Few operational events are as disruptive as losing access to funds without warning. A frozen business bank account and a frozen payment account feel identical from the inside: payroll is due, suppliers are waiting, and the explanation is some version of "your account is under review."
It is worth understanding what is actually happening, because the framing most businesses reach for — that they are suspected of something — is usually wrong, and it leads to the wrong response.
A regulated provider has to be able to explain your activity to its own supervisor. When activity stops matching the explanation on file, the provider has an obligation to stop and re-establish the picture. The freeze is not a verdict. It is the provider protecting its own position while it works out whether the file is still accurate.
Which is good news, because it means the outcome is largely determined by how quickly you can supply evidence — and that is something you can prepare for before anything happens.
What actually triggers a review
Activity that does not match the stated profile. This is the big one. You onboarded as a consultancy invoicing four European clients. Twelve months later you are receiving payments from nineteen counterparties across six countries. Nothing improper has occurred — you grew. But the file says one thing and the transactions say another, and nobody told the provider.
A step change in volume. A month at ten times the usual value, with no prior notice, reads to a monitoring system exactly like a compromised account.
New geographies. A first payment to or from a jurisdiction subject to enhanced measures will attract attention regardless of how legitimate it is.
Counterparties that fail screening. Not your conduct — theirs. A customer appearing on a sanctions or adverse-media list is enough to hold a payment.
Round-number, high-frequency flows. Repeated round amounts between related parties are a recognised structuring pattern, and monitoring systems are tuned for it.
Payments that contradict the business model. A wholesaler receiving a stream of small consumer card settlements. A services business receiving goods-related purpose codes. The mismatch itself is the flag.
Stale KYC. An expired director's passport, an address never updated, a shareholder change never notified. Administrative, entirely avoidable, and routinely the reason access is suspended.
Source of funds and source of wealth
These two get conflated constantly, and being asked for one and supplying the other is a common way to extend a review by weeks.
Source of funds is where a specific payment came from. A named client, an invoice number, a contract, a date. It is transactional and narrow.
Source of wealth is how the business or its owners accumulated value overall — trading history, an investment round, a disposal, an inheritance. It is biographical and broad.
If a provider asks for source of funds on a particular incoming payment, supplying company accounts and a shareholding structure is not an answer. Supply the contract and the invoice that payment settles.
Documentation worth holding ready
The businesses that resolve reviews in days rather than weeks are the ones that do not have to go and find anything:
- Certificate of incorporation and current constitutional documents
- Current shareholder register with ultimate beneficial ownership traced through every intermediate holding entity
- Government-issued ID and proof of address for directors and UBOs, all in date
- Last two years of financial statements, or management accounts for a business younger than that
- Template contracts and invoices for the top counterparties by value
- A short written description of the business model — what you sell, to whom, in which countries, paid how
That last item is the one nobody prepares and the one that shortens a review most. One page, in plain language, that a compliance analyst who has never heard of your industry can read once and understand.
The habit that prevents most freezes
Tell your provider before the pattern changes, not after.
New market, new product line, a contract that will multiply your monthly volume, a first payment to an unfamiliar jurisdiction — a short note in advance turns an anomaly into an expected event. It takes minutes and it is the single highest -leverage thing on this list.
Beyond that: keep KYC current rather than waiting to be asked, keep business funds separate from personal ones, use payment references that identify what the payment is for, and screen your own counterparties so you are not the last to know that one of them has become a problem.
If it happens anyway
Ask precisely what is required and in what format. Supply exactly that — a partial response restarts the clock. Answer in one batch rather than in instalments. Keep it in writing, so there is a record of what was asked and when it was answered. And escalate through the provider's formal complaints procedure if the stated timescale passes, because that is the step that creates an obligation to respond.
Do not open a replacement account elsewhere and quietly move the flows across mid-review. It is the most common instinct and it makes the picture worse, at both providers.
How this works with 2PayApp
2PayApp applies onboarding and ongoing compliance checks to every business account, and the requirements are set out before you apply — see eligibility and account opening.
2PayApp is not a bank. 2PAYAPP LIMITED is registered with FINTRAC as a Canadian Money Services Business; FINTRAC registration is not a banking licence and does not constitute an endorsement by FINTRAC — full entity details are on the company and regulatory information page.
This article is general information about compliance practice. It is not legal advice.
FAQ
How long does a review take? It depends on what is being verified and how completely you respond. Complete answers supplied in one batch are the main variable you control.
Can a provider refuse to say why? Sometimes, yes. Where a review relates to a suspicion report, the provider may be legally prohibited from explaining. That is a legal constraint on them, not evasion.
Will a freeze at one provider affect an application elsewhere? It can. Applications generally ask about prior account closures and terminations, and answering inaccurately is far more damaging than the original event.