On a bank statement, “WEB” is a three-letter ACH code that means the payment was authorized over the internet or through a mobile app. It says nothing about who took the money or whether the charge is legitimate. It only identifies how the authorization happened. The company name, description, and identifier printed next to it are what tell you what the charge actually is.
What the WEB Code Tags
WEB is a Standard Entry Class (SEC) code assigned by NACHA, the organization that governs the ACH network. It stands for “Internet-Initiated/Mobile Entry” and covers any ACH debit you authorized through a website or mobile app rather than by phone, on paper, or in person.1ACH Guide for Developers. ACH File Details Paying a bill through a company’s site, signing up for a streaming service, or moving money with a banking app all produce transactions tagged WEB before they travel through the ACH system.
The code applies to both one-time and recurring payments. A single online purchase and a monthly subscription authorized through a website both qualify. WEB does not tell you the dollar amount, the merchant, or whether you actually approved the charge. It only confirms the authorization method was digital.
How WEB Differs From Other Codes You Might See
Your statement may show other SEC codes depending on how a given payment was set up. PPD (Prearranged Payment and Deposit) is the most common consumer code and covers direct deposits like payroll along with recurring debits you authorized in writing, such as a mortgage auto-pay you set up with a signed form. TEL (Telephone-Initiated Entry) applies when you verbally authorized a payment over the phone. CCD (Corporate Credit or Debit) covers business-to-business payments and normally only appears on a business account.1ACH Guide for Developers. ACH File Details
The distinction matters if you end up disputing a charge, because the bank will want to know whether you could have provided that specific type of authorization. A WEB charge you don’t recognize means someone submitted your account information through a web or app form.
Reading the Rest of the Line
Beyond the code, a statement line typically shows a company name and a short description. The company name identifies who originated the payment, but it doesn’t always match the brand you recognize. Subscription services often route billing through a parent company or third-party processor, so the name on your statement may look unfamiliar even when the underlying service is one you signed up for.
The description field is limited to 10 characters, which forces aggressive abbreviation.2Nacha. Risk Management Topics – Company Entry Descriptions A gym membership might read “MNTHLY DUE” and an insurance premium “INS. PREM.” The statement may also include a Company Identification number, a 10-character alphanumeric string the bank uses to identify the originator.1ACH Guide for Developers. ACH File Details It looks like a random jumble, but it’s a trackable identifier your bank can look up.
Identifying an Unfamiliar WEB Charge
Start in your bank’s online portal or app. Clicking a transaction usually expands it to show a fuller merchant name, sometimes a phone number, and occasionally a website. That expanded view resolves the mystery more often than people expect, because the printed statement line hides details the bank has on file.
If that doesn’t help, copy the company name or the alphanumeric identifier exactly as it appears and search for it online. Billing aggregators and third-party processors show up on forum threads and identification pages that connect obscure statement names to the brands using them.
Check your email around the transaction date. Order confirmations, subscription renewal notices, and payment receipts usually carry a reference number or billing name that matches what the bank shows. Free trial signups are a common source of confusion, since the first real charge may post weeks or months after you forgot about the signup. Household members or anyone with a linked card on the same account are another common answer.
If the Charge Is Unauthorized
If you never approved the payment and no one with permission to use your account did either, Regulation E governs the dispute and caps your financial exposure. It covers debit card transactions, ACH debits, ATM withdrawals, and other electronic fund transfers.3eCFR. 12 CFR Part 1005 – Electronic Fund Transfers (Regulation E) Timing controls how much you can be held responsible for.
- Report within 2 business days and your liability caps at $50 or the amount of the unauthorized transfers, whichever is less.4eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
- Report between 2 and 60 days and liability can rise to $500 for transfers that occurred after the two-day window closed, but only if the bank shows the extra losses could have been prevented by earlier notice.4eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
- After 60 days, you become liable for unauthorized transfers that occur after the 60-day window closes and before you finally report. The open-ended exposure to future debits is the real risk here.4eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
Once you file a dispute, the bank has 10 business days to investigate and reach a conclusion. It can extend that to 45 days, but only if it provisionally credits your account within the original 10 business days and gives you full use of the funds while the investigation continues.5eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors If the bank confirms the charge was unauthorized, the credit becomes permanent. If it finds the charge valid, it can reverse the provisional credit after notifying you.
Stopping a Recurring Debit You Recognize
If you recognize the company but want to stop a recurring payment, such as a cancelled subscription that keeps billing, Regulation E gives you a separate right. You can order your bank to block the next scheduled debit by notifying it at least three business days before the payment date, by phone, in person, or in writing.6Consumer Financial Protection Bureau. Preauthorized Transfers
The bank may ask you to confirm an oral stop-payment order in writing within 14 days.6Consumer Financial Protection Bureau. Preauthorized Transfers If a written confirmation was required and you don’t send one, the oral order can expire. The safer practice is to follow up any phone call with an email or letter that names the company, the approximate amount, and the next expected billing date.
Stopping the payment at the bank does not cancel your agreement with the merchant. Contact the company directly to cancel the service as well, since it may try to collect through another route or send the account to collections. Handling both sides prevents the charge from reappearing under a different code or a different processor name.