Recurring ACH payments work by moving money between two bank accounts on a repeating schedule — weekly, biweekly, or monthly — through the Automated Clearing House Network, which is governed by Nacha operating rules.1Nacha. Nacha Operating Rules – New Rules Each cycle, either the payer’s bank pushes funds out or the payee’s bank pulls them in, and that single difference changes which rules apply and what you can do about a payment you don’t want.
Credits Push, Debits Pull
An ACH credit is a push. The sender tells their bank to move money outward. Payroll is the familiar example: your employer’s bank pushes wages into your account on payday. If you schedule a recurring bill payment through your own bank’s online portal, that’s also a credit, because your bank is sending funds on your behalf.
An ACH debit is a pull. You give a company permission to reach into your account and withdraw funds on a schedule. Mortgage payments, insurance premiums, and streaming subscriptions typically run this way. Because someone else controls the timing and the amount, debits carry more consumer-protection rules than credits.
Setting Up a Recurring Payment
To set up either direction you need the same information: your bank’s nine-digit routing number, your account number, whether the account is checking or savings, and the name of your financial institution. Both numbers appear at the bottom of a paper check, in your online banking portal, and on your monthly statement. A wrong routing or account number is the most common setup error, and it usually produces a returned transaction rather than a payment to a stranger, because the receiving bank verifies the number matches an open account.
For debits, Nacha’s rules require the company to get your authorization before the first withdrawal.2Nacha. The Importance of Compliant ACH Authorizations That authorization has to state the payment amount (or a method for figuring it out), how often you’ll be charged, and your right to revoke permission. There’s no single required format: paper forms, online checkboxes, and recorded phone calls can all qualify, so long as the terms are clear enough that both sides agree on what was authorized.3Nacha. Sample Authorization for Direct Payment via ACH
If you authorize a debit through a website or mobile app, the company is required to use a fraud-detection system and to validate that your account is real and open before the first debit posts.4Nacha. Supplementing Fraud Detection Standards for WEB Debits If you later update your account number with that company, it has to re-validate the new one before pulling from it.
How the Money Moves
Once authorization is in place, each scheduled payment runs through the same pipeline. The bank starting the transaction — yours if you’re pushing, the company’s if they’re pulling — is the Originating Depository Financial Institution, or ODFI. The ODFI bundles your transaction with thousands of others into a batch file and sends it to one of the two ACH Operators: the Federal Reserve or The Clearing House. The operator sorts the entries and routes each to the Receiving Depository Financial Institution (RDFI), the bank on the other side.5Nacha. How ACH Payments Work
Roughly 80 percent of ACH payments settle within one business day. Debits, under Nacha rules, cannot have a settlement date more than one business day out. Credits can take up to two business days at the sender’s option, though most also settle in one.6Nacha. The Significant Majority of ACH Payments Settle in One Business Day or Less
Same Day ACH
When standard timing isn’t fast enough, Same Day ACH can settle a payment of up to $1 million on the same banking day.7Nacha. Same Day ACH FedACH offers three daily windows:
- Files received by 10:30 a.m. ET settle at 1:00 p.m. ET.
- Files received by 2:45 p.m. ET settle at 5:00 p.m. ET.
- Files received by 4:45 p.m. ET settle at 6:00 p.m. ET.
These deadlines apply to when the operator has your bank’s file, not when you tap “submit.” Your bank usually has an earlier internal cutoff, so a 2:00 p.m. transfer might miss the 2:45 window.8Federal Reserve Financial Services. FedACH Processing Schedule
When the Amount Changes
Many recurring debits aren’t the same dollar amount every cycle. Utility bills, variable-rate insurance premiums, and some loan payments move around. Federal rules address this directly: when a preauthorized transfer will differ from the previous amount or from the amount you originally authorized, the company or your bank must send you written notice of the new amount and date at least 10 business days before the transfer.9eCFR. 12 CFR 1005.10 – Preauthorized Transfers
You can also ask for a simpler arrangement: notice only when the amount falls outside an agreed-upon range, or differs from the last payment by more than a set dollar amount. The company has to offer you a choice between full notice of every variation and the range-based approach. If you keep getting surprised by the amount, that 10-day notice rule is worth citing when you push back.
Stopping a Recurring Payment
Stopping a recurring debit involves two separate steps that people often mix up. Do both.
Revoke Your Authorization With the Company
First, tell the company that pulls money from your account that it no longer has permission to do so. The method and timing follow whatever the original authorization agreement specifies: some require written notice, others accept email or phone. This step addresses the underlying relationship — without valid authorization, the company isn’t supposed to originate future debits against your account. Revoking the payment permission does not cancel the underlying contract or wipe out any debt you owe. You still have to settle the balance some other way.
Place a Stop-Payment Order With Your Bank
The stop-payment order is your backup. If the company tries to pull funds anyway, your bank blocks the debit. Under Regulation E, you can place a stop-payment order orally or in writing at least three business days before the next scheduled transfer.10eCFR. 12 CFR 1005.10 – Preauthorized Transfers If you call it in, the bank can require written confirmation within 14 days; if you don’t follow up in writing when asked, the oral order expires after those 14 days.9eCFR. 12 CFR 1005.10 – Preauthorized Transfers
Banks commonly charge a fee for stop-payment orders, and the order typically lasts a set period (often around six months, though it varies). If the recurring debit continues past that window, you may need to renew the order. Keep confirmation numbers and copies of every written notice. Those records matter if a company debits your account after you revoked authorization and the bank has to investigate.
Your Rights When Something Goes Wrong
The Electronic Fund Transfer Act and Regulation E protect consumers whose accounts are debited without proper authorization. These protections cover personal accounts only. Business and commercial accounts aren’t covered.
Liability for Unauthorized Transfers
How much you can lose depends on how fast you report the problem:
- Report within 2 business days of learning of the loss, and your liability is capped at $50 or the amount of unauthorized transfers that occurred before you notified the bank, whichever is less.
- Report after 2 business days but within 60 days of the statement showing the problem, and your liability can rise to $500, consisting of the first-tier amount plus unauthorized transfers that occurred between day 2 and the date you notified the bank — but only for amounts the bank can show would have been prevented by earlier notice.
- Report more than 60 days after the statement, and you face unlimited liability for unauthorized transfers made after that 60-day window closes and before you finally notify the bank.
The gap between $50 and unlimited exposure makes the 60-day statement review the most important deadline in the whole system.11eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
Error Resolution and Provisional Credit
When you report an unauthorized or incorrect recurring debit, the bank has 10 business days to investigate and 3 business days after that to report its findings. The bank can take up to 45 days instead, but only if it provisionally credits your account within 10 business days of your report. That provisional credit covers the full disputed amount (the bank may hold back up to $50 if it reasonably believes an unauthorized transfer occurred and has met certain disclosure requirements), and you get full use of those funds while the investigation runs.12eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors
If the bank concludes no error occurred, it can reverse the provisional credit, but it has to notify you at least 3 business days beforehand and explain its findings. You can ask for the documents the bank relied on.
When a Recurring Payment Fails
A recurring debit that bounces — usually from insufficient funds or a closed account — doesn’t just vanish. The RDFI returns the transaction with a reason code, and the entry flows back to the company that originated it. Your bank may charge an insufficient-funds fee, and the company may add its own returned-payment fee or late charge on top of what you already owed.
The underlying obligation doesn’t go away. The company will usually retry the payment (Nacha caps retry attempts to prevent endless cycling) or reach out to arrange a different method. If the account is closed or the routing number is wrong, the return is permanent and the company has to contact you directly. Repeated failures can prompt the company to cancel the recurring arrangement entirely, which may trigger late fees or service interruptions under the contract you signed.