A recurring payment is an automatic charge a business pulls from your credit card, debit card, or bank account on a set schedule, based on permission you gave when you signed up. Once you authorize it, the merchant initiates each charge without asking again. That single arrangement powers streaming subscriptions, gym memberships, insurance premiums, utility bills, and loan payments, and federal law gives you specific rights to control, dispute, and cancel it.
How You Authorize the Charges
Before a business can charge you automatically, it needs your explicit permission. You typically give it by checking a box during online checkout, signing a paper form, or agreeing verbally over the phone. That authorization is the legal basis for every future charge.
A valid authorization has to tell you a few things upfront: how often you’ll be charged, how much per cycle, and which account will be debited. If the amount will vary, the business has to explain how each charge is calculated. Handing over your card number or your bank routing and account numbers, together with your affirmative agreement, is what puts the arrangement in motion.
For online sign-ups, federal law requires the business to disclose all material terms before collecting your billing information, obtain your informed consent before charging you, and give you a straightforward way to cancel.
How the Money Actually Moves
Once you’ve authorized the payment, the money moves through one of two systems: the ACH network or a card network like Visa or Mastercard. Which one is used depends on whether you handed over a bank account or a card.
ACH, short for Automated Clearing House, handles bank-to-bank transfers. Utility bills, rent, and insurance premiums commonly use ACH debits. Processing costs are lower for merchants, which is one reason many billers prefer it.
When the recurring payment is on a credit or debit card, the transaction runs through the card network and authorizes in near real time. The bigger consequence of the choice, though, is legal, not technical.
Why Your Payment Method Changes Your Protection
The rights you have when something goes wrong depend heavily on whether you’re paying by credit card, debit card, or directly from a bank account. This is one of the most consequential and least understood parts of recurring payments.
Credit Cards
If someone makes an unauthorized charge on your credit card, your maximum liability is $50, and most issuers waive even that.1Office of the Law Revision Counsel. 15 USC 1643 – Liability of Holder of Credit Card You can dispute billing errors through the chargeback process, and because the money hasn’t left your bank account yet, you’re in a much stronger position while the dispute is investigated.
Debit Cards and Direct Bank Debits
Debit cards and ACH debits from your bank account fall under the Electronic Fund Transfer Act and Regulation E. Protections are weaker and time-sensitive. Your liability for unauthorized transfers depends on how fast you report the problem:
- Within 2 business days of learning about the loss or theft: liability capped at $50.
- After 2 business days but within 60 days of the statement showing the transfer: liability can reach $500.
- After 60 days: you can be liable for the full amount of any unauthorized transfers that occur after that 60-day window.
Those tiers matter because the money comes straight out of your checking account. While a dispute is pending, you may be short on cash for rent and groceries, a problem that doesn’t arise with credit card disputes.2Consumer Financial Protection Bureau. Regulation E 1005.6 – Liability of Consumer for Unauthorized Transfers
Notice When the Amount Changes
Recurring payments aren’t always the same amount every cycle. Utility bills and usage-based subscriptions fluctuate. When a recurring debit from your bank account will differ from the previous payment or from the amount you originally authorized, the merchant or your financial institution must send you written notice of the new amount and the transfer date at least 10 days before the scheduled charge.3eCFR. 12 CFR 1005.10 – Preauthorized Transfers
You can also arrange to hear from the merchant only when the charge falls outside a range you’ve agreed to, or when it differs from the last one by more than a set dollar amount. You shouldn’t be blindsided by a variable recurring charge; if you are, the merchant likely violated the notice requirement.4Consumer Financial Protection Bureau. How Do Automatic Payments From a Bank Account Work?
How to Stop a Recurring Payment
Canceling is straightforward in theory. Merchants don’t always make it easy. You have two paths.
Go Through the Merchant First
Start with the merchant’s own cancellation process, whether that’s an account settings page, a phone call, or an email. Keep written confirmation of your request. A screenshot or confirmation email matters later if there’s any dispute about whether you canceled and when.
Stop Payment Through Your Bank
If the merchant ignores you or you want a backstop, you can issue a stop-payment order directly with your bank. For preauthorized ACH debits, you have the legal right to stop payment by notifying your bank orally or in writing at least three business days before the scheduled transfer.5eCFR. 12 CFR 205.10 – Preauthorized Transfers The bank must honor that instruction. If it charges a fee for the stop-payment, it has to disclose the fee upfront.
For card-based recurring charges, you can ask your card issuer to block future charges from the specific merchant. The process is less formally codified than ACH stop payments, but issuers generally comply.
Why a New Card Number Doesn’t Always Work
This catches a lot of people off guard. Getting a new card number doesn’t necessarily stop a merchant from charging you. Major card networks operate “automatic billing updater” services that quietly share your new card number and expiration date with merchants who have you on file for recurring billing.6Mastercard Developers. Automatic Billing Updater The design intent is to keep legitimate subscriptions from failing when a card is reissued, but it also means a merchant you thought you’d cut off can keep charging the new card.
To actually block a merchant this way, you need to cancel the subscription with the merchant directly, request a stop-payment or merchant block through your card issuer, or ask your bank to opt your card out of the automatic billing updater program. Not all issuers make the opt-out obvious, so you may need to call and specifically ask.
When a Recurring Payment Fails
If your account doesn’t have enough money for a scheduled debit, several things can happen at once. Your bank may decline the transaction or let it through and charge an overdraft fee. The merchant’s system will typically retry, sometimes several times over the following days, and each failed attempt can trigger another fee from your bank.
On the merchant’s side, a failed payment is a missed payment. That can mean a late fee, temporary suspension of service, or both. For insurance premiums and loan payments, a lapse caused by a failed automatic payment can carry consequences beyond the missed charge itself, like a gap in coverage or a negative mark on your credit report. If you know funds will be tight, contacting the merchant in advance to adjust the date or amount is almost always cheaper than the fallout.
Reporting Unauthorized or Incorrect Charges
If an unauthorized or incorrect recurring charge shows up on your statement, federal law gives you a window to report it, and the window isn’t open forever. For electronic fund transfers (ACH debits and debit card charges), you must notify your financial institution within 60 days after it sends the periodic statement showing the error. Miss that window and you risk losing the ability to recover the funds.7Consumer Financial Protection Bureau. Regulation E 1005.11 – Procedures for Resolving Errors
The liability caps described earlier (the $50, $500, and unlimited tiers) apply based on how quickly you reported the problem after learning about it.2Consumer Financial Protection Bureau. Regulation E 1005.6 – Liability of Consumer for Unauthorized Transfers
For credit card charges, you dispute through the chargeback process with your card issuer. The billing error notice generally must be sent within 60 days of the statement date as well, but your maximum exposure stays at $50 regardless of timing.
Federal Rules on Sign-Up and Cancellation
The Restore Online Shoppers’ Confidence Act (ROSCA) makes it illegal to charge you through a negative option feature online unless the business discloses all material terms before collecting billing information, obtains express informed consent, and provides a simple way to stop recurring charges.8Office of the Law Revision Counsel. 15 USC 8403 – Negative Option Marketing on the Internet A “negative option” is any arrangement where your silence is treated as acceptance, the classic “cancel or we’ll keep charging you” model.
The FTC tried to strengthen those protections in 2024 with a rule requiring that cancellation be at least as easy as sign-up. The U.S. Court of Appeals for the Eighth Circuit vacated that rule on procedural grounds in July 2025.9Federal Register. Rule Concerning the Use of Prenotification Negative Option Plans As of early 2026, the FTC has published an advance notice of proposed rulemaking to revisit the issue, but no replacement rule is in effect. ROSCA’s baseline still applies, so businesses must provide a simple cancellation mechanism; they just aren’t bound by the more specific “click-to-cancel” requirements the FTC had tried to impose.