ACH Vendor Form: W-9, Bank Verification, and Submission

An ACH vendor form authorizes a business or government agency to deposit payments directly into your bank account through the Automated Clearing House network. Federal agencies use a standardized version called SF 3881; private companies and state agencies use their own proprietary versions. Whatever the format, every ACH vendor form collects the same three things: your business identity, your tax identification number, and your bank account details. Getting those right the first time is the difference between payments arriving on schedule and weeks of back-and-forth with an accounts payable team.

What to Gather Before You Start

On the business side, you need your legal entity name exactly as it appears in IRS records, your mailing address, and a contact person with a phone number. A mismatch between the name on the form and the name tied to your tax ID is one of the most common reasons for processing delays.

On the banking side, you need your financial institution’s name and address, the nine-digit routing transit number, your account number, and whether the account is checking or savings. On SF 3881, the bank itself fills in the routing and account fields and an authorized bank official signs to confirm the information.

Why a W-9 Comes With It

Nearly every payer will ask you to submit an IRS Form W-9 alongside the ACH vendor form. The W-9 captures your Taxpayer Identification Number, which is either a Social Security Number for sole proprietors or an Employer Identification Number for businesses, partnerships, and other entities. Payers need this number because they are required to file information returns with the IRS reporting income they pay to you.1Internal Revenue Service. About Form W-9, Request for Taxpayer Identification Number and Certification

If you fail to provide a correct TIN, the payer is required to withhold 24 percent of each payment and send it to the IRS as backup withholding. That money counts toward your eventual tax bill, but it ties up cash flow in the meantime and creates extra paperwork to reclaim at tax time.2Internal Revenue Service. Backup Withholding

Where to Get the Form

Federal Agencies

If you are doing business with a federal agency, you will use Standard Form 3881, the ACH Vendor/Miscellaneous Payment Enrollment Form. Federal regulations require that virtually all vendor payments be made electronically, with no waiver available, so completing this form is not optional. You must enroll separately with each federal agency that pays you.3Bureau of the Fiscal Service. Vendor Guidance

SF 3881 has three sections. The agency fills in its own identifying information. You fill in your company name, address, contact, and TIN. Your bank fills in the routing number, account details, and an authorized official’s signature. Once completed, three copies go out: one to the agency, one to you, one to the bank.4General Services Administration. ACH Vendor/Miscellaneous Payment Enrollment Form SF 3881

Private Companies and State Agencies

Outside the federal government, each payer has its own ACH authorization form. Contact the accounts payable or procurement department at the organization paying you and ask for their version. A generic form or one from a different company almost always gets rejected because the fields don’t map to their financial system.

Electronic Signatures

Many organizations now accept ACH vendor forms completed and signed electronically. Under the federal ESIGN Act, an electronic signature carries the same legal weight as a handwritten one and cannot be denied enforceability solely because it is in electronic form.5Office of the Law Revision Counsel. 15 USC 7001 General Rule of Validity Typing your name, clicking an accept button, or drawing a signature with a stylus all work, as long as both parties agreed to conduct the transaction electronically.

Verifying Your Bank Account

Payers commonly ask for supporting documentation to confirm the bank account belongs to your business. The traditional option is a voided check, which shows your routing and account numbers on the MICR line at the bottom. Voided checks are no longer strictly necessary, though. Your routing and account numbers are usually available through your bank’s online or mobile banking portal, and some banks generate prefilled direct deposit forms you can download and attach.6Nacha. Direct Deposit Without a Voided Check? Absolutely!

If you don’t have checks and the payer insists on independent verification, call your bank and request a letter on bank letterhead confirming the account number, routing number, and account holder name. Some payers will also accept a screenshot from online banking showing the account details, though this varies.

Submitting the Form

Follow the payer’s delivery instructions exactly. Many organizations run secure vendor portals where you upload the form and supporting documents into an encrypted environment. Digital submission creates an automatic audit trail and speeds up processing. Look for a confirmation email or reference number after you submit.

When a portal is unavailable, the payer may accept encrypted email or physical mail. If you mail the form, address it to the specific department listed in the instructions, typically Treasury, Accounts Payable, or Vendor Management. Sending a form to a general mailbox is a good way to lose it for weeks. Do not send unencrypted banking details by regular email.

What Happens After You Submit

Once the payer receives your form, they typically validate the bank account before scheduling real payments. Two methods are common. A prenotification, or prenote, is a zero-dollar test transaction that confirms the routing and account numbers are valid and can accept credits.7Nacha. Minor Rules Topics – Prenotification Entries Alternatively, some payers send micro-entries: small credits of less than a dollar, sometimes followed by offsetting debits that bring the net to zero. The micro-entry approach often asks you to confirm the exact deposit amounts.8Nacha. Micro-Entries

Neither method is mandatory under NACHA rules; prenotes are permitted, not required. Most payers use one or the other as a safeguard. From submission to the first live payment, expect roughly 7 to 14 business days. That window covers data entry on the payer’s side, the test transaction, and internal approvals. You will usually get an email once your account is active, and payments after that follow your agreed-upon terms.

Changing or Stopping the Authorization

Switching Bank Accounts

When you switch banks or open a new account, submit a new ACH vendor form to every payer that deposits into the old account. Do this well before closing the old account. If a payment hits a closed account, it bounces back as a return, and re-processing takes additional time.

Payers who receive an automated Notification of Change from the banking network are required to update their records within six banking days of receiving the notice or before the next ACH entry, whichever is later. Don’t rely on the NOC alone. Proactively sending updated forms prevents missed or delayed payments. When you contact a payer to change bank details, expect the accounts payable team to call you back at a phone number they already have on file, not one you provide in the update request. That callback step is a basic fraud-prevention measure.

Stopping ACH Payments

To stop a payer from depositing into your account entirely, notify both the payer and your bank that you are revoking authorization. Your bank can place a stop payment order on expected incoming credits, and you should give that instruction at least three business days before the next scheduled payment.9Consumer Financial Protection Bureau. How Can I Stop a Payday Lender From Electronically Taking Money Out of My Bank or Credit Union Account Your bank may ask for written confirmation within 14 days of a phone request. Separately, notify the payer in writing so they remove your account from their system.

Protecting the Form From Fraud

ACH vendor forms are a prime target for criminals because a single changed routing number redirects every future payment. Business email compromise, where a scammer impersonates a vendor and sends fake “updated banking details,” has caused over $55 billion in losses over the past decade according to the FBI.10FBI Internet Crime Complaint Center. Business Email Compromise: The $55 Billion Scam

If you are the vendor submitting the form, never email unencrypted banking details. Use the payer’s secure portal whenever one exists. If you receive an email claiming to be from a payer asking you to “confirm” or “update” your banking information through an unfamiliar link, call the payer directly using a known phone number before responding. If you are the payer receiving a form, never process a bank account change based solely on an email. Verify through an independent phone number already on file. The few minutes that takes can prevent payments from being rerouted to someone else’s account.