What Is an Automatic Withdrawal: How to Stop and Dispute Charges

An automatic withdrawal is a recurring payment you authorize a company to pull directly from your bank account on a set schedule, usually through the Automated Clearing House (ACH) network. On your statement it shows up as an ACH debit. Federal law requires your written or electronically signed consent before any company can take money this way, and the same law gives you the right to revoke that consent, stop payment through your bank, and dispute charges you did not authorize.

How the Payment Actually Moves

Three parties sit behind every automatic withdrawal. The company collecting payment sends a debit request through its own bank, that request travels through the ACH network to your bank, and your bank pulls the funds and routes them back. Standard ACH transfers settle in one to two business days. Same-Day ACH is available for individual payments up to $1 million, though not every company uses it for recurring bills.¹

The ACH network does not run on weekends or federal holidays, because payments settle only when the Federal Reserve’s National Settlement Service is open. A bill due on a Saturday or holiday gets collected on the next banking day. If you need to move money to cover a payment, that gap can help you.

Some withdrawals pull the same dollar amount every cycle, like a fixed loan payment. Others vary, like a utility bill. When the amount is going to change, federal law requires the company or your bank to notify you at least 10 days before the scheduled transfer.² You can also agree to receive notice only when a payment falls outside a range you specify, which cuts down on the volume of alerts.

What You Agreed to When You Signed Up

The Electronic Fund Transfer Act (EFTA), implemented through Regulation E, is the primary federal law behind automatic withdrawals.² It sets a few rules that apply to every preauthorized recurring debit from a consumer’s account:

No company can pull money without your signed or electronically authenticated consent. Verbal permission alone is not enough.³
The company must give you a copy of the authorization terms when you sign up.²
You can cancel any preauthorized transfer by notifying your bank at least three business days before the scheduled date.⁴
If someone debits your account without valid authorization and you report it within two business days, your maximum loss is $50.⁵

Clicking “I agree” on an online form counts as written authorization under Regulation E. However you signed up, the company keeps that record on file as its proof you consented.

How to Stop an Automatic Withdrawal

Cancelling is a two-step process. You tell the company, and you tell your bank. Doing both protects you if one side moves slowly. The CFPB recommends writing to the company first to revoke your authorization, then following up with your bank or credit union.⁶

Notify the Company in Writing

Your revocation letter should include your name and address, the date, the company’s name, your account number with that company, and a clear statement that you are revoking authorization for future automatic debits from your bank account. Add the checking account number tied to the payments, and if you can, the dollar amount and the dates past payments appeared on your statement. Keep a copy and any delivery confirmation. That paper trail becomes critical if the company later claims it never got your notice.

Place a Stop-Payment Order With Your Bank

Even after telling the company, place a stop-payment order with your bank. Under Regulation E, the bank must honor it as long as you give notice at least three business days before the next scheduled transfer.⁴ You can give notice by phone, in person, or in writing.

If you call it in, the bank can require written confirmation within 14 days. Miss that deadline and the oral stop-payment order expires automatically.⁴ Most banks charge a fee for processing the order, so check your account agreement before you call.

Debit Card Charges Are Different

Not every recurring charge is an ACH debit. Some run through your debit card number. For those, the steps above may not be enough. You usually need to contact your bank’s card services department, or in some cases the card network, to block future charges from that merchant. Many banks handle both through the same line, but knowing which type of transaction you’re dealing with speeds the call.

If a Company Keeps Charging You After You Revoke

Once you have revoked authorization and notified your bank, any further debits from that company are unauthorized electronic fund transfers.⁷ That triggers the full error-resolution process under Regulation E.

Report the unauthorized transfer to your bank. The bank has 10 business days to complete its investigation. If it needs more time, it can extend to 45 days, but only if it provisionally credits your account within those first 10 business days for the disputed amount.⁸ The bank can withhold up to $50 of that provisional credit if it reasonably believes the transfer was unauthorized. You get full use of the credited funds while the investigation runs.

How Much You Owe for Unauthorized Charges Depends on Speed

The EFTA sets a tiered liability system, and your exposure turns almost entirely on how fast you report:

Report within two business days of learning of the loss or theft: your maximum liability is $50, or the amount of unauthorized transfers that occurred before you notified the bank, whichever is less.⁵
Report after two business days but within 60 days of the statement showing the problem: liability can rise to $500 for transfers the bank can prove it would have stopped had you reported sooner.⁹
Report after 60 days: unlimited liability for unauthorized transfers that occur after the 60-day window closes and before you finally notify the bank.⁹

The 60-day clock starts when the bank sends or makes available the statement that shows the unauthorized transfer. That makes checking your statements each month the single most important habit for protecting the account. Miss the window and the cap goes away.

Overdraft Risk Hits Harder on ACH

When an automatic withdrawal arrives and your balance can’t cover it, the bank either pays the transaction and overdraws your account or rejects it for nonsufficient funds. Either way, expect a fee.

Here’s the trap most people miss. Federal rules require your bank to get your opt-in consent before charging overdraft fees on one-time debit card purchases and ATM withdrawals. That opt-in requirement does not apply to ACH transactions.¹⁰ Your bank can charge overdraft fees on an automatic bill payment whether or not you ever opted in. If the bank rejects the payment instead, the company that tried to collect often adds its own returned-payment fee, so one failed withdrawal can hit you twice.

If a payment is about to run and your balance is tight, moving money in before the debit processes is almost always the cheapest option. Timing works in your favor here: ACH debits don’t process on weekends or holidays, so a Friday withdrawal typically won’t settle until Monday.

1
Federal Reserve Services. Same Day ACH Frequently Asked Questions
2
eCFR. 12 CFR Part 1005 – Electronic Fund Transfers (Regulation E)
3
Office of the Law Revision Counsel. 15 U.S. Code 1693e – Preauthorized Transfers
4
eCFR. 12 CFR 1005.10 – Preauthorized Transfers
5
Consumer Financial Protection Bureau. 12 CFR Part 1005 (Regulation E) – 1005.6 Liability of Consumer for Unauthorized Transfers
6
Consumer Financial Protection Bureau. How Can I Stop a Payday Lender From Electronically Taking Money Out of My Bank or Credit Union Account
7
FDIC. EFTA – Electronic Fund Transfer Act
8
Consumer Financial Protection Bureau. 12 CFR Part 1005 (Regulation E) – 1005.11 Procedures for Resolving Errors
9
eCFR. 12 CFR 205.6 – Liability of Consumer for Unauthorized Transfers
10
Consumer Financial Protection Bureau. Understanding the Overdraft Opt-In Choice