A pre-authorized debit form is a written permission slip that lets a business withdraw money directly from your bank account on a set schedule. It is not the service contract itself. It’s a separate authorization for the withdrawals, and federal law requires it to be in writing or electronically signed, with a copy given to you at the time you sign.1Office of the Law Revision Counsel. 15 USC 1693e Preauthorized Transfers Knowing what belongs on the form, how to cancel it, and what to do when a withdrawal looks wrong keeps you in charge of the money leaving your account.
What the Form Has to Contain
Federal regulations require that a pre-authorized debit authorization be “readily identifiable as such” with terms that are “clear and readily understandable.”2Consumer Financial Protection Bureau. 12 CFR 1005.10 Preauthorized Transfers A properly written form should include:
- Express authorization language, such as “I authorize Company X to debit my account,” so there is no ambiguity about what you are agreeing to.
- The payment amount, either a fixed dollar figure, a stated range, or a description of how the amount is calculated.
- The dates and frequency of withdrawals (weekly, biweekly, monthly, or specific calendar dates).
- Your bank’s routing number and your account number.
- The account type, checking or savings.
- Revocation instructions explaining how to cancel future payments.
These requirements draw from the Nacha Operating Rules governing the ACH network and from Regulation E, which implements the Electronic Fund Transfer Act.3Nacha. WEB Proof of Authorization Industry Practices Only you can authorize the debit. A merchant or third party cannot sign for you.
Filling Out the Form
You need two numbers: your bank’s nine-digit routing number and your account number. Both appear at the bottom of a physical check. If you don’t have paper checks, your online banking portal will usually display both under account details or direct deposit settings.
Some businesses still ask for a voided check to verify the numbers visually. You create one by writing “VOID” in large letters across a blank check, leaving the printed numbers at the bottom legible. The practice is declining. Many businesses now accept a screenshot of your online banking details or a direct deposit verification letter from your bank.4Nacha. Direct Deposit Without a Voided Check? Absolutely!
Check every digit before you submit. A transposed routing or account number means the payment either bounces back or hits the wrong account, and either outcome can trigger fees on both ends.
Fixed Amounts vs. Variable Amounts
Pre-authorized debits work one of two ways. Fixed-amount agreements pull the same figure every cycle, typical of mortgage payments, insurance premiums, and loan installments. Variable-amount agreements adjust with usage, like a utility bill that shifts month to month.
Variable payments carry an extra protection. When an amount will differ from the previous withdrawal or from the originally authorized amount, either the merchant or your bank must send written notice of the exact amount and date at least 10 days before the withdrawal.5eCFR. 12 CFR Part 1005 Electronic Fund Transfers Regulation E You can also agree to a dollar range and only receive notice when a payment falls outside that window.
How to Cancel or Stop Payments
You do not need to give 10 or 30 days’ notice to stop a pre-authorized debit. Under federal law, you can stop any future preauthorized transfer by notifying your bank at least three business days before the scheduled withdrawal date.6eCFR. 12 CFR 1005.10 Preauthorized Transfers You can do this by phone or in writing, and you do not need the merchant’s permission.
There is a catch with oral stop-payment orders. Your bank can require written confirmation within 14 days of the phone call. If the bank asked for written confirmation and you don’t send it, the oral order lapses after those 14 days.1Office of the Law Revision Counsel. 15 USC 1693e Preauthorized Transfers A written stop-payment order typically expires after six months but can be renewed.7HelpWithMyBank.gov. How Can I Stop a Preauthorized Debit
Stopping the debit at your bank halts the withdrawal. It does not cancel the underlying obligation to the merchant. If you owe money under a service contract, you still owe it, and the merchant may charge late fees or send the balance to collections. To fully end the arrangement, cancel with the merchant too and get written confirmation, ideally with a reference number, so you have proof the authorization itself has been revoked.
Banks often charge a fee for processing a stop-payment order, typically $20 to $35. If a merchant debits your account after you have properly revoked authorization and placed a stop payment, you can dispute the transaction with your bank.
One more trap: closing your bank account does not cancel the authorization. The merchant can keep attempting withdrawals, which will bounce and may generate fees or collections activity. Revoke the authorization with the merchant and place a stop payment with your bank before you close the account.
When Something Goes Wrong
If an unauthorized debit hits your account, or a merchant pulls the wrong amount, federal law sets strict deadlines on both sides of the dispute.
How Fast You Have to Report
The speed of your report determines how much you can lose. Notify your bank within two business days of discovering an unauthorized transfer and your maximum liability is $50. Miss that window but report within 60 days of receiving the bank statement showing the problem, and your exposure rises to $500. After 60 days with no report, you can be on the hook for the full amount of any unauthorized transfers that happen after that deadline.8eCFR. 12 CFR 1005.6 Liability of Consumer for Unauthorized Transfers Review your statements regularly and flag problems fast.
How Fast the Bank Has to Respond
Once you report an error, your bank must investigate and reach a conclusion within 10 business days. If it needs more time, it can extend the investigation to 45 calendar days, but only if it provisionally credits your account within those initial 10 business days.9eCFR. 12 CFR 1005.11 Procedures for Resolving Errors That provisional credit gives you access to the disputed funds while the review continues. If the bank doesn’t resolve the dispute within 45 days, the provisional credit becomes permanent.
The bank must tell you the results within three business days of finishing the investigation and correct any confirmed error within one business day after that. A bank that ignores these timelines is violating Regulation E, and you can file a complaint with the Consumer Financial Protection Bureau.
Signing Electronically
Most pre-authorized debit forms today are completed online, and that is legally sound. The federal E-SIGN Act establishes that a signature or contract cannot be denied legal effect simply because it is electronic.10Office of the Law Revision Counsel. 15 USC 7001 General Rule of Validity Regulation E specifically incorporates the E-SIGN Act for preauthorized debit authorizations.2Consumer Financial Protection Bureau. 12 CFR 1005.10 Preauthorized Transfers
For debits authorized over the internet (called WEB entries in ACH terminology), the merchant must use commercially reasonable methods to verify your identity and must keep a copy of the authorization, along with a record linking it to you, for at least two years after the authorization ends.3Nacha. WEB Proof of Authorization Industry Practices If a merchant ever claims you authorized a debit you don’t remember agreeing to, they bear the burden of producing that record.
When you sign electronically, the business must still give you a copy of the terms, digitally or on paper. If they offer only an electronic copy, the E-SIGN Act requires them to first tell you about your right to receive a paper version, explain how to withdraw your consent to electronic records, and confirm that you can actually access the electronic format they’re using.10Office of the Law Revision Counsel. 15 USC 7001 General Rule of Validity If you never received a copy of your authorization, raise it with your bank.
Checks to Run Before You Sign
Read the authorization language and confirm the amount, frequency, and start date match what you agreed to. Make sure revocation instructions appear on the form. If they are missing, ask the merchant to add them before you sign.
Keep a copy of every signed authorization, whether it is a PDF, screenshot, or paper form. If a dispute arises months later, this document is your proof of what you actually agreed to. Set a calendar reminder for the first withdrawal date so you can verify the correct amount came out. A few minutes of record-keeping at the start saves hours of chasing down unauthorized charges later.