rest on schedule, Full hold until reversal risk drops, Exception hold + required notice, Outflow controls still apply (withdrawal, P2P, crypto, trade-and-withdraw)

What it stops (and what it doesn't)

  • Stops:
    • Kiting and "deposit-then-withdraw" cycles on bad checks or ACH pulls from accounts the customer doesn't own (Case Study - Chase Infinite Money Glitch (2024) shows the provisional-funds dynamic in public)
    • Funding with stolen cards or bank credentials followed by immediate withdrawal
    • Mobile-deposit fraud cashed out the same day
    • Sellers withdrawing sale proceeds before buyer claims mature
    • Cashback balances withdrawn before merchants reverse the commission
  • Doesn't stop:
    • Fraud that waits out the hold (bust-out patterns)
    • ATO of already-available balances (use Withdrawal and Payout Controls)
    • APP scams, where the victim's own good funds leave (Payee Confirmation and Payment Friction)
    • Inbound mule money that arrives on an irreversible rail. The hold question there is whether to let it go out again quickly, which is a monitoring and AML matter (Money Mules, Fast In Fast Out Patterns)

Design considerations

1. Restrict the irreversible exits. Provisional funds turn into losses when they leave on an irreversible rail, so where they can go matters as much as when they become available. Many programs allow provisional funds for low-risk internal uses (buying securities that stay in the account, paying an internal bill) while restricting withdrawal, P2P, crypto and push-to-card. In brokerage, the concern is trade-then-withdraw: buying power granted on unsettled deposits, liquidated and withdrawn before the ACH settles or returns.

2. Make availability risk-based within the rules. Inputs:

Output: an availability schedule (immediate amount, next-day amount, held remainder) instead of a single yes or no.

3. Use partial availability. Releasing the first $X (or Y% of the deposit) right away captures most of the customer-experience value while capping exposure. Reg CC itself is built this way for checks at banks, with a next-day minimum and the remainder on schedule.

4. Season on demonstrated good behavior. Automatic step-ups in availability after N cleared deposits with no returns let good customers earn faster access. Reset or tighten on any return, dispute, or high-risk account change.

5. Cap aggregate instant exposure. Each deposit may be within its limit while total uncleared exposure across a customer, a household or a linked cluster is far too high. Enforce per-entity uncleared-funds caps (Velocity and Exposure Limits).

6. Watch overpayment scams on the receiving side. A seller or P2P user who receives a check or reversible payment and is asked to refund the difference is a classic victim pattern (Seller-Targeted Scams (Fake Payment and Overpayment)). Show "funds not final" messaging and restrict refunds of uncleared amounts to third parties.

7. Treat holds as part of the product. Clear messaging on when funds become available and why reduces complaints. For banks, Reg CC notices are mandatory; non-banks should disclose availability in account terms.

Industry lens.

  • Neobanks: instant ACH-pull availability is a growth feature and a top loss driver. Underwrite it. Early direct-deposit access is a related exposure.
  • Brokerage: instant buying power on unsettled deposits, with withdrawal restricted until settlement. Watch for trade-then-withdraw and for using instant funds to buy thinly traded securities.
  • Marketplaces: rolling reserves and payout delays for new sellers (Seller Onboarding and Reserves).
  • Cashback / rewards: "pending" until merchant confirmation, then "available". Pending-to-available timing is the hold (Reward Vesting and Clawback).
  • Payments / P2P: card-funded sends carry chargeback exposure; delay recipient availability or limit card-funded volume for new senders.

Implementation path

StageWhat it looks likePrerequisites
CrawlStatic availability schedules by rail; new accounts get the longest holds; withdrawal blocked on uncleared funds; required Reg CC notices (banks)Ledger that tracks cleared vs uncleared balances; disclosures
WalkRisk-based schedules (tenure, verified source, item risk); partial availability; seasoning ladders; per-entity uncleared exposure caps; exception-hold workflow with reasons and noticeReal-Time Transaction Risk Scoring at deposit; source verification; exposure tracking
RunExpected-loss-optimized availability (price exposure vs conversion); linked-entity exposure caps; dynamic reversal-window modeling by source bank and account; automated exception-hold notices with reasonsReturn and chargeback outcome data by source; Graph Analytics; Experimentation and Champion-Challenger

Customer friction and trade-offs

  • Holds are among the most-complained-about fraud controls. Customers want their own money. Friction concentrates on new customers, which hurts activation exactly when you want it.
  • Over-holding drives customers to competitors offering instant availability. Under-holding funds kiting rings. The right answer is segment-specific and should be tested (Friction and Customer Experience Tradeoffs).
  • Inconsistent holds (sometimes instant, sometimes held, no explanation) hurt trust more than a predictable policy. Clear dates and reasons matter.

Measuring effectiveness

  • Loss on uncleared funds: dollars lost when funds made available before clearing were reversed after leaving. Report this by rail, segment and availability tier, in basis points of instant volume.
  • Return and chargeback rates on instantly available deposits compared with held ones.
  • Exposure: peak and average uncleared exposure per customer and in aggregate. This tells you the size of the worst day.
  • Customer impact: holds per 1,000 deposits, complaints, abandonment of funding flows, time to availability.
  • Seasoning efficacy: loss rates for customers promoted to faster tiers versus those not promoted.

Common failure modes

  • Availability without exit control: funds held from withdrawal but usable on another irreversible path (P2P, crypto, push-to-card, gift card).
  • Per-deposit caps only, so aggregate uncleared exposure across many deposits or linked accounts goes unchecked.
  • Uniform holds that frustrate good customers without targeting risk.
  • Changing the hold on request: support agents lifting holds on customer pressure without a risk check.
  • Seasoning too fast: a few small cleared deposits earn the account large instant availability (a classic bust-out setup).
  • Missing notices: exception holds without required notices or documented reasons (banks), which creates regulatory exposure.

Regulatory and policy notes

  • Regulation CC (12 CFR Part 229) governs check-hold limits for banks and credit unions.

    • Inflation-adjusted amounts (effective July 1, 2025). The Federal Reserve and CFPB final rule (published May 20, 2024) raised the Reg CC dollar thresholds; the Expedited Funds Availability Act requires these inflation adjustments every five years.

      ThresholdBeforeFrom July 1, 2025
      Next-day availability minimum (229.10)$225$275
      Cash-withdrawal amount (229.12)$450$550
      New-account amount$5,525$6,725
      Large-deposit threshold (229.13)$5,525$6,725
      Repeatedly-overdrawn threshold$5,525$6,725

    • Exception holds (12 CFR 229.13). Banks may extend holds for:

      • New accounts (first 30 calendar days)
      • Large deposits (check deposits over $6,725 in one banking day; the excess can be held)
      • Redeposited checks
      • Repeated overdrafts (six or more negative days in six months, or two or more days negative by $6,725 or more)
      • Reasonable cause to doubt collectibility. This needs specific facts and cannot be based on the class of check or depositor.
      • Emergency conditions

    • How long. Safe-harbor extensions are generally up to one business day for on-us checks, five for local or most other checks, and six for nonproprietary ATM deposits. Longer holds must be justified as reasonable.

    • Notice. Written notice with the reason and availability date is required for most exception holds. Records of reasonable-cause notices must be kept.

  • Non-banks (brokerages, fintech apps, marketplaces, rewards apps) aren't directly subject to Reg CC for their own provisional credit. Their availability policies are contractual and should be disclosed clearly. Their bank partners may impose Reg CC-aligned constraints.
  • Nacha 2026. RDFIs that monitor incoming credits before posting can use a funds-availability exemption to investigate suspicious credits (Nacha Rules and ACH Risk).
  • Reg E. Unauthorized ACH debits from a consumer's external account can be returned well after settlement. Holding funds pulled from unverified external accounts is a common response.
  • Brokerage. Cash-account settlement and Regulation T requirements limit how unsettled funds can be used. Confirm specifics with compliance (Broker-Dealer Obligations (FINRA and SEC)).

Mechanisms addressed

Sources and further reading