A Receiving Depository Financial Institution, or RDFI, is the bank or credit union that receives an incoming ACH payment and posts it to the account holder’s account. It sits at the end of every ACH transfer and is responsible for getting the money into the right account on time, returning entries it cannot post, and handling consumer disputes when something goes wrong. Its duties come from two sources working together: the Nacha Operating Rules, which govern the ACH network itself, and federal consumer protection law, principally the Electronic Fund Transfer Act and Regulation E.
Where the RDFI Sits in an ACH Transfer
Every ACH payment involves a chain. An Originator (the company or person starting the payment) works through an Originating Depository Financial Institution, or ODFI, which submits entries to one of two ACH Operators: the Federal Reserve Bank or the Electronic Payments Network, operated by The Clearing House.1Nacha. How ACH Works – Section: ACH Participants The Operator sorts and routes each entry to the correct RDFI using the routing number in the transaction.
The RDFI does not initiate anything. Its role is reactive: it receives entries distributed by the ACH Operator and posts them to the correct account, whether the entry is a credit (a deposit) or a debit (a withdrawal).1Nacha. How ACH Works – Section: ACH Participants If you receive direct deposit of your paycheck or have a utility bill pulled from checking each month, your bank is acting as the RDFI on those transactions.
Accepting Entries and Making Funds Available
Under the Nacha Operating Rules, an RDFI must accept all entries properly addressed to it.2Nacha. Nacha Operating Rules – New Rules It cannot decline to process incoming files selectively. When a credit entry arrives, the institution must make those funds available to the account holder by the settlement date.
The matching between an entry and an account is done by account number, not by name. That is what allows automated processing at network scale, but it also means a typo in the account number can route money to the wrong account even when the name on the transaction is correct. Returns and error resolution exist because of that design.
Standard ACH entries settle on the next business day. Same Day ACH accelerates the timeline: for credit entries received in the first processing window, the RDFI must make funds available to the account holder by 1:30 p.m. local time.3Federal Reserve Financial Services. FedACH Processing Schedule The current per-transaction limit for Same Day ACH is $1 million. A rule raising that ceiling to $10 million has been approved but does not take effect until September 17, 2027.4Nacha. Increasing the Same Day ACH Dollar Limit to $10 Million Until then, any single ACH payment above $1 million settles on the standard next-day timeline.
Sending Entries Back: Returns and Reason Codes
When the RDFI cannot post an incoming entry, it sends the entry back through the network with a standardized reason code that tells the originating bank what went wrong. Common codes include:
- R01, Insufficient Funds: the account does not have enough money to cover the debit.
- R02, Account Closed: the account existed but has been closed.
- R03, No Account: the account number does not match any open account at the institution.
- R04, Invalid Account Number: the account number structure itself is wrong, such as the wrong number of digits.
- R08, Payment Stopped: the account holder placed a stop payment order.
- R16, Account Frozen: the account is restricted due to a legal action or an action taken by the RDFI.
For most returns, the RDFI must transmit the return so it is available to the originating institution no later than the opening of business on the second banking day after the settlement date.5Nacha. ACH Network Rules – Reversals and Enforcement The tight timeline keeps originators informed quickly so they can resolve failures or try another payment method.
Unauthorized consumer debits work differently. When a consumer reports an unauthorized withdrawal, the RDFI must obtain a signed Written Statement of Unauthorized Debit before returning the entry.6Nacha. Risk Management Topics – October 1, 2024 The return window for these entries extends well past the standard two-day period, giving consumers time to spot fraudulent or incorrect charges on a statement.
The RDFI’s Role in Consumer Error Disputes
The Electronic Fund Transfer Act, implemented through Regulation E at 12 CFR Part 1005, sets out a structured process for handling consumer disputes about electronic transfers, including ACH debits.7eCFR. 12 CFR Part 1005 Most of the compliance burden falls on the RDFI, because it holds the account and issues the statement.
The 60-Day Reporting Deadline
A consumer must report an unauthorized or incorrect transfer within 60 days after the institution sends the periodic statement that reflects the transaction.8Consumer Financial Protection Bureau. Regulation E – 1005.6 Liability of Consumer for Unauthorized Transfers Missing that window has consequences. The consumer can become liable for later unauthorized transfers if the institution can show those transfers would have been prevented by timely notice.
Investigation and Provisional Credit
Once the RDFI receives a notice of error, it has 10 business days to investigate and determine whether an error occurred. If it confirms the error, it must correct the account within one business day and report the results to the consumer within three business days.9eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors
If the institution needs more time, it can extend the investigation to 45 days, but only by provisionally crediting the disputed amount to the consumer’s account within the initial 10 business days. The institution may withhold up to $50 from the provisional credit when it has a reasonable basis for believing an unauthorized transfer occurred and certain initial disclosure requirements were met.10Consumer Financial Protection Bureau. Regulation E – 1005.11 Procedures for Resolving Errors The institution must also tell the consumer the amount and date of the provisional credit within two business days. During the investigation the money is back in the account, which prevents a disputed charge from cascading into overdrafts.
Stop Payments on Recurring Debits
If you have authorized a recurring ACH debit, you can stop an individual payment by telling the RDFI at least three business days before the scheduled transfer date. The notice can be oral or written.11eCFR. 12 CFR 1005.10 – Preauthorized Transfers
An oral stop payment order is valid for 14 days. If the bank requires written confirmation and the consumer does not provide it within those 14 days, the oral order expires. The institution must tell the consumer at the time of the oral notice that written confirmation is required and where to send it.12eCFR. a href=”https://www.ecfr.gov/current/title-12/section-1005.10″ target=”_blank” rel=”noopener”>12 CFR 1005.10 – Preauthorized Transfers Most banks charge a fee for stop payment processing, and the amount varies by institution.
One boundary to keep in mind: stopping a payment at the bank is not the same as canceling the authorization with the company doing the billing. If you stop the payment through the RDFI but leave the underlying agreement in place, the merchant may try again the following month, and you may need another stop payment order.
Statements and Disclosures
The RDFI must send periodic statements for any account involved in electronic transfers. For each transfer during the statement cycle, the statement must show the amount, the date it posted, the type of transfer, and the name of the third party involved.13eCFR. 12 CFR 1005.9 – Receipts at Electronic Terminals; Periodic Statements The statement must also carry the account number, any fees for electronic transfers or account maintenance, and the opening and closing balances.
The institution must provide an address and telephone number for inquiries and error notices. If it uses a telephone-notice option for preauthorized credits (letting consumers call to confirm a deposit arrived rather than sending individual notices), it must disclose that phone number on the initial account terms and on every periodic statement.13eCFR. 12 CFR 1005.9 – Receipts at Electronic Terminals; Periodic Statements Clear statements are what allow consumers to catch errors within the 60-day reporting window.
Extra Duties on International and High-Risk Entries
When an ACH entry crosses international borders, it is classified as an International ACH Transaction, or IAT, and the RDFI’s job expands. On inbound IATs, the RDFI is responsible for compliance with sanctions administered by the Office of Foreign Assets Control, regardless of whether the OFAC flag in the transaction is set.14FFIEC BSA/AML InfoBase. Risks Associated with Money Laundering and Terrorist Financing – Automated Clearing House Transactions The institution must screen the parties and review the payment details, then block or reject the transaction if it finds a match. On domestic entries, ODFIs and RDFIs can rely somewhat on each other for OFAC compliance; international entries carry more stringent screening obligations.
On the fraud side, Nacha’s data security rule that requires stored account numbers to be rendered unreadable does not apply to RDFIs, because banks and credit unions are already subject to their federal regulators’ data security requirements.15Nacha. Supplementing Data Security Requirements That rule targets non-bank originators and third-party senders. But RDFIs still have fraud duties of their own. Beginning March 20, 2026, RDFIs with annual ACH receipt volume of 10 million or more must establish and implement risk-based transaction monitoring for incoming ACH entries.6Nacha. Risk Management Topics – October 1, 2024 The rule pushes receiving institutions to detect suspicious patterns rather than posting everything that arrives.
RDFIs also see micro-entries: small credits under $1.00, paired with offsetting debits, that originators use to verify an account exists before sending larger payments. The RDFI should feed incoming micro-entry activity into its fraud detection processes and treat the corresponding credits and debits consistently when deciding whether to post or return them.16Nacha. Micro-Entries (Phase 1)