I highly doubt they have any legal right to keep your money pending as a punishment for taking advantage of them. Perhaps they can claim they need time to research it, but I doubt that'll hold as they have no license to act as a bank & hold peoples money.