A recurring payment is an automatic charge a business pulls from your credit card, debit card, or bank account on a schedule you agreed to when you signed up. Once you authorize it, the merchant initiates each charge without asking again. Streaming services, gym memberships, insurance premiums, utility bills, and loan payments all run on this model, and federal law gives you specific rights to control, dispute, and shut down these charges.
What You Agreed To When You Signed Up
Every recurring charge traces back to an authorization you gave, whether by checking a box at online checkout, signing a form, or agreeing over the phone. That authorization is the legal basis for every future debit.
A valid authorization has to tell you the frequency (weekly, monthly, annually), the amount you’ll be charged each cycle, and which account will be debited. If the amount can vary, the business must explain how it’s calculated. For online sign-ups, federal law requires the business to disclose all material terms before collecting your billing information, get your informed consent before charging you, and give you a straightforward way to cancel.
The actual money moves through one of two systems. If you handed over bank routing and account numbers, the charge runs through the ACH network. If you gave a card number, it runs through a card network like Visa or Mastercard. That distinction turns out to matter a lot when something goes wrong.
Why Paying by Card vs. Bank Account Changes Your Rights
The protections you get on an unauthorized recurring charge depend on which payment method the merchant is pulling from. This is the single most consequential difference in how these payments work, and most people don’t learn it until they need it.
Credit Card Charges
If someone runs an unauthorized charge on your credit card, your maximum liability is $50, and most issuers waive even that.1Office of the Law Revision Counsel. 15 USC 1643 – Liability of Holder of Credit Card You dispute billing errors through the chargeback process. Because the money hasn’t left your account yet — it’s the issuer’s money in play while the dispute runs — you aren’t out of pocket while it’s investigated.
Debit Card and Bank Account Debits
Debit cards and ACH pulls from checking fall under the Electronic Fund Transfer Act and Regulation E. Protection is weaker and time-sensitive. Your liability for unauthorized transfers depends on how fast you report:
- Reported within 2 business days of learning about it: liability capped at $50.
- Reported after 2 but within 60 days of the statement showing the error: liability can reach $500.
- Reported more than 60 days after the statement: you can be liable for the full amount of any unauthorized transfers that occur after that 60-day window.
The money has already left your checking account, so while a dispute is pending you may be short on cash for rent and groceries in a way a credit card dispute never causes.2Consumer Financial Protection Bureau. Regulation E 1005.6 – Liability of Consumer for Unauthorized Transfers
Notice You’re Owed When the Amount Changes
Not every recurring bill is the same each cycle. Utilities, usage-based subscriptions, and similar charges fluctuate. When a scheduled debit from your bank account will differ from the previous payment or the authorized amount, the merchant or your financial institution must send you written notice of the new amount and the transfer date at least 10 days before the charge hits.3eCFR. 12 CFR 1005.10 – Preauthorized Transfers
You can arrange to only be notified when the amount falls outside a range you agreed to, or when it differs from the previous charge by more than a set dollar amount. Either way, a surprise variable charge on a bank debit usually means someone skipped a notice they owed you.4Consumer Financial Protection Bureau. How Do Automatic Payments From a Bank Account Work?
How to Stop a Recurring Payment
You have two paths, and using both is often the safest move.
Cancel Through the Merchant
Start with the merchant’s own cancellation process, whether that’s an account settings page, a phone call, or an email. Save written confirmation, a screenshot or a confirmation email. Later disputes often turn on whether you can prove you asked to cancel and when.
Stop Payment Through Your Bank
If the merchant drags its feet or you want a backstop, you can issue a stop-payment order at the bank. For preauthorized ACH debits, you have the legal right to stop payment by notifying your bank orally or in writing at least three business days before the scheduled transfer.5eCFR. 12 CFR 205.10 – Preauthorized Transfers The bank must honor that instruction. If there’s a fee for the stop-payment, the bank has to disclose it upfront.
For card-based recurring charges, you can ask your issuer to block future charges from a specific merchant. It’s less formally codified than an ACH stop payment, but card issuers generally comply.
Why a New Card Number Doesn’t Always Stop the Charges
Getting a new card doesn’t necessarily kill a recurring charge. The major card networks run “automatic billing updater” services that quietly share your new card number and expiration date with merchants who have you on file for recurring billing.6Mastercard Developers. Automatic Billing Updater The point is to keep legitimate subscriptions from failing when a card is replaced, but it also lets a merchant you thought you’d cut off keep billing the new number.
To actually cut the merchant off, cancel with the merchant, ask your issuer to block the merchant, or ask your bank to opt your card out of the automatic billing updater program. Not every issuer makes that opt-out easy to find, so you may have to call and ask for it by name.
Disputing an Unauthorized or Wrong Charge
If an unauthorized or incorrect recurring charge shows up on your statement, federal law gives you a window to report it, but not an unlimited one. For electronic fund transfers, ACH debits and debit card charges, you must notify your financial institution within 60 days after it sends the periodic statement showing the error. Miss that window and you can lose the right to recover the funds.7Consumer Financial Protection Bureau. Regulation E 1005.11 – Procedures for Resolving Errors
Once you file a notice of error, the bank must investigate. It generally has 10 business days to resolve the issue, though it can take up to 45 days if it provisionally credits your account during the investigation. The liability tiers above apply based on how quickly you reported after learning about the problem.2Consumer Financial Protection Bureau. Regulation E 1005.6 – Liability of Consumer for Unauthorized Transfers
For credit card charges, dispute through your issuer’s chargeback process. The billing error notice generally has to go in within 60 days of the statement date, but your maximum exposure stays at $50 regardless of timing.
When a Recurring Payment Fails
If the account doesn’t have enough money for a scheduled debit, several things can happen at once. Your bank may decline the transaction or let it through and charge an overdraft fee. The merchant’s system will typically retry the payment, sometimes over several days, and each failed attempt can trigger another bank fee.
On the merchant’s side, a failed payment usually counts as late or missed. Depending on the service, that can mean a late fee, temporary suspension, or both. For insurance premiums and loan payments, a lapse caused by a failed autopay can carry consequences well beyond the missed charge, like a coverage gap or a negative mark on your credit report. If you know a scheduled date will be tight, calling the merchant ahead of time to shift the date or amount is almost always cheaper than the fallout.
Federal Rules on Online Sign-Ups and Cancellations
The Restore Online Shoppers’ Confidence Act (ROSCA) makes it illegal to charge you through a negative option feature online unless the business discloses all material terms before collecting billing information, obtains express informed consent, and provides a simple way to stop the recurring charges.8Office of the Law Revision Counsel. 15 USC 8403 – Negative Option Marketing on the Internet A negative option is any arrangement where your silence or inaction is treated as acceptance, the “cancel or we’ll keep charging you” model.
The FTC tried to strengthen these protections in 2024 with a rule requiring that cancellation be at least as easy as sign-up. The U.S. Court of Appeals for the Eighth Circuit vacated that rule on procedural grounds in July 2025.9Federal Register. Rule Concerning the Use of Prenotification Negative Option Plans As of early 2026, the FTC has published an advance notice of proposed rulemaking to revisit the issue, but no replacement rule is in effect. ROSCA’s baseline still applies, so businesses have to offer a simple cancellation mechanism; they just aren’t bound by the more specific click-to-cancel requirements the FTC had tried to impose.