Direct debit is an automatic payment arrangement in which a company you’ve authorized withdraws a set amount from your checking or savings account on a schedule you’ve agreed to. It runs on the Automated Clearing House (ACH) network, and federal law, specifically Regulation E under the Electronic Fund Transfer Act, controls how these payments can be set up, changed, disputed, and stopped. If a utility, insurer, lender, or subscription service takes its payment from your bank account each month without you doing anything, that’s a direct debit.
How Direct Debit Works
Direct debit is a “pull” transaction. Instead of you sending money to the company, the company sends a request to your bank asking it to release a specific amount. That request travels through the ACH network, managed by Nacha. Your bank checks that a valid authorization is on file, then releases the funds. Standard ACH transfers settle in one to two business days.
Before any company can pull money from your account, Regulation E requires it to obtain your authorization in writing or through an authenticated electronic signature. The authorization has to spell out the amount, the schedule, and how you can revoke it, and the company must give you a copy.1eCFR. 12 CFR 205.10 – Preauthorized Transfers Without that authorization, a debit isn’t legal.
How It Differs from Bill Pay and Card Autopay
Direct debit is easy to confuse with two other automatic payment methods, and the distinction matters because each has different rules.
With bill pay through your bank’s online portal, you schedule and control the payment. That’s a “push” from you. Direct debit is a “pull” from the company. The company decides when to submit each request; you agreed to the terms once at setup.
Credit card autopay is different again. When a merchant charges a card on file, the transaction moves through the card networks, not ACH, and disputes are handled as chargebacks under the Fair Credit Billing Act rather than under Regulation E. Direct debit refers specifically to ACH withdrawals from a bank account.
Setting Up a Direct Debit
To set one up, you give the company two numbers: your bank’s nine-digit routing number and your account number. A voided check contains both, or you can enter them into a secure online form. You then sign an authorization form covering the amount, timing, and cancellation terms. Banks usually take a few business days to verify the account and connect it before the first debit runs.
Notice When the Payment Amount Changes
If a scheduled debit is going to differ from the previous one, the company or your bank must send you written notice at least 10 days before the withdrawal, including the new amount and the date.2eCFR. 12 CFR 1005.10 – Preauthorized Transfers That rule applies to variable-amount payments, not to fixed recurring charges that stay the same each month.
You can tailor how you get those notices. Regulation E lets you ask to be notified only when a payment falls outside a range you set, or when it differs from the last one by more than a threshold you choose.3eCFR. 12 CFR Part 205 – Electronic Fund Transfers (Regulation E) Useful for a bill that swings with the seasons.
When a Direct Debit Fails
If the money isn’t in your account when the debit hits, two fees can stack. Your bank may charge a non-sufficient funds fee, and the merchant may charge a returned-payment fee. Bank NSF fees have historically run around $35.4FDIC. Overdraft and Account Fees A CFPB rule that took effect in October 2025 now requires banks with more than $10 billion in assets to either cap overdraft fees at $5, limit them to actual costs, or treat overdrafts as regulated loans with full disclosure.5Consumer Financial Protection Bureau. CFPB Closes Overdraft Loophole to Save Americans Billions in Fees Smaller banks and credit unions aren’t covered, so fees there can still be higher.
Merchant returned-payment fees vary by state, generally from $10 to $35. And a single missed payment isn’t necessarily one event. Under Nacha’s rules, a company can re-submit a failed ACH debit up to two additional times, for a total of three attempts, and each failed try can trigger another bank fee.
Your Rights If Something Goes Wrong
Regulation E gives you specific protections that override less favorable terms in your bank’s account agreement.
Unauthorized Debits
If a company pulls money without authorization, or pulls more than you agreed to, your liability depends on how fast you report it. Report within two business days of learning about the charge and your maximum loss is $50. Report after that but within 60 days of the bank statement, and your exposure rises to $500. Wait longer than 60 days and you can be liable for the full amount of any further unauthorized transfers between the end of that 60-day period and the date you finally notify the bank.6eCFR. 12 CFR 205.6 – Liability of Consumer for Unauthorized Transfers
The 60-day clock starts when the statement is sent, not when you open it. If something like a hospital stay kept you from reporting sooner, the bank must extend the deadlines to a reasonable period.
Error Investigations
When you report an error, your bank has 10 business days to investigate and reach a conclusion. If it finds an error, it has to correct it within one business day and notify you within three business days of finishing the investigation. The bank can extend the investigation to 45 days, but only if it provisionally credits the disputed amount to your account within that first 10-day window. Some categories, including international transfers and point-of-sale debit card charges, get a longer 90-day window.7Consumer Financial Protection Bureau. 12 CFR 1005.11 – Procedures for Resolving Errors
How to Cancel a Direct Debit
You can stop any preauthorized direct debit by notifying your bank at least three business days before the next scheduled payment. The notice can be oral or in writing.2eCFR. 12 CFR 1005.10 – Preauthorized Transfers If you call, the bank can require written confirmation within 14 days; without that follow-up, an oral stop-payment order expires after 14 days.1eCFR. 12 CFR 205.10 – Preauthorized Transfers
If the bank fails to honor a valid stop-payment order and lets the debit through, federal law makes the bank liable for all damages you suffer, including the debited amount and downstream costs like overdraft fees or bounced payments on other bills.8Office of the Law Revision Counsel. 15 USC 1693h – Liability of Financial Institutions
One boundary to keep in mind: stopping the payment at your bank does not cancel your contract with the company. If you owe under an ongoing agreement like a gym membership or a loan, revoking the direct debit doesn’t erase the debt. Contact the company separately to cancel service or set up another payment method, or you may face late fees and collections even though the stop-payment order was valid. Banks typically charge a fee for a stop-payment request, often in the $15 to $36 range.