Push vs. Pull Payments: Control, Reversals, and Costs

The difference between push and pull payments comes down to who tells the money to move. In a push payment, you instruct your bank to send funds out. In a pull payment, a merchant or biller you’ve authorized reaches in and collects. That single distinction shapes almost everything else about the transaction: how fast it settles, how easily you can stop or reverse it, and which federal rules protect you when something goes wrong.

Who Starts the Transaction

A push payment begins with you. You log into your bank, open a payment app, or walk into a branch and tell your institution to send a specific amount to a specific recipient. Wire transfers, real-time payments through FedNow or the RTP network, and peer-to-peer transfers through services like Zelle all follow this pattern. Your bank only needs to confirm you authorized the transfer and that your balance covers it. The recipient does nothing to trigger the money.

A pull payment flips that flow. The merchant or biller submits a request to your bank to collect what you owe, and your bank releases the funds against a permission you granted earlier. Your utility company’s monthly ACH debit, a gym charging your credit card on a recurring basis, and a paper check deposited by the payee all work this way. You signed an authorization form, entered your card number at checkout, or handed someone a check. That standing permission stays in effect until you revoke it.

How Fast Each One Settles

Push payments have gotten quick. The FedNow Service and the RTP network settle individual transactions in real time, around the clock, every day of the year.1Federal Reserve Financial Services. Here’s What You Need to Know About Clearing and Settlement A FedNow payment reaches the recipient’s bank within seconds. Wire transfers through Fedwire settle the same day during operating hours, though they don’t run 24/7.

Pull payments mostly travel over the ACH network, which batches transactions for processing. Traditional ACH debits settle in one to two business days. Same Day ACH compresses that timeline to hours. Credit card pulls generally post within one to three business days depending on the merchant’s processing arrangement.

The speed gap matters most when you’re trying to unwind a mistake. A pull payment sitting in ACH for a day gives you time to catch a problem. A push payment through FedNow can be final before you close the app.

Stopping and Controlling Payments

Because push payments require per-transaction approval, control isn’t usually the concern with them: no one moves money without your active involvement each time. Pull payments are the opposite. Once you authorize a recurring debit, someone else is reaching into your account on a schedule you may not be tracking.

Federal rules give you specific tools to shut that off. You can stop any single preauthorized debit by notifying your bank at least three business days before the scheduled transfer date. Your bank can accept the notice by phone but may require written confirmation within 14 days; if written confirmation is required and you don’t send it, the stop-payment order expires.

To end a recurring pull entirely, notify both your bank and the merchant that you’re revoking authorization. Once your bank receives the notice, it must block future debits from that merchant immediately rather than waiting for the merchant to stop submitting them.2Consumer Financial Protection Bureau. Regulation E Electronic Fund Transfers – Section 1005.10 Most people who get stuck with charges they thought they’d canceled either told the merchant but not the bank, or told the bank but not the merchant.

Reversing a Pull Payment

Pull payments carry the strongest consumer reversal rights in the payment system. The rules split by account type.

Bank Account Debits

When a merchant pulls money from your checking or savings account without proper authorization, or pulls the wrong amount, Regulation E governs your dispute. You notify your bank of the error, and the bank must investigate and reach a conclusion within ten business days.3eCFR. 12 CFR Part 1005 – Electronic Fund Transfers, Regulation E The bank can extend the investigation to 45 days, but only if it provisionally credits your account within that initial ten-day window. You get full use of those provisional funds during the extension.

Your personal liability for unauthorized debit transactions depends on how quickly you report. Report within two business days of learning your debit card or credentials were compromised and your maximum exposure is $50. Wait longer than two business days and the cap jumps to $500. If unauthorized charges appear on your periodic statement and you don’t report them within 60 calendar days of the statement being sent, you face unlimited liability for transfers that occur after that 60-day window.4eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers Checking statements regularly is one of the most effective things you can do to hold your losses down.

For ACH debits specifically, the return window for an unauthorized entry on a consumer account extends to 60 calendar days from the settlement date of the disputed debit.5Nacha. ACH Network Rules – Reversals and Enforcement Business accounts get only two banking days, which is why businesses have to watch incoming debits more aggressively than individual consumers do.

Credit Card Charges

Credit card disputes run on a separate and generally more favorable track. For an unauthorized charge, goods never delivered, or a billing error, you have 60 days from the date the statement was sent to notify the card issuer in writing.6Office of the Law Revision Counsel. 15 USC 1666 – Correction of Billing Errors The issuer must acknowledge the dispute within 30 days and resolve it within two billing cycles, capped at 90 days.7eCFR. 12 CFR 1026.13 – Billing Error Resolution

While the investigation is open, you don’t have to pay the disputed amount, the issuer can’t report you as delinquent for not paying it, and the issuer can’t close your account or accelerate your balance because you filed the dispute. Your maximum liability for unauthorized credit card use is $50, and most major issuers waive even that. Compared to the tiered debit rules where delay can cost you hundreds or the full amount, a credit card gives you meaningfully better protection when you’re on the pull side of a fraudulent charge.

Reversing a Push Payment

Push payments are built on a principle of finality. Once you instruct your bank to send a wire and the receiving bank accepts the payment order, your obligation to pay is locked in. Article 4A of the Uniform Commercial Code, which governs wire transfers in every state, treats the sender’s instruction as binding upon acceptance by the receiving bank.8Legal Information Institute. UCC 4A-212 – Liability and Duty of Receiving Bank Regarding Unaccepted Payment Order The receiving bank is not your agent and owes you no duty beyond what the statute requires.

There is a built-in safety net most people don’t know about. If a funds transfer never completes because the beneficiary’s bank doesn’t accept the final payment order, the sender is excused from the obligation to pay, and any money already debited must be refunded with interest. UCC commentary calls this the “money-back guarantee,” and it cannot be waived by contract. It protects you when the system itself fails to deliver, such as when a routing error prevents the payment from reaching any account at all.

When a bank executes your wire but sends it to the wrong recipient because of the bank’s own error, the bank that made the mistake bears the loss. You and every prior sender in the chain are released from your payment obligations, and the bank that issued the erroneous order can recover the funds from the unintended recipient under the law of mistake and restitution.9Legal Information Institute. UCC 4A-303 – Erroneous Execution of Payment Order The catch: if you supplied the wrong account number and the bank followed your instructions accurately, the loss falls on you.

When a Scammer Tricks You Into Sending

The hardest category of push payment loss is what the industry calls authorized push payment fraud: a scammer tricks you into sending money voluntarily, usually by impersonating your bank, a government agency, or a business partner. Because you authorized the transfer yourself, the standard UCC finality rules apply and the money is gone once it settles.

The CFPB has clarified that when a scammer fraudulently obtains your account credentials and uses them to initiate a transfer, that transfer still counts as unauthorized under Regulation E, even if you technically handed over the login information. A consumer tricked into sharing account access has not “furnished” that access in the legal sense, and the bank cannot impose liability beyond what Regulation E allows.10Consumer Financial Protection Bureau. Electronic Fund Transfers FAQs But when you press send yourself, entering the amount while the scammer coaches you on the phone, most institutions treat that as authorized with no right to reversal. The distinction often comes down to whose fingers were on the keyboard.

What Each One Costs You

Push payments carry direct, visible fees. Consumer wire transfer fees at major banks commonly run $15 to $30 for domestic sends. Real-time payment services vary by bank, and Zelle transfers are typically free between participating institutions.

Pull payments hide their costs. ACH debits run merchants pennies to a few dollars per transaction, and you rarely see that fee at all. Credit card processing runs 1.5% to 3.5% of the transaction amount plus per-transaction fees, which is why some merchants offer discounts for paying by bank transfer and why card interchange costs are baked into the prices you pay everywhere else.