IMHO, holding hostage is a no no. However simple retention is very normal. I think anyone would be lying if they say that when the merchant requests a ZBL, they don't try to sell them.