How to stop an unauthorized ACH withdrawal

What an ACH withdrawal is, how to stop one, and how to get your money back if it was not authorized.

By the ACH Forms team. Checked against 8 sources. Last reviewed .

Short answer

An ACH withdrawal is money taken from your bank account by a company through the ACH network. To stop one, tell the company you revoke your permission, then tell your bank. For a payment that already left without your permission, report it to your bank within 60 days of the statement that shows it.

What an ACH withdrawal is

An ACH withdrawal is a payment that a company takes from your bank account through the ACH network. The company may only take it if you gave permission, called an authorization. To read the statement line and find out who took the money, see what an ACH withdrawal is.

Stop a payment before it happens

Follow these four steps, in this order. They come from the Consumer Financial Protection Bureau.

  1. Tell the company. Call the company and say you are taking away your permission for automatic payments. Then send it in writing and keep a copy.
  2. Tell your bank. Say you have revoked authorization for that company to take payments from your account. Your bank must then block future payments for that debit.
  3. Give a stop payment order. This tells the bank not to pay a specific payment. To stop the next one, give the order at least three business days before the payment is due.
  4. Watch your account. If a payment still goes through, tell your bank right away.

The CFPB publishes free sample letters for each step: one to the company, one to your bank, a stop payment order, and a notice of an unauthorized transfer. You can also make these letters here.

The deadlines that matter

What you want to doDeadline
Stop the next recurring paymentTell your bank at least 3 business days before the scheduled date
Confirm a phone order in writing, if the bank asksWithin 14 days
Report a payment you did not authorizeWithin 60 days of the statement that first shows it

Banks generally charge a fee for a stop payment order. Ask your bank what it charges.

Get money back after an unauthorized withdrawal

If money has already left your account without your permission, act quickly.

  1. Call your bank and say the ACH debit was not authorized. Follow up in writing if the bank asks. It may require written confirmation within 10 business days.
  2. Sign the bank’s statement. For an unauthorized ACH debit, the bank asks you to sign a Written Statement of Unauthorized Debit. It can then return the payment to the company’s bank for up to 60 days after the payment.
  3. Wait for the result. The bank has 10 business days to investigate. If it needs longer, up to 45 days, it must put the money back in your account while it investigates. It may hold back up to $50. If the bank says no or charged you fees, see what to do if your bank says no.
  4. Revoke the authorization, if you ever gave one, so no more payments are taken.

There are two 60-day clocks. Under the ACH rules, your bank can return the payment for 60 days after it was taken. Under Regulation E, you have 60 days from the date the bank sent the statement that first shows it. If you miss that second deadline, you can lose the protection for later transfers. Do not wait for either one. Report it the day you see it.

Which kind of problem is it?

SituationWhat it is calledReturn code the company sees
You never gave this company permissionUnauthorizedR10
You gave permission, but the amount or date was wrongNot in line with your authorizationR11
You cancelled, and they took a payment anywayAuthorization revokedR07
You placed a stop payment on itPayment stoppedR08

If you run a business and received one of these codes, look it up in the ACH return codes list.

These protections are for personal accounts. A business account is not covered by Regulation E, and its bank must return an unauthorized debit by the opening of business on the second banking day after it settled. If you run a business, check your account every day and ask your bank about an ACH debit block or filter.

What this does not cover

A complaint about the goods or the service is not an unauthorized payment. If you authorized the payment and are unhappy with what you received, the ACH return rules do not apply. Contact the company about it.

Common mistakes

  • Only telling the company. Tell your bank as well. The bank can block the payments even if the company does nothing.
  • Waiting. Every deadline here is short. Report a problem the day you see it.
  • Closing the account to stop payments. A stop payment or a revoked authorization is simpler, and you may still owe the money.
  • Calling Nacha. Nacha writes the rules but does not process payments and cannot see yours. Your bank is the place to go.

Questions and answers

What is an ACH withdrawal?

An ACH withdrawal, also called an ACH debit, is a payment that a company pulls from your bank account through the ACH network. The company needs your permission first. See what an ACH withdrawal is and who took it.

Can I cancel an ACH payment?

Yes, if it has not been taken yet. Tell the company in writing that you revoke your authorization. To be sure, also give your bank a stop payment order at least three business days before the payment date. Once the money has left, you cannot cancel it, but you can dispute it if it was not authorized.

What are the ACH stop payment rules?

Under Regulation E, you can stop a recurring electronic payment by telling your bank at least three business days before the scheduled date. You can do it by phone or in writing. The bank may ask for written confirmation within 14 days, and an order given by phone lapses after 14 days if you do not send it.

Can my bank block all ACH withdrawals from one company?

Yes. Once you tell your bank that your authorization is no longer valid, it must block all future payments for that debit from that company. It may not wait for the company to stop. The bank can ask you for a copy of your notice to the company.

How does a bank investigate an unauthorized ACH transaction?

The bank has 10 business days from your notice to decide whether an error happened. It can take up to 45 days if it gives you a temporary credit within those 10 business days. It must tell you the result within three business days of finishing, and fix an error within one business day.

Does stopping the payment cancel my debt?

No. The CFPB says cancelling an automatic payment does not cancel what you owe. If you still owe the money, arrange another way to pay.

Sources

  1. How do I stop automatic payments from my bank account?, Consumer Financial Protection Bureau
  2. 12 CFR 1005.10, Preauthorized transfers (Regulation E), Consumer Financial Protection Bureau
  3. Official interpretation of 12 CFR 1005.10 (comments 10(c)-1 and 10(c)-2), Consumer Financial Protection Bureau
  4. 12 CFR 1005.11, Procedures for resolving errors (Regulation E), Consumer Financial Protection Bureau
  5. How do I get my money back after I discovered an unauthorized transaction?, Consumer Financial Protection Bureau
  6. Consumer FAQs on ACH payments, Nacha
  7. Differentiating Unauthorized Return Reasons, Nacha
  8. Disputed ACH Entries: Consumer vs. Non-Consumer (return deadline for business accounts), EPCOR

Last reviewed . How we check our information. Report a mistake on this page.

General information, not legal or financial advice. Rules change and banks set their own requirements. Check with your bank before you act. ACH Forms is not affiliated with Nacha.