What Pre-Authorized Debit Means and How It Works

A pre-authorized debit is a standing permission you give a company to pull money directly from your bank account, either on a recurring schedule or as a one-time withdrawal. The transactions travel through the Automated Clearing House (ACH) network, which moves electronic debits and credits between banks.¹ For personal accounts, federal law lets you cancel any pre-authorized debit by notifying your bank at least three business days before the next scheduled withdrawal, and it gives you 60 days from your statement date to dispute an unauthorized or incorrect one.

How a Pre-Authorized Debit Works

In a normal bill payment, you push the money. You write a check, log into your bank’s site, or tap through a payment app. A pre-authorized debit reverses that flow: you sign off once, and the biller pulls the money on the agreed dates. Behind the scenes, the biller submits the payment instruction to its own bank, which routes a batch file through an ACH operator to your bank. Your bank then debits your account and settles up.¹

Mortgage payments, insurance premiums, utility bills, and subscription services are among the most common uses. The ACH network was originally built for these recurring payments but now handles a wide range of one-time debits as well, including converted check payments and telephone or internet payments.¹

Fixed and Variable Amounts

Some pre-authorized debits pull the same figure every cycle. A fixed-rate mortgage, a car lease, or a set-premium insurance policy runs on a fixed amount. Others move up and down: your electric bill, your water bill, and a credit card’s minimum payment all depend on the current billing cycle. Federal law treats variable-amount debits differently, requiring extra notice before each pull (covered below).

The setup also differs depending on whose account is being debited. Consumer accounts — those used mainly for personal, family, or household purposes — carry the strongest federal protections. Business and commercial accounts sit outside that framework and follow the ACH network’s own rules instead.

Setting Up the Authorization

A pre-authorized debit from a consumer account can only be authorized through a writing you sign or otherwise authenticate. An email confirmation or an online checkbox during enrollment counts as “similarly authenticated,” and the company collecting the payment must give you a copy of the authorization.²

To complete the setup, you typically need to provide:

Your bank’s nine-digit routing number, found at the bottom left of a check or through your online banking portal.
Your account number.
The payment schedule — weekly, biweekly, monthly, or another interval.
The exact amount for fixed debits, or the calculation method for variable ones.

Some companies ask for a voided check to verify the routing and account numbers. Most billers need roughly one to two weeks of lead time to register the instructions with their bank and confirm your account details before the first withdrawal runs. The biller should tell you the date and amount of that first debit so you can make sure the funds are there.

Notice Before a Variable Amount Is Pulled

When the next debit will differ from the previous one, or from the amount you originally authorized, the biller or your bank must send you written notice of the new amount and the date of the transfer at least ten days in advance.³

You can also opt into a lighter version. Rather than getting a notice every single month, you can agree to be notified only when a withdrawal falls outside a range you specify, or when it changes from the previous payment by more than an agreed amount.³ If your electric bill usually falls between $80 and $150, for instance, you might ask to be alerted only when a charge tops $150.

How to Cancel a Pre-Authorized Debit

You can stop any pre-authorized debit from a personal account by notifying your bank, orally or in writing, at least three business days before the next scheduled withdrawal.² The biller does not need to agree. Your bank must honor the request.

If you give the notice by phone, your bank may require written confirmation within 14 days. Miss that follow-up and the oral stop-payment order expires.² Ask whether written follow-up is required, and keep a copy of whatever you submit.

Revoke the Company’s Authorization Too

A stop-payment order at your bank blocks the next withdrawal, but the company can keep submitting debit requests unless you also revoke its authorization. The Consumer Financial Protection Bureau suggests a two-track approach: contact the company to tell them you are revoking permission to debit your account, and then contact your bank to say you have done so. Follow up both calls in writing or by email. Once both sides have been notified, any further debits from that company are treated as errors under federal rules.⁴

Stop-Payment Fees

Banks typically charge a fee for a formal stop-payment order, usually in the range of about $15 to $36. Ask what the charge will be before placing the order. Some banks waive the fee for online requests, and some accounts include stop-payment orders at no cost.

Disputing an Unauthorized or Wrong Amount

If money leaves your account without a valid authorization, or in the wrong amount, you can dispute the transaction and recover the funds. What you’re entitled to depends on how quickly you act.

The 60-Day Reporting Window

You have 60 days from the date your bank sends the periodic statement showing the unauthorized or incorrect transfer to report the error.⁵ Miss that window and you may be on the hook for unauthorized debits that occur after the 60 days and before you finally notify the bank. Review each statement as it arrives.

The Investigation Timeline

Once you report an error, your bank works on a defined clock:⁶

Ten business days to complete the investigation and decide whether an error occurred.
One business day after that determination to correct any confirmed error.
Three business days after finishing the investigation to notify you of the result.

Provisional Credit

If your bank can’t finish within ten business days, it may take up to 45 days total, but only if it provisionally credits the disputed amount to your account within the initial ten-business-day window.⁶ The bank must tell you about the provisional credit within two business days and give you full use of the funds while the investigation continues.

For unauthorized transfers, the bank may withhold up to $50 from the provisional credit. If you first reported the error by phone and the bank asks for written confirmation, you have ten business days to send it; without that written follow-up, the bank isn’t required to issue provisional credit.⁶ For new accounts, where the error occurs within 30 days of the first deposit, the provisional credit window stretches to 20 business days instead of ten.

Written Statement of Unauthorized Debit

Your bank may ask you to complete a Written Statement of Unauthorized Debit (WSUD), a form confirming that the payment was processed without your authorization or in violation of the agreed terms.⁷ The current sample form carries a warning about the consequences of making false claims.⁸ Fill it out carefully and truthfully.

Business Accounts Are a Different World

The rules described above — the three-business-day cancellation, the 60-day dispute window, the provisional credit requirement — apply only to personal accounts used for personal, family, or household purposes.⁹ Business and commercial accounts are not covered by Regulation E.

Business account disputes fall under NACHA’s operating rules, which give much shorter windows. For corporate ACH debits, the receiving bank generally has only two business days from settlement to return an unauthorized transaction, and some return reason codes require the business to report an unauthorized debit within 24 hours.¹⁰ If you run a business with pre-authorized debits hitting the account, monitor daily. By the time a monthly statement arrives, your window to dispute may already be closed.

When a Debit Hits an Empty Account

If a pre-authorized debit arrives and there aren’t enough funds, one of two things happens: the bank rejects the transaction, or the bank pays it and overdrafts your account. Either outcome usually triggers a fee. Beyond the bank’s charge, a failed payment can also bring late fees from the biller, damage to your credit if the biller reports the miss, or cancellation of the service. If you know a month will be tight, call the biller before the scheduled debit date. Many companies will shift the timing or split the payment rather than deal with a bounced transaction.

You Can’t Be Forced to Sign Up

Federal law prohibits companies from requiring pre-authorized debits as a condition of getting a loan, with limited exceptions for overdraft credit plans and accounts that require a minimum balance.⁹ No employer or government agency can require you to open an account at a specific bank to receive wages or benefits either. If a lender or employer tells you that automatic debits are mandatory, you generally have the right to decline and use another payment method.

1
Federal Reserve Board of Governors. Automated Clearinghouse Services
2
eCFR. 12 CFR 1005.10 – Preauthorized Transfers
3
eCFR. 12 CFR 1005.10 – Preauthorized Transfers
4
Consumer Financial Protection Bureau. How Do I Stop Automatic Payments From My Bank Account
5
eCFR. 12 CFR 205.6 – Liability of Consumer for Unauthorized Transfers
6
eCFR. 12 CFR 205.11 – Procedures for Resolving Errors
7
Federal Reserve Services. Written Statement of Unauthorized Debit Copy (WSUD)
8
Nacha. ACH Operations Bulletin 1-2023 Update to Sample Written Statement of Unauthorized Debit
9
eCFR. 12 CFR Part 1005 – Electronic Fund Transfers (Regulation E)
10
Nacha. Differentiating Unauthorized Return Reasons