You run the card, the terminal says approved, and the money feels safely on its way. Then your fulfillment slips by a week, the customer calls asking why the charge vanished from their statement, and your next capture attempt fails with a cryptic decline. Nothing about the order changed — the authorization simply expired while you were not looking. If you take deposits, run a tab, ship after a delay, or capture payment only when a job is done, this quiet clock is ticking on every open order you carry. Here is how long each card network gives you, what to do when you will not capture in time, and how an expired hold turns into a chargeback you could have avoided.
Authorize Now, Capture Later: What a Hold Actually Is
Every card payment is really two steps. Authorization asks the issuer to verify the card and set the amount aside; capture tells the network to move the money. Between those two events sits the hold: funds the customer cannot spend but you have not yet received.
Merchants split the two steps apart for good reasons. A hotel authorizes at check-in and captures the final folio at checkout. A furniture store authorizes a deposit when the order is placed and captures the balance on delivery. A contractor pre-authorizes a card before starting work and captures when the job passes inspection. Restaurants, rental shops, and equipment dealers all live on this pattern.
The catch is that an authorization is a promise with an expiration date. The card networks cap how long that promise lasts, your processor usually enforces a shorter window of its own, and the issuing bank can release the hold on the cardholder's side on its own schedule. Three different clocks, and the shortest one wins.
How Long Each Network Lets You Hold Funds
The networks publish their windows in their operating rules, and they differ more than most merchants expect.
| Network | Standard hold window | Extended / special cases |
|---|---|---|
| Visa | Card-present: 5 days. Card-not-present: 10 days | Lodging, cruise, and vehicle-rental estimated authorizations: up to 30 days. Card-not-present with the extended-authorization indicator: up to 30 days |
| Mastercard | Final authorizations: 7 days | Pre-authorizations: up to 30 days |
| American Express | 7 days on most products | Prepaid products such as Bluebird and Serve: up to 15 days |
| Discover | Card-not-present: 10 days, similar to Visa | Extended authorization: up to 30 days with the right indicator |
Two details matter more than the table. First, these are the networks' outside limits — the ceiling, not the floor. Your gateway or processor almost always cuts the window down: Stripe cancels uncaptured PaymentIntents 7 days after creation by default, and some point-of-sale setups give card-present authorizations as little as 24 hours. Second, debit cards behave worse than credit cards from the customer's perspective. A hold on a credit card reduces available credit; a hold on a debit card reduces the actual bank balance, so a week-long deposit hold can overdraw a customer who did nothing wrong. That is where most of the angry phone calls come from.
Special industries get special treatment because their business model demands it. Hotels and car-rental companies routinely hold a card for the length of a stay plus incidentals, so Visa lets lodging, cruise-line, and vehicle-rental merchants keep estimated authorizations open for 30 days when the transaction is flagged correctly. If you are in one of these categories and your holds keep expiring early, the usual cause is a missing industry flag on the authorization, not a network limit.
Reverse Instead of Capture: Releasing Holds You Will Not Collect
When you know you will not capture — the customer canceled, the job never started, the final total came in lower — do not let the hold sit until it expires. Send an authorization reversal. The merchant reverses the whole authorization when nothing is owed, or a partial reversal for the unused portion while capturing the rest normally.
A reversal is not the same as a void, though many dashboards use the words interchangeably. A void cancels the charge on the processor's side; a reversal sends an explicit release message through the network to the issuer telling it to free the held funds now. A voided authorization with no reversal can leave money frozen in the customer's account for days, until the issuer's own clock runs out. The customer sees a pending charge for an order you already canceled, assumes the worst, and calls their bank — which is exactly the phone call that precedes a dispute.
There is also a direct financial reason to reverse. In the US, Canada, Latin America, and Asia Pacific, Mastercard charges an additional fee for a pre-authorization that is neither captured nor reversed. Letting holds rot costs you money even when no customer complains.
Make reversals part of your cancellation flow, not a month-end cleanup task. The moment an order is canceled or a deposit is no longer needed, the reversal should go out the same day. Same-day reversals usually clear the pending charge from the customer's statement within one to two business days; an expired hold can linger for a week or more depending on the issuer.
How Stale Holds Turn Into Chargebacks
An expired authorization does not just mean a failed capture. It sets off a chain of events that ends, depressingly often, in a dispute.
It starts with the re-authorization trap. The original hold expires and drops off the customer's statement. You re-authorize to collect what you are owed, and the customer now sees two pending charges for one purchase — the dying original and its replacement — or sees a "new" charge weeks after they thought the matter was settled. From their side of the screen, it looks exactly like a double charge. Many disputes begin with a cardholder who was technically never double-charged but reasonably believed they were.
Then comes the capture-after-expiry problem. Some processors let a capture attempt proceed against an authorization the issuer has already released. The issuer may decline it, or the transaction may post without the liability protections the original authorization carried. Chargeback protection generally runs for 30 days from the authorization, but a messy re-auth-and-capture sequence weakens your representment story: your own records show overlapping authorizations and a capture disconnected from any live approval, which is a hard narrative to defend.
Finally, there are the downgrades. Capturing late — or settling for an amount meaningfully different from the authorized amount — can push the transaction out of the best interchange tier. Visa, for example, tolerates final captures within about 15 percent of the authorized amount (20 to 30 percent for restaurants and other tipped or estimated categories) before the transaction downgrades to a higher-cost tier. A restaurant that authorizes the pre-tip total and captures a generous tip three days later can pay measurably more in processing costs than one that uses incremental authorizations as the tab grows.
None of this requires fraud or bad faith. It is ordinary operational drift: holds expiring unnoticed, staff re-running cards to "fix" a failed capture, and customers disputing charges they do not recognize. The fix is procedural, not technical.
A Practical Playbook for Managing Holds
You do not need new software to get most of this right. You need a short list of habits, applied consistently.
Capture fast by default. Treat every authorization as perishable. Same-day or next-day capture should be the norm for ordinary retail sales; anything older than a few days deserves a reason. If your business model genuinely needs long holds — rentals, staged deliveries, hospitality — say so explicitly and use the network mechanisms built for it rather than hoping the standard window stretches.
Watch the age of open authorizations. Most gateways expose uncaptured authorizations in a report or dashboard. Review it on a schedule that fits your capture window: daily if your processor enforces a 7-day limit, because a hold discovered on day 8 is already dead. Businesses with enough volume automate this with a scheduled job that flags any authorization approaching expiry and either captures it or fires a fresh authorization before the old one lapses.
Re-authorize before expiry, not after failure. If fulfillment will legitimately outlast the window, do not wait for the capture to fail. Authorize again while the original is still alive, chain the new authorization ID to the order record, and reverse the old one. The customer sees overlapping pending holds for a day or two, which is far less alarming than a charge that disappears and mysteriously returns.
Use incremental and extended authorizations where they exist. When the final total grows — a bar tab, a hotel folio, a repair job with added parts — an incremental authorization raises the held amount under the original approval instead of stacking a second full hold beside it. For genuinely long horizons in travel and lodging, ask your processor about extended-authorization support rather than chaining short authorizations and hoping.
Authorize close to the final amount. Every network tolerates some variance between the authorized and captured amounts, but large gaps trigger downgrades and issuer scrutiny. If you cannot know the total in advance, authorize your best estimate plus a stated buffer, disclose the buffer to the customer, and capture the actual total promptly. A disclosed estimate captured quickly almost never generates a dispute; an undisclosed maximum captured late frequently does.
Tell the customer what is happening. Most hold-related disputes are confusion, not malice. A sentence at checkout — "We will place a temporary hold of $X, released within two business days of delivery" — plus a receipt line showing the hold amount, prevents the majority of "mystery charge" calls. For debit card customers, mention explicitly that the hold reduces their available balance until it clears.
Record Holds and Captures as Separate Events in Your Books
Authorization holds create a bookkeeping trap that mirrors the operational one. The hold is not revenue, not a receivable, and not cash — it is a contingent claim that may never become money. Businesses that book revenue at authorization time overstate sales every time a hold expires uncaptured, and then must unwind entries that should never have existed.
The clean pattern is to record nothing at authorization except, at most, a memo or a pending-orders note outside the ledger. Book the sale when you capture: debit cash or the processor clearing account, credit revenue, and separately record the processing fee as an expense rather than netting it against the sale. Gross revenue with visible fees reconciles against processor payouts; netted revenue never does.
Reconcile processor payouts against captures, not authorizations. Your settlement report lists captured transactions; your authorization report lists promises, some of which died quietly. Matching deposits to the authorization list produces phantom open items that linger for months. And when a re-authorization creates overlapping holds for one order, make sure only one capture posts to the ledger — the duplicate-hold pattern that confuses customers confuses bookkeepers just as easily, and double-posted revenue is worse than double-pending holds because it flows straight into your tax return.
Keep Your Payment Operations Organized from Day One
Authorization holds reward the same discipline as the rest of your finances: capture promptly, reverse what you will not collect, and record each event once, when it actually happens. Clear records turn a confusing tangle of holds, reversals, and re-authorizations into an audit trail you can defend — to a customer, a processor, or an examiner. Beancount.io provides plain-text accounting that gives you complete transparency and control over your financial data — no black boxes, no vendor lock-in. Get started for free and see why developers and finance professionals are switching to plain-text accounting.





