An electronic debit is any transaction that pulls money directly from your bank account through digital channels rather than a paper check. Debit card purchases, ATM withdrawals, online bill payments, and automatic monthly charges all fall under this umbrella. They are governed by the federal Electronic Fund Transfer Act and its implementing rule, Regulation E, which set out how these payments must be authorized, how you can dispute them, and what you owe if someone uses your account without permission.1Office of the Law Revision Counsel. 15 USC 1693 – Congressional Findings and Declaration of Purpose
How the Money Actually Moves
Most electronic debits travel through the Automated Clearing House network, a national system that processes transactions in batches. When you authorize a payment, the recipient’s bank sends a digital file with your account information to a central clearinghouse, which routes it to your bank. Your bank verifies the details and, if everything checks out, the funds move electronically.
Traditional ACH processing runs one to three business days because transactions are grouped and settled in scheduled windows. Same-Day ACH speeds this up, allowing transfers of up to $1,000,000 per payment to settle within hours on the same business day.2Federal Reserve Financial Services. Same Day ACH Frequently Asked Questions The Federal Reserve’s FedNow Service moves faster still, settling payments within seconds any time of day, any day of the year.3Federal Reserve. What Is the FedNow Service Not every bank participates in FedNow yet.
The Two Kinds You’ll See on Your Statement
Electronic debits split into two categories based on frequency.
One-time transactions happen during a single event: swiping or tapping a debit card at a checkout, buying something online, or sending a payment through a banking app. You authorize each one individually, usually with a PIN or an on-screen confirmation.
Preauthorized, or recurring, transactions are transfers you set up in advance to repeat at regular intervals. Mortgage payments, insurance premiums, gym memberships, and streaming subscriptions all fit here. Federal law defines a preauthorized transfer as one authorized in advance to recur at substantially regular intervals.4eCFR. 12 CFR Part 1005 – Electronic Fund Transfers, Regulation E
Both appear on your bank statements with the merchant’s name and a transaction code. Reviewing them regularly is the single most important habit for protecting yourself, because most of your rights are tied to how quickly you notice a problem.
What Counts as Valid Authorization
The rules for a one-time debit are loose. Swiping a card and entering a PIN, clicking “confirm payment,” or verbally approving a charge over the phone all count. No written agreement is needed because you’re actively participating as the transaction happens.
Recurring debits carry a stricter standard. A preauthorized transfer can only be authorized by a writing you sign or similarly authenticate, such as an electronic signature on a web form. The company setting up the recurring charge must give you a copy of that authorization for your records.5eCFR. 12 CFR 1005.10 – Preauthorized Transfers Oral consent by itself is not enough to set up a lawful recurring debit.6Office of the Law Revision Counsel. 15 USC 1693e – Preauthorized Transfers
If a recurring debit will differ from the previous payment amount or from what you originally authorized, the company or your bank must send you written notice of the new amount and scheduled date at least 10 days before the transfer.7eCFR. 12 CFR 1005.10 – Preauthorized Transfers You can also ask to be notified only when a transfer falls outside a range you set.
What You Owe if Someone Debits Your Account Without Permission
If an electronic debit comes out of your account without your permission, how much you could lose depends almost entirely on how fast you report it. Federal law sets three tiers:
- Report within two business days of learning your card or access information was lost or stolen, and your liability is capped at $50, or the total unauthorized transfers before you notified the bank, whichever is less.8eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
- Report after two business days but within 60 days of receiving the statement showing the charge, and liability rises to as much as $500.8eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
- Fail to report within 60 days of the statement, and you can be held liable for the full amount of any unauthorized transfers that happen after that 60-day window closes, with no cap.9Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability
Extenuating circumstances like hospitalization or extended travel can push these deadlines to a reasonable period.9Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability Outside those situations, speed is what protects you.
Scams count too. If someone tricks you into sharing your login, card number, or other access information and then uses it to make transfers, those transactions are treated as unauthorized even though you technically handed over the credentials. A bank cannot use your negligence as a reason to raise your liability above the tiers above.10Consumer Financial Protection Bureau. Electronic Fund Transfers FAQs
How to Dispute an Error
When you spot a charge you didn’t authorize, a wrong amount, or a missing transfer, you have 60 days from the date your bank sent the statement to notify them of the error.11Office of the Law Revision Counsel. 15 USC 1693f – Error Resolution The notice can be oral or written and should include your name and account number, the amount and description of the error, and why you believe it’s an error.
The bank then has 10 business days to investigate and report back.12eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors If it confirms an error, it has to correct the problem within one business day of that finding.
If the bank needs longer, it can extend the investigation to 45 days, but only if it provisionally credits your account for the disputed amount within the first 10 business days and gives you full access to those funds while it keeps looking.12eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors The bank must tell you about the provisional credit within two business days of applying it.
You can start the clock with a phone call, but the bank may require written confirmation within 10 business days. If it asks and you don’t send one, the bank is no longer required to provisionally credit your account during the investigation.11Office of the Law Revision Counsel. 15 USC 1693f – Error Resolution Always follow a call with an email or letter.
How to Stop a Recurring Debit
You have the legal right to stop any preauthorized recurring debit. There are two paths, and using both together gives you the strongest protection.
Start with the merchant. Contact the company pulling the payments and tell them in writing that you’re revoking authorization. Save every email, letter, or cancellation confirmation as proof.
Then place a stop payment order with your bank. You need to give this order at least three business days before the next scheduled debit.6Office of the Law Revision Counsel. 15 USC 1693e – Preauthorized Transfers The order can be oral or written, and your bank must honor it.13Consumer Financial Protection Bureau. 12 CFR Part 1005, Regulation E – 1005.10 Preauthorized Transfers If you give the order orally, the bank can require written confirmation within 14 days. Skip that step and the oral order expires.5eCFR. 12 CFR 1005.10 – Preauthorized Transfers The bank must tell you about the confirmation requirement and where to send it when you make the request.
Banks typically charge a fee for a stop payment order, often in the range of $15 to $35 depending on the institution and whether you request it online or in person. These orders don’t last forever. They commonly expire after six months to a year, and the bank could process the debit again if the merchant resubmits it after that.
Overdraft Rules on Debit Card and ATM Transactions
When a one-time debit card purchase or ATM withdrawal would overdraw your account, your bank cannot charge you an overdraft fee unless you specifically opted in to the bank’s overdraft service. The opt-in has to be obtained separately from any other account agreement, and the bank must give you a clear written notice about the service first.14Consumer Financial Protection Bureau. 12 CFR 1005.17 – Requirements for Overdraft Services
If you haven’t opted in, the bank simply declines the transaction rather than covering it and charging a fee. You can revoke the opt-in at any time. This rule applies specifically to one-time debit card and ATM transactions. Recurring preauthorized debits and checks fall under separate rules and may still trigger overdraft or returned-item fees.
When These Rights Don’t Apply
Everything above comes from the Electronic Fund Transfer Act and Regulation E, and those protections cover accounts established primarily for personal, family, or household purposes.10Consumer Financial Protection Bureau. Electronic Fund Transfers FAQs If you hold a business, organizational, or commercial account, electronic debits from it are generally not covered by these federal consumer protections, and your rights depend on what your deposit agreement says.