To provide ACH information, you give the requesting party three things from your bank account: the nine-digit ACH routing number, your account number, and whether the account is checking or savings. You sign an authorization form so the transfers are legally permitted, and you submit everything through a secure channel rather than plain email. Get one digit wrong and your paycheck or payment can bounce back weeks later, so the care is in the copying, not the concept.
What You Need to Hand Over
Every ACH setup asks for the same short list:
- Your full legal name as it appears on the account. Banks match this against their records under federal customer identification rules.1Federal Register. Customer Due Diligence Requirements for Financial Institutions
- The nine-digit routing number assigned by the American Bankers Association, which identifies your bank within the payment network.2American Bankers Association. ABA Routing Number
- Your account number, which points to your specific account at that bank.
- The account type, checking or savings. Picking the wrong one will bounce the transfer.
If the account belongs to a business rather than a person, the form may ask for an Employer Identification Number instead of a Social Security number. The IRS requires most businesses that hire employees or operate as partnerships or corporations to have one.3Internal Revenue Service. Get an Employer Identification Number
Where to Find Your Routing and Account Numbers
The quickest source is a personal check. The numbers printed in magnetic ink along the bottom read left to right: routing number first (nine digits), then the account number, then the check number.
No checks? Your bank’s mobile app or online banking site almost always lists both numbers under a tab called something like “Account Details” or “Direct Deposit Info.” Digital-only banks and payment apps that support direct deposit assign the same type of routing and account numbers and keep them in account settings. Monthly statements, paper or digital, usually print the account number and the bank’s routing number near the top.
If none of that works, call the bank. A representative will read the numbers to you after verifying your identity.
ACH and Wire Routing Numbers Can Differ
Some banks use one routing number for ACH and a different one for wire transfers. Direct deposit, automatic bill pay, and anything else running on the ACH network needs the ACH routing number. The bank’s website or a quick phone call confirms which is which. Using the wire number on an ACH form doesn’t compromise your account, but it delays or rejects the transfer.
Signing the Authorization Form
Most ACH setups begin with an authorization form from the employer, utility, lender, or app that will send or pull the money. Federal law requires your written or electronic signature before anyone can initiate recurring debits from your account.4eCFR. 12 CFR Part 1005 – Electronic Fund Transfers (Regulation E) This isn’t a formality. Without it, any debit from your account would be unauthorized and you’d have the right to demand the money back.
Enter your routing number, account number, and account type in the fields provided and check every digit twice. A single transposed number can route your paycheck to a stranger’s account or trigger a return that delays payment by weeks.
Some employers and billers also ask for a voided check as a backup. To prepare one, write “VOID” in large letters across the face of a blank check without covering the numbers along the bottom edge. The voided check can’t be cashed, but it lets the recipient cross-check the digits you entered on the form.
How to Send the Information Safely
Your routing and account numbers together are the keys to your account, so treat them that way. Encrypted web portals are the safest delivery method and the one most employers and billers now prefer. If you’re submitting on paper, hand the form directly to the payroll or billing office rather than leaving it in an open inbox or shared tray.
Avoid regular email. Standard email isn’t encrypted, and a compromised inbox hands your account details to whoever gets in. If email is the only option, use an encrypted attachment with the password shared separately. Secure fax still works where available, though it’s increasingly rare.
What Happens After You Submit
Before the first real transfer, the company usually confirms your account exists and belongs to you. Two methods are common.
Micro-Deposits
The company sends one or two tiny credits, each under $1, to your account. NACHA’s rules classify these as “micro-entries” and require the sender to apply commercially reasonable fraud detection when using them.5Nacha. Phase 2 of Micro-Entries Rule is Effective March 17 You find the exact amounts in your transaction history and report them back. Once they match, the link is live. Expect the deposits within two to three business days.
Prenote
A prenotification is a zero-dollar test entry sent through the ACH network to validate your routing and account numbers. If the receiving bank doesn’t return an error within about three business days, the account is treated as verified. No money moves, so you won’t see anything in your transaction history. The trade-off is a few extra days before your first real transfer.
Between verification and administrative processing, a new direct deposit or automatic payment typically takes one to two pay periods or billing cycles to go fully live.
If a Number Was Wrong or Something Looks Off
When an ACH transaction fails, the receiving bank sends back a standardized return code. The ones that show up most often after a new setup:
- R01, insufficient funds. The account didn’t have enough to cover the debit, and the bank may charge a fee for the returned item.
- R02, account closed. The transaction can’t be resubmitted to that account.
- R03, no account or unable to locate. The routing or account number was entered incorrectly, or the account doesn’t exist. This is the code that catches people who rushed through the form.
If you spot an unexpected ACH debit or a transfer that didn’t arrive, contact your bank right away. Regulation E gives you 60 days from the date your bank sends a statement to report any error on that statement. Once you notify the bank, it has 10 business days to investigate and resolve the issue, or up to 45 days if it provisionally credits your account within those first 10 business days.6Consumer Financial Protection Bureau. 1005.11 Procedures for Resolving Errors Missing the 60-day window doesn’t erase all rights, but the bank can decline to investigate errors reported after the deadline, except for unauthorized transfers, which fall under separate liability rules.
Protecting Yourself After You’ve Shared the Details
Handing over bank information carries some risk, and your financial exposure to unauthorized debits turns almost entirely on how fast you report them. The Electronic Fund Transfer Act caps your liability in tiers:7GovInfo. 15 USC 1693g – Consumer Liability
- Report within two business days of learning of the loss or theft: your maximum liability is $50, or the amount of unauthorized transfers made before you notified the bank, whichever is less.
- Report after two business days but within 60 days of your statement: liability can rise to $500 for unauthorized transfers that occurred after the two-day window and before you gave notice.
- Fail to report within 60 days of your statement: you could be on the hook for the full amount of any unauthorized transfers that happen after that 60-day period, with no cap, if the bank can show it would have stopped them had you reported sooner.
These deadlines can extend for extenuating circumstances like hospitalization or extended travel, but not for simply failing to check statements.8eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers The practical takeaway: review every statement within a few days of receiving it. That one habit is the difference between a $50 problem and an emptied account with no recourse.
You can notify the bank in person, by phone, or in writing. Written notice counts as given when you mail it or hand it off for delivery, not when the bank reads it. Call first if you suspect unauthorized activity, then follow up in writing so there’s a paper trail.
Stopping a Preauthorized Payment
Authorizing recurring ACH debits doesn’t lock you in. Federal law gives you the right to stop any preauthorized transfer by notifying your bank at least three business days before the scheduled payment date, by phone or in writing.9eCFR. 12 CFR 1005.10 – Preauthorized Transfers If you call, the bank may require written confirmation within 14 days; skip the written follow-up and the oral stop-payment order expires. Most banks charge a stop-payment fee, commonly $15 to $36.
Stopping the payment at your bank is a separate step from canceling the underlying agreement with the biller. If you stop the debit but don’t tell the company you’re canceling, it may try to charge you again, trigger a return, and potentially report you as delinquent. Handle both sides.