Embodiments disclosed herein generally related to a system and method for exempting a transaction from a transaction hold. A computing system determines that an account associated with a user has been compromised. The computing system places a transaction hold on the account that has been compromised. The computing system generates one or more safe zones based at least on historical transaction data associated with the user. The one or more safe zones exempt from the transaction hold. The computing system receives a verification request for a transaction associated with the account. The verification request includes at least a merchant identification code associated with the third party merchant. The computing system determines that the third party merchant is included in at least one safe zone of the one or more safe zones. Based on the determination, the computing system verifies the transaction with the server of the third party merchant.