Stripe Disputes: Takeovers, Shutdowns And Collections

Every merchant that opens a Stripe account accepts the Stripe Services Agreement. That document decides what happens when the account is hacked, frozen, closed or sent to collections.

It also sends nearly every dispute to private arbitration, where the loser pays the winner’s lawyers.

The terms you accepted at signup

Stripe “is entitled to rely on any instruction or action taken within User’s Stripe Account” (SSA, § 3).

The “User is solely responsible for any losses, damages or costs” arising from hacking or unauthorized access, unless Stripe’s own gross negligence, fraud or willful misconduct caused them (SSA, § 3).

Stripe’s total liability is capped at the fees paid in the prior 12 months (SSA, § 8.4).

The Payments Terms add that the merchant bears fraudulent transactions from unauthorized account access (Stripe Payments Terms, § 3.9).

Merchant account takeovers

Most Stripe takeovers begin with a compromised email account. Hackers then adds an owner, changes the payout bank account, and drains the balance or runs fraudulent charges.

The FBI recorded approximately 4,700 account takeover complaints and $359.7 million in losses in 2025 (IC3 2025 Internet Crime Report, p. 12).

Dilendorf Law Firm has seen a sharp rise in business takeovers, and the Five Eyes agencies warn that “AI is not a future consideration – it is already here” (NSA, June 22, 2026).

The contract puts the loss on the merchant; however, there is still legal course avaialable. The gross-negligence exception and Stripe’s own verification conduct are where these cases are won or lost, depending on individual facts/circumstances.

Shutdowns, frozen payouts and reserves

Stripe could immediately suspend the services if “Stripe reasonably believes User’s activity increases, or may increase, the rate of fraud that Stripe observes” (SSA, § 10.1(b)(i)(6)).

It could also close the account “at any time” for convenience (SSA, § 10.1(b)(ii)(1)).

Moreover, if Stripe’s risk systems flag the account, Stripe could delay or cancel payouts and impose a reserve to mitigate potential losses.

The merchant “acknowledges that Stripe has sole control over the Reserve” (Stripe Financial Services Terms, § 3.3(a)).

Release comes only when “Stripe is satisfied that the relevant risk exposure has been mitigated” (Id.).

The liability cap does not apply to claims “for failing to transfer any settlement funds the Stripe Parties receive and owe to User” (Stripe Payments Terms, § 12).

How Stripe collects

If the balance is negative, Stripe “may, to the extent Law permits, deduct, recoup or setoff these amounts” from the Reserve, pending payouts, the account balance, each linked bank account and a backup payment method (SSA, § 7.2(c)).

Self-help comes first, arbitration second. Exercising setoff “does not constitute a waiver of any right to compel arbitration” (SSA, § 11.4(a)(iii)).

A merchant who owes money “is also liable for all costs incurred by the other party” during collection, including attorneys’ fees, arbitration costs, agency fees and interest (SSA, § 11.5).

After a takeover, the victim could become the respondent in a collection claim for chargebacks that hackers caused.

Mandatory arbitration and who pays

All disputes with Stripe “will be determined by binding arbitration by a single arbitrator” (SSA, § 11.4(a)(i)).

For U.S. merchants disputes are resolved in San Francisco and the American Arbitration Association administers under its Commercial Arbitration Rules (SSA, § 13.2.1(a)–(b)).

Fees follow the AAA Commercial Arbitration Fee schedule (SSA, § 13.2.1(d)).

There is no jury and no class action, and the proceeding is confidential (SSA, §§ 11.4(c), 13.2.3, 13.2.4).

The decisive clause is fee-shifting. “The arbitrator or court will award to the prevailing party, if any, its reasonable attorneys’ fees and costs incurred in connection with such proceeding” (SSA, § 11.5).

A weak claim can therefore cost a merchant twice. The merits, the cap, the fee schedule and the arbitrator pool must be evaluated together before filing.

Arbitration starts with a written notice of dispute to notices@stripe.com and a 30-day resolution window (SSA, § 11.4(b)).

This article is for general informational purposes only and does not constitute legal advice. Reading it does not create an attorney-client relationship with Dilendorf Law Firm. Attorney Advertising.