Yes, an ACH transaction can be reversed, but only in narrow circumstances and only if you act fast. If you sent the payment and made a processing error, you have five banking days. If money was pulled from your personal account without your permission, you generally have up to 60 days from the date your statement was sent before your liability protections start to disappear. Miss those windows and recovery gets much harder.
When the Sender Can Reverse an ACH Payment
The National Automated Clearing House Association (Nacha) writes the rules that govern ACH transfers between banks. Under those rules, the party that initiated a payment (the “Originator”) can reverse it only when one of four specific errors occurred:
- The same transaction was submitted more than once.
- Funds were sent to the wrong account.
- The payment was for the wrong dollar amount.
- A debit was processed earlier than intended, or a credit later than intended.
Nothing else qualifies. Nacha explicitly bars reversals for reasons like the sender running out of money or changing their mind.1Nacha. Reversals
The reversal must reach the receiving bank within five banking days of the original settlement.2Nacha. Reversals and Enforcement That’s a tight window given how many errors aren’t caught the same day a batch processes. If you miss it, Nacha rules give you no way to force the receiving bank to return the money. Your only options are asking the recipient to send it back voluntarily or pursuing them in court.
Consumer Rights When Money Is Pulled Without Permission
If someone debited your personal bank account without your authorization, a different set of rules applies. The Electronic Fund Transfer Act and its implementing Regulation E give you the right to dispute unauthorized debits and get your money back.3eCFR. 12 CFR Part 1005 – Electronic Fund Transfers (Regulation E) An “unauthorized” transfer means someone initiated a debit from your account without your actual authority and you got no benefit from it.
How much you can be held responsible for depends on how fast you notify your bank:
- Within 2 business days of learning about the unauthorized transfer: your liability is capped at $50.
- After 2 business days but before 60 days from when your statement was sent: liability rises to $500.
- After 60 days from the statement date: no cap on transfers that occur after the 60-day mark.
The jump from $50 to $500 to unlimited is steep, and it turns entirely on how quickly you speak up.4eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers The 60-day clock runs from the date the bank sends the statement, not the date you open it.
How to File a Dispute With Your Bank
Most banks let you start a dispute through their website, app, or by phone. Whichever channel you use, have this ready: the exact posting date, the dollar amount to the cent, and the name of the company that initiated the debit. If you can find the 15-digit trace number on your statement or in online banking, include that too. It’s a unique tracking ID assigned to every ACH transaction and helps your bank locate the payment in the clearing system.
For unauthorized debits, your bank will typically ask you to sign a Written Statement of Unauthorized Debit (WSUD). This is a formal document, signed under penalty of perjury, in which you attest that you did not authorize the transaction or that it was processed incorrectly. The WSUD is what your bank uses to communicate with the other bank and to assign the correct return reason code. Code R10 means you don’t recognize the company or never gave it permission to debit your account. Code R07 means you previously authorized the company but revoked that authorization.5Nacha. Differentiating Unauthorized Return Reasons
A word of caution: signing a WSUD in bad faith carries real risk. Banks can reverse a provisional credit if the investigation clears the merchant, and a false statement on the form could expose you to legal liability. Banks also track dispute patterns, and repeated frivolous claims can lead to account closure.
What Your Bank Must Do After You Report It
Once you notify the bank of an error, it has 10 business days to investigate and decide whether an error actually occurred. If it confirms the problem inside that window, it has to correct the error within one business day.6Consumer Financial Protection Bureau. 1005.11 Procedures for Resolving Errors
If the bank needs more time, it can extend the investigation to 45 days, but only if it provisionally credits your account within the first 10 business days. The provisional credit must cover the full disputed amount (the bank may withhold up to $50 if it reasonably believes an unauthorized transfer occurred and has met its disclosure obligations), and you get full use of those funds while the investigation continues.
If the bank ultimately concludes no error occurred, it can claw back the provisional credit, but not without warning. It has to send you a written explanation, tell you the date and amount of the debit, and honor checks and preauthorized payments from your account without overdraft fees for five business days after the notification. You also have the right to request copies of any documents the bank relied on.6Consumer Financial Protection Bureau. 1005.11 Procedures for Resolving Errors Those documents are your starting point if you want to escalate.
Stopping Future Recurring Debits
Reversing a past transaction and blocking a future one are separate processes. If a subscription, gym, or lender has been auto-debiting your account and you want it to stop, Regulation E gives you the right to end it directly through your bank. You don’t need the company’s cooperation.
Contact your bank at least three business days before the next scheduled payment and ask for a stop-payment order. You can do this orally or in writing. If you call it in, your bank may require written confirmation within 14 days. If you don’t provide the written follow-up, the oral order expires and future debits can go through.7eCFR. 12 CFR 1005.10 – Preauthorized Transfers
Once the bank knows you’ve revoked authorization, it has to block future debits from that payee. It cannot wait for the company to stop sending them. Most banks charge a fee for stop-payment orders. It’s also good practice to tell the company directly that you’re revoking authorization, since that reduces the number of debits your bank has to reject on your behalf.
If You Were Tricked Into Sending Money
The type of ACH transaction matters. A debit (pull) payment is when a company reaches into your account and takes money. If that debit was unauthorized, Regulation E gives you strong dispute rights on personal accounts.
A credit (push) payment is when you send money to someone else, like a direct deposit or a person-to-person transfer. If a scammer talked you into sending money through a push payment, your options are far more limited. You authorized the transfer, even if you were deceived about who was on the other end, which makes Regulation E’s unauthorized-transfer protections a poor fit. Contact your bank as fast as possible; if the funds haven’t left the receiving account yet, the bank may be able to freeze them. Report the fraud to the FTC at ReportFraud.ftc.gov.8Consumer Advice – FTC. What To Do if You Were Scammed
Business Accounts Don’t Get the Same Protection
Regulation E defines a consumer as a natural person with an account established primarily for personal, family, or household purposes.3eCFR. 12 CFR Part 1005 – Electronic Fund Transfers (Regulation E) If you’re operating a business account, none of the liability caps or dispute timelines above apply to you.
Business accounts fall under the Nacha Operating Rules and whatever your bank agreement says. In practice, that usually means much shorter reporting windows, often one to two banking days. Businesses often assume they have the same 60-day cushion consumers get, and they don’t.
What Happens If You Miss the Deadline
These deadlines are unforgiving. A sender who misses the five-banking-day window has no Nacha remedy left and has to negotiate directly with the recipient or go to court.
For consumers, missing the 60-day statement deadline doesn’t wipe out every right. You can still report the unauthorized transfer, and your bank may still investigate. But Regulation E stops limiting your liability for transfers that occur after the 60-day window closes and before you give notice.4eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers In the worst case, you absorb the full loss. The most effective habit is checking your statements often, ideally weekly, so problems surface while the clock still has time on it.