The difference in one table
| ACH credit | ACH debit | |
|---|---|---|
| Direction | Money is pushed into the receiver’s account | Money is pulled from the receiver’s account |
| Who starts it | The payer | The company being paid |
| Everyday name | Direct deposit | Direct payment, autopay, automatic withdrawal |
| Permission from the account holder | Not required in writing for direct deposit | Required. In writing or similarly authenticated for a personal account |
| Settles | Same day, next banking day, or two banking days | Same day or next banking day |
| Risk of coming back | Low | Higher. It can be returned for no funds or no authorization |
| Share of ACH payments | Just under half | Just over half |
Nacha describes it this way: ACH is unusual among payment systems because it can both push and pull funds.
What an ACH credit is
In an ACH credit, the person or company with the money sends it. Nacha’s wording is a “push” of funds from the originator’s account to the receiver’s account.
Common ACH credits:
- wages and expense claims
- pensions, annuities, dividends and interest
- Social Security and other government payments
- tax refunds and other refunds
- a business paying a supplier’s invoice
- a customer paying your invoice from their own online banking
Nacha’s consumer name for an ACH credit is Direct Deposit. See is direct deposit ACH?. On a bank statement it may say ACH credit or ACH deposit. See what an ACH deposit is.
What the payer needs. The receiver’s name, routing number, account number and account type. A business usually collects them on an ACH information form or a vendor ACH form.
What an ACH debit is
In an ACH debit, the company being paid sends the payment instruction. Nacha’s wording is a “pull” of funds from the receiver’s account to the originator’s account.
Common ACH debits:
- mortgage, rent and loan payments
- utility, phone and insurance bills
- tuition and membership fees
- tax and homeowners association payments
- donations to a charity
- moving money into an investment account
Nacha’s consumer name for an ACH debit is Direct Payment. On a bank statement it may say ACH debit, ACH withdrawal or ACH pmt. See what an ACH withdrawal is.
What the collector needs. The same four bank details, plus the account holder’s permission. That permission is the ACH authorization form.
Who is the originator?
This confuses many people. In both kinds of payment, the originator is whoever starts the entry.
- In a credit, the originator is the payer. The employer is the originator and the employee is the receiver.
- In a debit, the originator is the company being paid. The utility is the originator and the customer is the receiver, even though the customer is the one paying.
So “receiver” does not always mean the one who receives money. It means the one whose account the entry is sent to.
Permission: the biggest difference
For a debit from a personal account, the rules are strict.
- Nacha says a consumer debit authorization must be in writing, or “similarly authenticated”, which covers an electronic signature.
- The terms must be clear and easy to understand.
- Federal law, Regulation E, says the same for recurring payments, and adds that the company must give the consumer a copy.
- The company must be able to produce proof of the authorization if the bank asks for it.
For a credit to a personal account, such as direct deposit, Nacha’s guide lists the authorization as oral or non-written. A signed direct deposit form is still good practice, because it records the bank details in the employee’s own hand.
Between two businesses, credits and debits both need an agreement between the two companies. Nacha’s rules do not say what the agreement must contain, except that both sides agree to be bound by the Nacha Operating Rules.
Changing a recurring debit
If a company changes a debit that a customer already approved, it must tell the customer first.
| Change | Notice needed |
|---|---|
| The date of the debit | 7 calendar days, for personal and business accounts |
| The amount of the debit | 10 calendar days, for personal accounts |
Regulation E has a matching rule for payments that vary in amount: written notice of the amount and date at least 10 days before the transfer.
Timing
Credits and debits follow different clocks.
- Credits can settle the same day, the next banking day, or two banking days ahead.
- Debits settle the same day or the next banking day. They cannot be dated more than one banking day ahead.
When a standard ACH credit arrives, the receiving bank must make the money available by 9:00 a.m. its local time on the settlement date. This has been the rule for standard credits since September 18, 2026.
There is no matching rule for the company that collects a debit. Federal rules treat ACH debits differently because the receiver has the right to have the transfer returned. That is why a bank or processor may wait before it pays out the money from a debit. More detail is in how long an ACH transfer takes.
Returns
A debit can come back for more reasons than a credit.
| Reason | Applies to | Time limit for the return |
|---|---|---|
| Insufficient funds, closed account, wrong number | Mostly debits | Two banking days |
| Not authorized, personal account | Debits | 60 days, with the customer’s written statement |
| Not authorized, business account | Debits | Two banking days |
The codes for unauthorized returns are R10 and R11 for personal accounts and R29 for business accounts. A return for insufficient funds is R01.
Credits can come back too. A credit sent to a closed or wrong account is returned, and a sender can reverse a credit it sent by mistake. See ACH reversals.
An ACH debit is not a debit card
The words are similar. The payments are not.
| ACH debit | Debit card payment | |
|---|---|---|
| Uses | Routing number and account number | Card number |
| Travels through | The ACH Network | A card network |
| Started by | The company, from your authorization | You, at a terminal or checkout |
Regulation E lists both as kinds of electronic fund transfer, so a personal account has error and dispute rights for either one. More is in ACH vs credit card and debit card.
A debit that is sent again
When a debit comes back unpaid, the company may be allowed to try again. Statements and payment tools sometimes call this a recycled ACH debit. In the Nacha rules it is a reinitiated entry, and its description must read RETRY PYMT so the customer can see what it is.
A debit returned as unauthorized cannot simply be sent again. The company needs a new authorization first.
Other statement words are explained in ACH on a bank statement.
Which one should a business use?
Use ACH debit when you bill customers on a schedule and want to control the date. You carry the work of getting authorizations and the risk of returns.
Ask for ACH credit when you send invoices and the customer pays when ready. You give the customer your bank details, they push the money, and there is no authorization to collect.
Many businesses use both: debits for subscriptions and credits for one-off invoices.
Common mistakes
- Mixing up the two on a form. A form that only gives bank details so someone can pay you is not a debit authorization. Use the right form for the direction of the money.
- Debiting with no proof of permission. If a customer says the debit was not authorized and you cannot show the authorization, the payment goes back.
- Changing the amount without notice. Give 10 calendar days’ notice to a personal customer.
- Assuming a settled debit is final. Wait for the return window before treating high-value payments as safe.
- Expecting a credit to be reversed on request. A reversal is only for the sender’s own errors, and only within five banking days.