Yes, you can reverse an ACH payment in certain situations, but the rules depend on which side of the transaction you’re on. If you’re the company or person who sent the payment by mistake, Nacha rules give you five banking days to pull it back through your bank. If money was debited from your personal account without your permission, Regulation E gives you 60 days from the statement date to dispute it. Outside those windows, or outside the narrow list of qualifying reasons, an ACH reversal isn’t available and you’ll need to recover the money another way.
Two Different Reversal Paths
The word “reversal” gets used loosely, but ACH recovery actually splits into two separate processes with different rules, deadlines, and paperwork.
One path is an originator-initiated reversal. The company or person who sent the payment discovers their own error and asks their bank to pull the money back. This runs under the Nacha Operating Rules and only covers specific mistakes on the sender’s side.
The other path is a consumer-initiated return, usually called a dispute. Your account was debited without permission or for the wrong amount, and you ask your bank to send the funds back. Personal accounts are protected by federal Regulation E. Business accounts fall under the Uniform Commercial Code, which is far less generous.
Which path applies determines everything that follows: what reasons qualify, how fast you must act, and what documentation your bank will demand.
Reversing a Payment You Sent by Mistake
If you originated the payment, Nacha rules limit reversals to five specific errors:
- A duplicate payment (the same transaction sent twice)
- A payment sent to the wrong account
- A payment for the wrong dollar amount
- A debit processed before the intended date
- A credit processed after the intended date
The reversal entry has to be transmitted within five banking days of the original payment’s settlement date.1Nacha. RMAG Originator Essentials Miss that window and the reversal process is no longer available; recovering the money then means contacting the recipient directly and asking for a refund. You also have to notify the recipient that a reversal is in progress.2Nacha. Reversals
A reversal isn’t guaranteed to succeed even when filed on time. If the recipient’s account no longer has enough money to cover it, the reversal comes back unpaid, and you’re left pursuing the funds some other way.
Disputing an Unauthorized Debit from Your Personal Account
Regulation E lets you dispute an ACH debit from a personal account when the transaction was unauthorized, when you previously authorized recurring payments but revoked that authorization, or when the amount charged differs from what you agreed to.
What doesn’t qualify: buyer’s remorse. Changing your mind about a purchase or being unhappy with a product is a private matter between you and the merchant, and your bank cannot reverse the payment on those grounds. Federal law covers unauthorized or erroneous transfers, not regret.3eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
The 60-Day Deadline
You have 60 days to report an unauthorized debit, and the clock starts on the date your bank sends or makes available the statement showing the transaction. After that 60-day window closes, the bank is no longer required to return those funds.3eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
Liability When an Access Device Is Lost or Stolen
If the unauthorized transfer traces back to a lost or stolen access device, such as a debit card or compromised login credentials, how quickly you report changes how much money you can lose:
- Report within two business days of learning about the loss or theft: your liability is capped at $50, or the amount taken before you notified the bank, whichever is less.
- Report after two business days but within 60 days of the statement: liability can rise to $500, covering transfers that happened after the two-day window and that earlier notice would have prevented.
- Report after 60 days: liability becomes unlimited for transfers that occur after day 60 and before you notify the bank.
These tiers apply specifically to the lost-or-stolen-device scenario.3eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers Across every situation, the pattern holds: faster reporting means less exposure.
If the Account Is a Business Account
Business accounts don’t get Regulation E. They fall under UCC Article 4A, which technically gives a business up to one year after receiving a statement to object that the bank wasn’t entitled to make the debit.4Legal Information Institute. UCC 4A-505 – Preclusion of Objection to Debit of Customer’s Account
The practical window is much shorter. Under Nacha rules, the receiving bank’s deadline to return most entries is two banking days after settlement. Spot an unauthorized debit after that, and the streamlined ACH return process is gone; recovery then usually means direct negotiation with the sender or litigation. Daily monitoring of business accounts is worth the trouble, because a single day past the return window can turn a routine recovery into an expensive one.
Stopping a Future Preauthorized Payment
If the payment you want to stop hasn’t happened yet, you don’t need the dispute process at all. Regulation E lets you place a stop payment by notifying your bank at least three business days before the scheduled transfer date.5eCFR. 12 CFR 1005.10 – Preauthorized Transfers
You can make the request orally or in writing. If you call, your bank may require written confirmation within 14 days; without that follow-up, an oral order stops being binding after the 14-day period.5eCFR. 12 CFR 1005.10 – Preauthorized Transfers Most banks charge a fee, commonly in the $15 to $36 range.
A stop payment only blocks the next scheduled debit. It doesn’t cancel your underlying agreement with the merchant, so you should also contact the company to revoke authorization directly, or they may keep trying to collect.
Filing the Dispute
Before you contact your bank, pull the exact date the funds left your account and the originator’s name as it appears on your statement. If you can find the trace number, a unique identifier for each ACH transaction, include that too.
For unauthorized debits on consumer accounts, banks generally require a Written Statement of Unauthorized Debit (WSUD). The form asks for your account number, the trace number, and your signature.6Federal Reserve Financial Services. Written Statement of Unauthorized Debit Copy (WSUD) Your bank must have a signed WSUD in hand before it can process an extended return.7Nacha. Risk Management Topics – October 1, 2024 The form is usually available through your bank’s online portal or at a branch.
You can submit through secure messaging, a dispute portal, or by mailing the signed form via certified mail. Certified mail is worth the extra step because it creates a dated record proving you filed inside the legal deadline.
Once the bank accepts the dispute, it has 10 business days to investigate. It can extend the investigation to 45 days, but only by provisionally crediting your account within those first 10 business days.8eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors That provisional credit puts the money back in your account during the review. If the bank ultimately finds no error, it can reverse that credit after notifying you.
What Happens If You File a False Claim
The WSUD is a legal document. Claiming a transaction was unauthorized when it wasn’t, just to get the money back, is bank fraud. The sample WSUD carries a warning that intentional misrepresentation can trigger federal charges under 18 U.S.C. ยง1344.9Nacha. ACH Operations Bulletin 1-2023 – Update to Sample Written Statement of Unauthorized Debit
Penalties reach up to a $1,000,000 fine, up to 30 years in prison, or both.10Office of the Law Revision Counsel. 18 USC 1344 – Bank Fraud The non-criminal fallout matters too: banks close accounts over false disputes and report the customer to consumer reporting agencies, which can make opening a new account elsewhere difficult. File a WSUD only if the transaction was genuinely unauthorized.