It is complicated. For example, New York's Department of Financial Services "interposed no objection to PayPal offering certain of its payment processing services to New York customers without being licensed as a money transmitter" in 2002 [1]. These rules are complex alone, complex in their interrelations and subject to competing regulatory interests.

I work in a regulated financial forum. I've seen, or been relayed through regulators, accounts concerning money transmitters needing to hold funds for more than 180 days to finish an investigation per their internal policy. At that point, the contract doesn't matter--statute trumps. This might be unique to New York, but I doubt we're the only state or territory with these rules (usually, our laws are the most cutting).

If it's customer versus compliance, the customer almost always has to engage regulators or sue to make progress. When using money transmitters like PayPal to not only move funds but also hold them you're giving up a lot of the regulatory protection and venue-provisioning you get with more sophisticated services. If a business relies on PayPal, its management needs to talk to a lawyer and do more research.

[1] http://www.dfs.ny.gov/legal/interpret/lo020603.htm

NY may have been ok with paypal operating that way in 2002, but that has clearly changed:

https://www.paypalobjects.com/webstatic/en_US/licenses/NY_li...