Yes, ACH payments can be traced. Every transfer moves through the network with a 15-digit Trace Number assigned by the sending bank, along with routing numbers, account numbers, and the legal names of both parties, all recorded in a standardized file that participating banks can reference long after the money settles.1ACH Guide for Developers. ACH File Details If a payment you sent or expected has gone missing, your own bank is the one that runs the trace.
What Makes an ACH Payment Traceable
The core identifier is the Trace Number. The sending bank assigns it in ascending order to uniquely mark each entry within a batch, and it travels with the payment all the way to the receiving bank. Alongside it, the ACH file records the routing numbers of both banks, the account numbers used, and the legal names on each side. A Standard Entry Class code describes the kind of payment: PPD for a consumer transaction like a direct deposit, CCD for a business-to-business transfer.2ACH Guide for Developers. ACH File Details – Section: Standard Entry Class Codes
You can usually find the Trace Number yourself through your online banking portal or the payment platform that originated the transfer. Look under a heading like “transaction details” on the page for the individual payment. Having that number in hand before you call your bank cuts the back-and-forth considerably.
When a Trace Is Actually Needed
ACH payments do not move in real time. They are grouped into batches and released at scheduled intervals, so a payment that seems late may simply not have settled yet. Standard ACH items that are not eligible for same-day processing settle at 8:30 a.m. ET on the next banking day. Same-day ACH settles across three windows during the same business day, with interbank settlement at 1:00 p.m. ET, 5:00 p.m. ET, and 6:00 p.m. ET.3Federal Reserve Financial Services. FedACH Processing Schedule
A trace request makes sense once a payment has missed its expected settlement window. For a standard payment, that generally means the next banking day has passed. For same-day ACH, it means the business day has closed without the funds showing up.
How to Request a Trace
Contact your own bank. You do not call the recipient’s bank, and you do not contact the ACH operators directly. If you are the sender, your bank uses the 15-digit Trace Number to query the receiving bank and confirm where the money ended up. If you are the recipient waiting on a deposit that never arrived, your bank works the same process in reverse.
Your bank handles the messaging with the other institution and reports back to you. Most informal trace inquiries get a response within a few business days, though no regulation sets a hard timeline for a trace itself, and the pace depends on each bank’s procedures. If the trace shows the payment went to the wrong account because of a bad routing or account number, the banks coordinate to recover or redirect it. The sooner you flag the problem, the better the chances of pulling the funds back before an unintended recipient withdraws them.
Deadlines for Reporting a Problem
Tracing a payment is one thing; preserving your legal protections is another, and the clock runs on the second. Under Regulation E, you have 60 days after your bank sends the periodic statement showing the error to report it to your financial institution.4eCFR. Part 1005 Electronic Fund Transfers (Regulation E) For unauthorized transfers, how quickly you call also sets how much money you can be on the hook for.
- Report within two business days of learning that an access device was lost or stolen, and your liability is capped at the lesser of $50 or the amount of unauthorized transfers that occurred before you gave notice.5Consumer Financial Protection Bureau. 1005.6 Liability of Consumer for Unauthorized Transfers
- Report after the two-day window but within 60 days of your statement, and your liability can rise to $500 for transfers that occur after the two-day mark.
- Wait longer than 60 days from the statement date, and you face potentially unlimited liability for unauthorized transfers that happen after that period expires, if the bank can show it would have prevented them had you reported sooner.5Consumer Financial Protection Bureau. 1005.6 Liability of Consumer for Unauthorized Transfers
Review your statements as they arrive. A few extra weeks of silence can shift hundreds or thousands of dollars onto you.
What Your Bank Must Do After You Report
Once you notify the bank, Regulation E takes over. The bank has 10 business days to investigate and determine whether an error occurred. If it finds one, it must correct the account within one business day and report the results to you within three business days of finishing the investigation.6Consumer Financial Protection Bureau. 1005.11 Procedures for Resolving Errors
The bank can extend the investigation to 45 days, but only if it provisionally credits your account for the disputed amount within those first 10 business days.7eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors You can use that provisional credit while the investigation runs. The bank may withhold up to $50 from the provisional credit if it reasonably believes an unauthorized transfer occurred and has met its disclosure requirements.
If you report the error by phone, the bank can require written confirmation within 10 business days. Skipping that written follow-up can let the bank off the hook for provisional credit.7eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors Keep a log of every call, the date, and the representative’s name.
What a Trace or Dispute Can Recover
When a trace or dispute confirms that an ACH debit was unauthorized, the receiving bank sends the funds back using standardized return codes. Two matter most on the consumer side:
- R10, used when you do not recognize the company that debited your account, have no relationship with the originator, or never authorized the charge.8Nacha. Differentiating Unauthorized Return Reasons
- R07, used when you previously authorized a company to debit your account but have since revoked that authorization.8Nacha. Differentiating Unauthorized Return Reasons
R10 signals possible fraud; R07 points to a billing dispute with a company you had dealt with. Your bank picks the code based on what you tell them, so be specific about whether you ever authorized the originator in the first place.
Fees are worth asking about if you run a business. Many banks absorb basic trace requests for consumer accounts, but business customers sometimes see pass-through charges from operator-level services. For individual consumers disputing errors under Regulation E, the bank generally cannot charge you for the investigation itself.
Who Else Can See ACH Records
One boundary worth knowing: ACH tracking data is not public. The Bank Secrecy Act requires banks to keep anti-money-laundering programs that monitor transactions and report suspicious activity, and they must make supporting records available to FinCEN, bank regulators, and law enforcement conducting BSA examinations.9eCFR. 31 CFR Part 1020 – Rules for Banks Law enforcement can obtain specific records through subpoenas, and the FBI can use National Security Letters in national security investigations. Financial institutions must retain the underlying records for five years.10eCFR. 31 CFR 1010.430 – Nature of Records and Retention Period
A third party cannot pull ACH tracking data on someone else without a court order or documented legal standing. If you are trying to track a payment, the path runs through your own bank, with the Trace Number in hand and the Regulation E clock in mind.