To my knowledge, PayPal does not hold funds “forever”. They penalise the account holder by locking it away for 180 days. At that point, they can withdraw the balance to a bank account. I have multiple friends and clients who had this happen to them, but in all cases, they were exposed to higher risk by accepting payments through donation forms, or a marketplace where they sell directly to customers. (Despite what feels like an anecdotal high failure rate, somehow I’ve never had an issue running my own marketplace for the past decade.)