If a company is pulling money from your account on a schedule, you have the right to be told in advance when the amount changes, to cap your losses on charges you never authorized, to dispute billing errors through your bank or card issuer, and to cancel as easily as you signed up. Understanding your rights around automated payments and how to cancel them comes down to two things: knowing whether the charge runs through your bank account or a stored card, and acting inside the deadlines federal law sets. Miss those deadlines and protections that would have cost you nothing can cost you everything.
Why the Payment Method Changes Your Rights
Recurring charges run on one of two rails, and the rail determines the rulebook.
Bank-account debits move through the Automated Clearing House (ACH) network. You gave the merchant your routing and account numbers, and it pulls funds directly, usually settling in one to three business days. These transfers fall under Regulation E, the federal rule that governs electronic fund transfers from consumer bank accounts.1eCFR. Part 1005 Electronic Fund Transfers (Regulation E)
Card-on-file charges are different. You stored a credit or debit card number with a merchant, and each charge runs through the card network. Disputes follow credit card billing-error rules and the network’s own chargeback policies rather than Regulation E’s bank-account protections.
Practically, this means the tools available to you split by rail. For ACH debits, you can go directly to your bank and order it to refuse the next payment. For a stored card, you generally go to the card issuer and dispute the charge after it posts. Before you take any action, figure out which rail the payment uses.
What Counts as Valid Authorization
A merchant cannot lawfully pull money on a recurring basis without your affirmative consent, and the burden of proving that consent is on the merchant. For ACH auto-pay, your authorization has to specify the amount (or an expected range), how often you’ll be charged, and the account information. It must also tell you how to cancel — that piece is a regulatory requirement, not a courtesy.2eCFR. 12 CFR 1005.10 Preauthorized Transfers
Electronic sign-ups count. Clicking “I agree” carries the same legal weight as a paper signature under the E-Sign Act.3Office of the Law Revision Counsel. 15 USC Chapter 96 – Electronic Signatures in Global and National Commerce Keep a copy of whatever you signed or clicked through. If the merchant later changes the terms or you have to prove you never agreed to a charge, that original agreement is your best evidence.
Online subscriptions and free trials come with an extra layer. Under the Restore Online Shoppers’ Confidence Act, a merchant must clearly disclose the material terms before collecting your payment details, obtain your express informed consent, and provide a simple way to cancel.4Office of the Law Revision Counsel. 15 USC Chapter 110 – Online Shopper Protection Burying the recurring charge in fine print or building a maze around cancellation is a federal violation.
How to Cancel an Automated Payment
Cancellation works in two layers: end the underlying agreement with the merchant, then, if you have any doubt, block the payment at your bank or card issuer.
Cancel With the Merchant First
Send the cancellation in writing through a method that creates a record — email with a delivery receipt, or certified mail. Check your original agreement for any required notice period; some contracts require 30 days’ notice before cancellation takes effect. Save the confirmation you receive back.
A 2025 FTC rule made this easier. Under the amended Negative Option Rule, canceling has to be at least as easy as signing up.5Federal Trade Commission. Federal Trade Commission Announces Final Click-to-Cancel Rule If you subscribed online with two clicks, the merchant cannot force you to phone a retention specialist to get out. If you signed up over the phone, the merchant must offer phone or online cancellation and cannot make you show up in person.6Federal Trade Commission. Click to Cancel – The FTC’s Amended Negative Option Rule and What It Means for Your Business
Stop an ACH Debit at Your Bank
For bank-account debits, you can order your bank to refuse a payment. Notify the bank by phone or in writing at least three business days before the scheduled transfer date and identify the payee, the amount, and the date. If you give the order by phone, the bank can require you to confirm it in writing within 14 days.7eCFR. Part 1005 Electronic Fund Transfers (Regulation E) – Section 1005.10
Banks typically charge between $15 and $36 for a stop-payment order, though some waive the fee for online or mobile requests or for premium checking accounts. Make sure your order covers all future recurring charges from that merchant, not just the next single transaction.
Card-on-File: Don’t Rely on the Card Expiring
A common misconception: let the card expire or get a new number and the recurring charges will just stop. They usually won’t. The major card networks run Account Updater services that automatically send merchants your new card details when a card is reissued, renewed, or replaced. The whole point is to keep subscriptions running through card changes. To end a card-on-file charge, cancel the service with the merchant. If the merchant keeps billing after you cancel, dispute the next charge with your card issuer.
Notice You’re Owed Before a Charge Changes
For preauthorized ACH debits, when the payment amount will differ from the previous charge or from what you originally agreed to, the merchant or your bank has to send you written notice at least 10 days before the scheduled transfer.2eCFR. 12 CFR 1005.10 Preauthorized Transfers That window is your chance to stop the payment if the new amount is wrong.
You can tailor how you receive these alerts. Instead of a notice every time the amount changes, you can agree to be notified only when a charge falls outside a range you specify or differs from the last payment by more than a set dollar amount.2eCFR. 12 CFR 1005.10 Preauthorized Transfers If your electric bill swings between $80 and $150, you might ask to be alerted only when it exceeds $150.
Card networks add their own rules. Visa, for example, requires merchants to send a reminder at least seven days before the first charge after a free trial or introductory offer ends, including a link to the cancellation policy.8Visa. Trial Subscription Updates If you never got that heads-up before the first real charge, that’s strong ground for a chargeback.
If a Charge Is Unauthorized: Deadlines and Liability Caps
Your maximum financial exposure depends on the rail and on how quickly you report the problem. The deadlines are hard cutoffs.
ACH and Debit Card Charges
For an unauthorized ACH debit with no lost or stolen card involved — say, a merchant charges your account after you canceled — your liability is zero if you report it within 60 days of the date your bank sent the statement showing that charge. Miss the 60-day window and you become liable for unauthorized transfers occurring after day 60 until you finally notify the bank.9Consumer Financial Protection Bureau. Regulation E – 1005.6 Liability of Consumer for Unauthorized Transfers
When a lost or stolen debit card or access device is involved, the tiers tighten:
- Report within 2 business days of learning of the loss, and your liability caps at $50 or the amount of unauthorized transfers before you notified the bank, whichever is less.9Consumer Financial Protection Bureau. Regulation E – 1005.6 Liability of Consumer for Unauthorized Transfers
- Report after 2 business days but within 60 days of the statement, and liability can reach $500.
- Fail to report within 60 days of the statement, and you face unlimited liability for unauthorized transfers occurring after that window closes.
The jump from $50 to $500 to unlimited is why regular statement review matters. The two-business-day clock starts when you learn of the loss, not when the unauthorized charge appears.
Credit Card Charges
Credit cards are more forgiving. Federal law caps your liability for unauthorized credit card charges at $50, with no escalating tiers based on reporting speed.10Office of the Law Revision Counsel. 15 USC 1643 – Liability of Holder of Credit Card Every major card network’s zero-liability policy reduces that $50 to zero for unauthorized charges reported promptly. That gap is the strongest argument for putting recurring charges from unfamiliar merchants on a credit card rather than a debit card.
Disputing a Charge That Already Posted
Not every problem is an unauthorized charge. If a merchant billed you the wrong amount, kept billing after you canceled, or delivered something materially different from what was described, those are billing errors.
Credit Card Billing Errors
Under the Fair Credit Billing Act, you must send written notice to your card issuer within 60 days after the statement containing the error was transmitted.11Federal Trade Commission. Fair Credit Billing Act Send it to the address the issuer designates for billing disputes (not the general payment address), and include your name, account number, and enough detail to identify the charge. The issuer must acknowledge the dispute within 30 days and resolve it within two complete billing cycles, no more than 90 days.12eCFR. 12 CFR 1026.13 Billing Error Resolution
While the investigation is open, you don’t have to pay the disputed amount, and the issuer cannot report it as delinquent or take collection action on that portion of your balance.
The dispute triggers a chargeback: a forced reversal back to the merchant, which then has to prove the charge was valid. Specifics win chargebacks; vague complaints lose them. Pull together the original signup agreement, any cancellation confirmation, screenshots of the terms you were shown, and a timeline of what happened.
ACH Dispute Investigations
For ACH disputes under Regulation E, after you notify your bank of an unauthorized or erroneous transfer, the bank generally has 10 business days to investigate and reach a conclusion. It can extend to 45 days if it provisionally credits your account within those first 10 business days.13eCFR. Part 1005 Electronic Fund Transfers (Regulation E) – Section 1005.11 Provisional credit means you get access to the disputed funds while the bank works through it.
If the bank finds no error, it can reverse the provisional credit, but it has to explain the decision in writing and give you the documents it relied on. You can request those documents and push back.
Escalating When You Get Nowhere
If your bank or card issuer won’t resolve the dispute, file a complaint with the Consumer Financial Protection Bureau. The CFPB forwards the complaint to the company, which generally responds within 15 days (up to 60 days for complex cases). You’ll see the response and have 60 days to say whether it actually resolved the issue.14Consumer Financial Protection Bureau. Learn How the Complaint Process Works
A CFPB complaint doesn’t guarantee a particular outcome, but companies take these seriously because complaints go into a public database. For clear violations of Regulation E deadlines or billing-error procedures, a complaint often produces results that another call to customer service will not.
Stopping the Payment Does Not Cancel the Debt
This is where people get burned. A stop-payment order, closing your bank account, or removing your card does not cancel the underlying contract or erase what you owe.15Consumer Financial Protection Bureau. How Do I Stop Automatic Payments From My Bank Account If you owe six months on a gym contract and you close the checking account instead of canceling the membership, those six months don’t vanish. The balance goes to collections and lands on your credit report.
Loans work the same way. Revoking auto-pay on a car loan doesn’t pause the loan — you still have to make each payment through another method, or you’re facing late fees, credit damage, and possible default. Cancel the service or arrange an alternative payment before you cut off the automated funding source.