A remotely created check is a payment that a merchant or creditor generates using your bank account details instead of you writing and signing a check yourself. Federal banking rules define it as a check not created by the paying bank that carries no signature from the account holder.1eCFR. 12 CFR 229.2 – Definitions Because the person receiving the money is also the person creating the check, these instruments carry distinct fraud risks and sit under a different legal framework than both traditional checks and ACH transfers. If one shows up on your statement and you didn’t authorize it, your protections are narrower than you probably think.
How to Spot One on Your Statement
Look at the signature line on the check image. A standard personal check carries your handwritten signature. A remotely created check replaces it with printed text, usually something like “Authorized by Drawer” or “Signature on File.”2Federal Reserve. Board Announces Final Rule Governing Remotely Created Checks, Regulation CC That printed line is the payee’s assertion that you gave permission for the charge. If you see one of those phrases on a check image in your account, someone used your bank information to create the payment remotely.
Some of these checks also carry a technical marker that helps banks sort them. The industry standards body ASC X9 designated External Processing Code 6, a single digit at position 44 on the MICR line (the machine-readable number strip along the bottom), as an identifier for remotely created checks. Not every one carries the code, but when it’s there, every bank handling the item knows it was created remotely.
How It Differs From an ACH Debit
Both an RCC and an ACH debit let a merchant pull money from your account without you writing a physical check. They travel through entirely different payment systems with different rules, and the difference matters most when something goes wrong.
- ACH transfers are governed by NACHA operating rules. Remotely created checks fall under Regulation CC, the Uniform Commercial Code, and the Check 21 Act.
- An ACH debit moves through the Automated Clearing House network. An RCC moves through the check clearing system as a check image, typically settling in one to two business days.
- ACH debits are covered by Regulation E, the federal electronic fund transfer law, which gives you a defined 60-day dispute window and mandatory provisional credit from your bank. Remotely created checks are excluded from Regulation E because they are classified as checks, not electronic fund transfers.3eCFR. 12 CFR Part 1005 – Electronic Fund Transfers, Regulation E
- ACH processors face strict return-rate limits, typically under 15 percent. RCC processing tolerates significantly higher return rates, which is part of why high-risk merchants gravitate toward them.
The Regulation E exclusion is the detail with real consequences. For a fraudulent ACH debit, federal law gives you a well-defined dispute process. For an unauthorized RCC, your protection runs through a bank-to-bank warranty system that works differently and spells out your role less clearly.
When a Remotely Created Check Is Illegal
If a telemarketer asks you to pay by remotely created check, the request itself is illegal. The Federal Trade Commission amended the Telemarketing Sales Rule to ban remotely created payment orders in telemarketing transactions, and the prohibition took effect on June 13, 2016.4eCFR. 16 CFR 310.4 – Abusive Telemarketing Acts or Practices It is an abusive practice for a seller or telemarketer to create or cause to be created an RCC as payment for goods or services sold through telemarketing, or as a charitable contribution solicited through telemarketing.
The ban covers both outbound calls (where the seller contacts you) and inbound calls (where you call in response to an ad). The FTC adopted it because remotely created checks had become a preferred tool for fraudulent telemarketers, since they bypass the consumer protections built into credit cards and ACH.5Federal Register. Telemarketing Sales Rule Most business-to-business calls fall outside the Telemarketing Sales Rule, so the RCC prohibition does not apply to those unless they involve the retail sale of nondurable office or cleaning supplies.6Federal Trade Commission. Complying With the Telemarketing Sales Rule
What a Merchant Needs Before Creating One
Outside the telemarketing context, a merchant can lawfully generate a remotely created check, but only after collecting specific information and getting your clear permission. The required data includes your bank’s routing number, your account number, the dollar amount, and the processing date. Authorization can come through a recorded phone call where you verbally approve the charge, an online form where you enter and confirm payment details, or a signed written agreement.
When authorization is verbal, the merchant has an extra obligation. They must send you a written confirmation of the transaction that includes the check amount, the payee’s name, the check date, your name, and your account number. The confirmation must state that you authorized the check and that it is a remotely created check, and it should arrive when the check is created or as soon as reasonably possible afterward.2Federal Reserve. Board Announces Final Rule Governing Remotely Created Checks, Regulation CC If you were charged by RCC and never received that written confirmation after a phone call, that’s a flag worth raising with your bank.
Your Rights When an RCC Is Unauthorized
The protection you rely on is a warranty system created by Regulation CC. Under 12 CFR 229.34(b), any bank that transfers or presents a remotely created check warrants to every bank downstream that the account holder actually authorized the check in the stated amount and to the stated payee.7eCFR. 12 CFR 229.34 – Warranties and Indemnities In plain terms, the bank that first accepted the deposit from the merchant is guaranteeing the check is legitimate. If you never authorized it, that depositary bank bears the financial loss.
This gives your bank a clear path to recover the money on your behalf. When you report an unauthorized RCC, your bank (the paying bank) can return the check and pursue a warranty claim against the bank where the merchant deposited it.2Federal Reserve. Board Announces Final Rule Governing Remotely Created Checks, Regulation CC The regulation requires banks making warranty claims to give notice within 30 days of learning about the breach and identifying the warranting bank.8GovInfo. 12 CFR 229.34 – Warranties and Indemnities That 30-day clock runs between banks, but the practical message for you is to report any unauthorized check the moment you spot it so your bank has time to act.
Additional protection comes from the Uniform Commercial Code. Sections 3-417 and 4-208 establish presentment warranties that apply to all checks, including remotely created ones, so any party presenting a check for payment guarantees certain facts about its validity.9Cornell Law School. Uniform Commercial Code 3-417 – Presentment Warranties10Cornell Law School. Uniform Commercial Code 4-208 – Presentment Warranties UCC 4-406 also puts a duty on you to review bank statements within a reasonable time and promptly report any unauthorized transactions.11Cornell Law School. Uniform Commercial Code 4-406 – Customers Duty to Discover and Report Unauthorized Transactions Sitting on an unauthorized charge can weaken your position.
Why Regulation E Doesn’t Apply
People sometimes assume that because an RCC is initiated electronically by a merchant, it should fall under the Electronic Fund Transfer Act and Regulation E. It doesn’t. Regulation E excludes any transfer originated by check, draft, or similar paper instrument.3eCFR. 12 CFR Part 1005 – Electronic Fund Transfers, Regulation E Even though the merchant created the check on a computer and it may never exist as paper, the banking system treats it as a check. You do not get the provisional-credit guarantees and structured error-resolution timelines that cover ACH debits and debit card transactions. Your remedy sits in the Regulation CC warranty system and the UCC rules above.
Stopping or Disputing a Payment
If you learn a remotely created check is about to hit your account and it hasn’t cleared yet, you can place a stop payment order with your bank. Give the order at least three business days before the scheduled payment. You can request it by phone, in person, or in writing, though a phone request may need written confirmation within 14 days.12Consumer Financial Protection Bureau. How Can I Stop a Payday Lender From Electronically Taking Money Out of My Bank Account Banks typically charge a stop payment fee, often in the range of $15 to $36.
If the check has already cleared and you never authorized it, contact your bank immediately. The sooner you report, the stronger your bank’s position in pursuing the warranty claim against the depositary bank. Don’t wait for a monthly statement if you catch the charge through online banking. Delay is where most consumers lose ground in these disputes.