A preauthorized debit is a recurring electronic withdrawal that a company pulls from your checking or savings account on a schedule you agreed to in advance. Your mortgage servicer, insurer, gym, or streaming service sets one up by getting your written permission once, then uses that permission to take each payment automatically. Federal law, specifically the Electronic Fund Transfer Act and Regulation E, treats these transfers as a distinct category and gives you a set of rights that other payment methods don’t carry.
What You’re Agreeing To When You Sign Up
Permission has to be in writing. The merchant or your bank must give you a copy of what you signed.1Office of the Law Revision Counsel. 15 USC 1693e Preauthorized Transfers Regulation E says the writing must be “signed or similarly authenticated,” which covers clicking an “I agree” button on a secure online form.2eCFR. 12 CFR Part 1005 Electronic Fund Transfers (Regulation E) An electronic signature is legally valid under the E-SIGN Act.3Office of the Law Revision Counsel. 15 USC 7001 General Rule of Validity
The authorization form asks for your bank’s nine-digit routing number and your account number. It should also spell out the dollar amount of each withdrawal (or state that the amount varies), how often the withdrawals happen, and when they start. Keep a copy. If a merchant later submits a debit that doesn’t match what you signed, your copy is your strongest evidence in a dispute.
When the Amount Can Change
Some preauthorized debits are the same every cycle; others fluctuate, like a utility bill tied to usage. If the next withdrawal will differ from the previous one, or from the amount in your authorization, either the merchant or your bank must send you written notice of the new amount and transfer date at least 10 days before the scheduled debit.4eCFR. 12 CFR 1005.10 Preauthorized Transfers That window lets you make sure the funds are there or raise a dispute if the number looks wrong.
You can agree to a lighter version of this notice. The merchant or bank may offer to notify you only when the amount falls outside a range you specify, or only when it differs from the last payment by more than a set dollar amount.4eCFR. 12 CFR 1005.10 Preauthorized Transfers If your electric bill usually sits between $80 and $130, you might agree to hear about it only when it tops $150.
Stopping a Preauthorized Debit
You have an unconditional right to stop any preauthorized transfer. Notify your bank at least three business days before the scheduled withdrawal date, by phone or in writing.1Office of the Law Revision Counsel. 15 USC 1693e Preauthorized Transfers If you call, the bank may require written confirmation within 14 days. Miss that written deadline and the oral stop-payment order expires, which means the bank can let the next debit through.5eCFR. 12 CFR Part 1005 Electronic Fund Transfers (Regulation E) – Section 1005.10(c) When you call, the bank has to tell you about the written-confirmation rule and give you the mailing address, so listen for those details.
Stopping the transfer at your bank only blocks the next withdrawal. It does not end your relationship with the merchant. Revoke the authorization with the merchant separately, in writing, and keep a copy. If the merchant ignores the revocation and submits another debit, your bank should reject it, and you can file a formal error dispute to recover the funds.
Most banks charge a stop-payment fee, though some waive it for online requests or premium accounts. Ask what yours charges before you place the order. If you’re stopping payment because the merchant already broke the terms of your authorization, the dispute route below may make the fee unnecessary.
Disputing a Wrong or Unauthorized Debit
An unauthorized preauthorized debit is an “error” under Regulation E. So is a debit for the wrong amount, a debit on the wrong date, or a transfer your statement records incorrectly. You have 60 days from the date your bank sends the statement showing the problem to notify the bank. Miss that window and you lose protections against any additional unauthorized transfers from that same source going forward.6eCFR. 12 CFR Part 1005 Electronic Fund Transfers (Regulation E) – Section 1005.6
Once you report, the bank has 10 business days to investigate and decide whether an error occurred. If it needs more time, it can take up to 45 days, but only if it provisionally credits your account within those first 10 business days. The bank must tell you the amount and date of the provisional credit within two business days of providing it.7eCFR. 12 CFR 1005.11 Procedures for Resolving Errors
How Much You Can Lose Depends on How Fast You Act
Federal law caps your liability for unauthorized electronic transfers, but the cap moves with the clock:
- Report within two business days of learning about the problem, and your maximum loss is $50, or the amount of unauthorized transfers before you called, whichever is less.8Office of the Law Revision Counsel. 15 USC 1693g Consumer Liability
- Report after two business days but within 60 days of your statement, and the cap rises to $500. That covers the first $50 plus any unauthorized transfers between day two and the day you called that the bank can prove it would have prevented had you reported sooner.8Office of the Law Revision Counsel. 15 USC 1693g Consumer Liability
- Fail to report within 60 days of your statement, and you’re on the hook for all unauthorized transfers that occur after the 60-day window closes, with no dollar cap. The bank only has to reimburse losses it can’t prove were caused by your delay.8Office of the Law Revision Counsel. 15 USC 1693g Consumer Liability
Hospitalization, extended travel, and similar circumstances can extend these deadlines to a “reasonable” period, but don’t plan around that. Reading your statement every month is the single most effective thing you can do to protect yourself.
If Your Account Can’t Cover the Debit
If a preauthorized debit arrives and your balance can’t cover it, the transaction is returned to the merchant’s bank marked for insufficient funds. The merchant doesn’t get paid. You may face a non-sufficient funds fee, though the fee landscape has shifted. According to CFPB data, nearly two-thirds of banks with more than $10 billion in assets have eliminated NSF fees entirely, wiping out roughly 97% of NSF fee revenue at large institutions and saving consumers close to $2 billion a year.9Consumer Financial Protection Bureau. Vast Majority of NSF Fees Have Been Eliminated Smaller banks and credit unions may still charge them, so check your account agreement.
A returned debit also means the merchant didn’t get paid, which can trigger a late fee on their side, hurt your standing with the service provider, or interrupt service. If you know a scheduled debit date will be tight, contact the merchant to reschedule rather than letting it bounce.
A Lender Cannot Require Autopay
A lender cannot condition giving you credit on your agreement to repay through preauthorized electronic transfers. Regulation E prohibits that, with a narrow exception for overdraft credit plans.10eCFR. 12 CFR 1005.10 Preauthorized Transfers – Section 1005.10(e) If a creditor tells you automatic debit is mandatory to get the loan, push back.
Business Accounts Don’t Get These Protections
Everything above applies to personal accounts, meaning accounts held primarily for personal, family, or household use. Regulation E defines a protected consumer as a natural person and a covered account as one held for personal purposes.11eCFR. 12 CFR Part 1005 Electronic Fund Transfers (Regulation E) – Section 1005.2 If the debits come from an LLC’s operating account or a corporate checking account, Regulation E does not apply. Commercial transfers fall under UCC Article 4A, which does not provide the same error-resolution timelines, provisional-credit requirements, or liability caps.12Legal Information Institute. UCC Article 4A Funds Transfer If you run a business, read your commercial account agreement closely, because the consumer rights described here won’t be there.