Sounds a lot like the various AdSense horror stories. A recent one:
http://groups.google.com/group/android-discuss/browse_thread...
The basic problem is that if you're a low-margin Internet-scale transactional business, the marginal cost of distinguishing fraud from unusual non-fraud is higher than the marginal benefit from letting the transactions through. And if you're Paypal and you get the float on a bunch of locked funds without the need to following banking regulations, it's definitely not in your best interest to do.