If you run a small business that takes bookings, hires out equipment, provides accommodation, or sells anything where “extras” might be added later, you’ve probably come across the idea of a credit card pre‑authorisation.
It can be a practical way to protect your cash flow, reduce no‑shows, and cover incidentals. But it’s also an area where misunderstandings can quickly lead to customer complaints, chargebacks, and reputational damage.
The good news is that with the right setup and clear customer communication, credit card pre‑authorisation can be used responsibly and in a way that supports your business (rather than creating disputes). Below, we’ll break down how it works, when to use it, and the main legal and compliance issues Australian small businesses should keep in mind.
What Is A Pre Authorization Credit Card Payment?
A pre authorization credit card payment (also called a “pre‑auth” or “authorisation hold”) is when you place a temporary hold on a customer’s card for a set amount, without actually taking the money as a completed payment at that time.
In simple terms:
- Pre‑authorisation checks the card can cover the amount and reserves it temporarily.
- Capture/charge is when the payment is actually processed and funds are taken.
- Release is when the hold drops off and the funds become available again to the customer.
From a customer’s perspective, a pre‑auth can feel like they’ve been “charged”, because the available balance on their card may reduce while the hold is in place. This is why disclosure and clear wording matter so much.
Common Examples Of Credit Card Pre Authorisation Australia Businesses Use
In practice, credit card pre authorisation Australia businesses commonly use includes:
- Hotels and accommodation (for incidentals, minibar, damages, late checkout)
- Car hire and equipment hire (security bond for damage, late return, fuel, cleaning)
- Clinics and appointment‑based services (reducing no‑shows, late cancellations, payment assurance)
- Trades and services (where final price may change due to materials or additional labour)
- Venue hire and events (damage bonds, overtime, additional charges)
Pre‑authorisation is often used similarly to a “bond”, but it’s not always the same legally or operationally. A bond/security deposit is usually money actually received and held (sometimes in trust, depending on the industry). A pre‑auth is a hold placed through the card payment system.
When Should You Use Credit Card Pre‑Authorisation (And When Shouldn’t You)?
Pre‑authorisation can be a strong risk management tool, but it isn’t a one‑size‑fits‑all solution. As a small business, you’ll usually get the best results when the pre‑auth is tied to a specific, transparent purpose.
When It Can Make Sense
- There’s a real risk of extra charges (damage, cleaning, incidentals, overtime, missing items).
- You need to confirm ability to pay before supplying high‑value goods/services.
- You want to reduce payment disputes by confirming card validity early.
- Your business model relies on reservations and no‑shows cause meaningful losses.
When You Should Be Cautious
- The amount is unclear or hard to justify (for example, a large hold “just in case”).
- You can’t clearly explain the purpose and how/when it will be released.
- Your business frequently deals with vulnerable customers or situations where a hold could create hardship (because it reduces available funds).
- Your systems can’t reliably manage release/capture (this often leads to complaints and chargebacks).
As a practical guide, the more “optional” or “discretionary” the later charges might look, the more important it is that your terms clearly explain what you can charge for, when, and how you will calculate it.
Is Pre‑Authorisation Legal In Australia? Key Compliance Issues For Small Businesses
In most cases, it can be lawful for a business to use pre‑authorisation in Australia. The legal risk usually isn’t the pre‑auth itself - it’s how you communicate it and how you later use it (for example, capturing funds for unclear reasons or without proper notice).
It’s also worth keeping in mind that some practical issues (like how long a hold lasts, and how quickly it’s released) are often driven by your payment provider, card scheme rules, and the customer’s bank - not just your internal policy. That makes it even more important to avoid overpromising specific timelines.
Here are the main compliance areas to think about.
Australian Consumer Law (ACL): Be Clear, Fair, And Not Misleading
If you sell to consumers, the Australian Consumer Law (ACL) is central. Your marketing, booking flow, and terms should not mislead customers about:
- whether they will be charged immediately
- the amount of the hold
- how long the hold may last
- what the pre‑auth may be used for
- when you may actually charge the card
In addition, if you have cancellation charges (or plan to charge for no‑shows), your approach needs to be transparent and defensible. It’s worth pressure‑testing your wording against common cancellation disputes: a customer might accept a fair fee if it’s clearly disclosed, but they’re far more likely to challenge it if it looks “surprising” or unclear.
When you’re setting up your policies, it can help to align your approach with the broader principles behind cancellation fees compliance (clear disclosure, fair application, and consistent processes).
Pricing And Checkout Transparency
Even if a pre‑auth is not a final charge, customers often experience it like a charge. That means your point-of-sale and online checkout journey should clearly explain what will happen, in plain language.
From a compliance perspective, your pricing and payment disclosures should be consistent with the standards you’d apply to advertised price requirements - the customer should not be surprised by what appears on their statement or by a sudden reduction in available funds.
Unfair Contract Terms Risk (Especially If You Use Standard Terms)
Many small businesses use standard form terms (for example, online booking terms, hire agreements, accommodation terms, or general terms of trade). If your terms give you very broad discretion to:
- place a hold for any amount,
- keep it for as long as you want, or
- charge later for loosely defined reasons,
you increase the risk of disputes and potential issues under Australia’s unfair contract terms regime (particularly if your customer is a consumer or a small business customer). In practical terms, “we can charge you anything we think is reasonable” is the sort of clause that tends to cause trouble.
How Do You Explain Pre‑Authorisation To Customers (So It Doesn’t Backfire)?
If you take only one thing away from this article, make it this: most pre‑authorisation problems are communication problems.
The most effective approach is to explain pre‑authorisation at multiple points, using consistent wording.
Where To Disclose It
Consider disclosing the pre‑auth:
- Before checkout (on the booking page or quote)
- At checkout (next to the “Pay” button)
- In your confirmation email/SMS
- In your written terms (so there’s a permanent record)
- At the counter (for in‑person transactions)
What To Say (Plain‑English Checklist)
Your wording should cover:
- It’s a pre‑authorisation hold (not a completed charge)
- The amount (e.g. “$200 hold”)
- Why it’s taken (e.g. incidentals/damage/no‑show protection)
- When you may capture funds (what triggers a later charge)
- How long it may take to release (and that timing can depend on the customer’s bank, card scheme, and payment provider)
- How disputes will be handled (process and contact point)
Make Sure Your Terms Match Your Actual Process
A common mistake is to copy generic wording that doesn’t match what your staff actually do, or what your payment provider is set up to do.
For example, if your terms say “the hold will be released within 24 hours”, but in reality the hold can remain for several days depending on the bank (or your system captures funds automatically at a certain point), you’ve set yourself up for complaints.
This is where properly drafted Website Terms and Conditions or booking terms can make a real difference - not by being “long”, but by being accurate, clear, and aligned with your operational reality.
Payments, Deposits, And Extra Charges: Setting Up Your Process Properly
Pre‑authorisation often sits alongside other payment tools: deposits, progress payments, cancellation fees, security bonds, or post‑service invoicing. The smoother your system is, the lower your dispute risk tends to be.
Pre‑Authorisation Vs Deposit: Which One Fits Your Transaction?
There’s no single “right” choice, but here’s a useful way to think about it:
- Pre‑authorisation is often best where the final amount is uncertain or you need protection for contingencies.
- A deposit is often best where you want a committed upfront payment to lock in a booking (and you can clearly explain the deposit/refund rules).
If you’re taking deposits or charging cancellation/no‑show fees, consider whether your payment terms (including timing and consequences for late payment) are consistent across the customer journey. In many cases, clear invoice payment terms and a matching booking policy reduce friction and improve cash flow.
If You Capture Funds Later, Have A Clear Basis For The Amount
If you later convert a pre‑authorisation into a charge (for example, for damage or an extra service), you should be able to show:
- what happened (facts)
- how the charge was calculated
- why it is permitted under your terms
- that you acted consistently with how you treat other customers
This isn’t just about legal defensibility. It’s also about chargeback risk. Card disputes are often decided quickly, and businesses with clear documentation and clear customer communications tend to be in a much better position.
Avoid “Surprise” Charges By Using A Written Agreement For Higher‑Risk Transactions
If you operate in a higher-risk environment (for example, high‑value hire, bespoke services, or events), it may be worth using a written agreement that clearly explains what you can charge for and when.
Depending on your business model, a tailored payment contract can help you set expectations early and reduce disputes when something goes wrong.
Privacy And Security: What If You Store Card Details Or Take Payments Online?
Even if you’re “only” using pre‑authorisation, you’re still dealing with payment data and customer personal information. That means privacy and security should be part of your setup from day one.
Be Very Careful About Storing Card Details
Some businesses are tempted to store card details “just in case” they need to charge later. This can create significant risk - both commercially and from a compliance standpoint.
If your business model involves storing card details (or you’re considering it), it’s worth reviewing your approach against the key issues raised in storing credit card details obligations. In many cases, using secure tokenisation through a reputable payment provider is safer than storing card numbers yourself.
Online Bookings And Data Collection: Have The Right Documents In Place
If you take bookings online, you’re almost certainly collecting personal information (names, emails, phone numbers, addresses, booking preferences). Even if you’re a small business, privacy compliance is still important - and customers increasingly expect transparency.
That said, the legal requirements can vary. Some small businesses are covered by the Privacy Act 1988 (Cth), while others may be exempt (for example, some “small business operators” under the Act). Regardless, if you’re collecting personal information through a website or app, having a clear Privacy Policy is a common baseline and can be required in many situations (including where you’re covered by the Privacy Act, or where your platform/payment provider requires it).
Direct Debit And Alternative Payment Methods
Some businesses combine card pre‑auth with other payment methods like direct debit (for recurring services, memberships, or ongoing accounts). Direct debit has its own compliance considerations around authorisation, disputes, and record‑keeping.
If you’re using bank account debits as part of your payment strategy, keep your processes aligned with direct debit laws and make sure your customer consent flow is clear and provable.
Key Takeaways
- A pre authorization credit card hold can be a practical tool for small businesses, but it needs to be used carefully to avoid disputes and chargebacks.
- Most problems arise from unclear communication, not from the pre‑authorisation itself - disclose the hold amount, purpose, timing, and release process in plain English.
- Make sure your approach aligns with Australian Consumer Law (ACL), especially around transparency, cancellation/no‑show fees, and avoiding misleading conduct.
- Keep your written terms consistent with what your payment systems and staff actually do, particularly if you may capture funds later.
- If you store card details or take payments online, build privacy and security into your process from the start, and consider whether the Privacy Act applies to your business (and any privacy obligations imposed by your provider/platform).
If you’d like legal help setting up customer terms, booking terms, or payment policies around credit card pre‑authorisation, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.
