An ACH authorization form lets a person or business take money directly from your bank account on your behalf

An ACH authorization (also called an ACH debit authorization or direct debit authorization) is a written permission that tells your bank to let someone else pull money from your account. ACH stands for Automated Clearing House, which is the system banks use to move money electronically between accounts. When you sign this form, you are giving that person or company the right to withdraw a specific amount on a specific schedule — or sometimes whenever they decide, depending on what the form says.

You encounter ACH authorizations most often with recurring bills: gym memberships, insurance premiums, loan payments, utility bills, or subscription services. Instead of you logging in to pay each time, the company withdraws the money automatically. Some forms let the company take whatever amount they want whenever they want. Others lock in a fixed amount on a fixed date. The difference matters because it changes how much control you keep.

Key Takeaways

  • An ACH authorization gives a company or person permission to withdraw money from your bank account automatically, usually for recurring payments.
  • The form should state the exact amount, the payment date or schedule, and how long the authorization lasts — read these details before you sign.
  • You can stop an ACH withdrawal by notifying your bank in writing, though the company may also need to cancel on their end.
  • If an unauthorized or incorrect withdrawal happens, your bank can reverse it, but you must report it within a specific window — usually 60 days.
  • Not all ACH authorizations are the same: some are fixed-amount recurring payments, while others give the company open-ended withdrawal rights.

What information should be on the form

A legitimate ACH authorization form includes specific details that protect both you and the company. The form should show your name, your bank account number, your routing number (the nine-digit code that identifies your bank), and the name of the company that will be withdrawing the money. It should also state the amount they will withdraw, how often (weekly, monthly, annually), and the date the withdrawals will start.

The form should also say when the authorization ends — either a specific date or "until you cancel." This matters because some authorizations are meant to be temporary (a one-time payment plan, a short-term subscription) while others are open-ended. If the form does not say when it ends, ask the company before you sign. You should also see language that says you can cancel the authorization by notifying your bank or the company, and that you have the right to dispute unauthorized or incorrect withdrawals.

If a form is vague about amounts, dates, or duration, do not sign it. A company that cannot or will not be specific about what they are withdrawing is a red flag. Legitimate businesses know exactly what they are charging and when.

Where ACH authorizations show up in daily life

You will see ACH authorization forms whenever you set up automatic payments. Opening a checking account at a new bank often requires one so the bank can withdraw overdraft fees or monthly maintenance charges. Signing up for a gym, streaming service, or phone plan usually involves one. Loan servicers, mortgage companies, and credit card issuers use them to collect payments. Utility companies, insurance companies, and employers (for payroll deductions) all rely on ACH authorizations.

Some less obvious places also use them: medical offices may ask for one to collect copays automatically, childcare centers may use one for tuition, and nonprofits may ask for one if you set up a recurring donation. The common thread is that the company wants money from your account on a schedule, and they want it to happen without you having to do anything each time.

How to stop an ACH withdrawal

You can cancel an ACH authorization at any time. The formal way is to send your bank a written request to revoke the authorization. You do not need the company's permission. Call your bank's customer service line and ask for the process — some banks let you do this online through your account, others require a letter or a form. Write down the date you submitted the request and keep a copy for your records.

You should also notify the company directly that you are canceling. Some companies will stop withdrawals when ready once they hear from you; others may take a few business days. If you cancel with the bank but not the company, the company may try to withdraw the money again, and your bank will reject it — but this can create confusion and fees. Doing both protects you.

If a withdrawal happens after you have canceled, report it to your bank right away. Your bank can reverse the transaction, but you usually have to report it within 60 days of the withdrawal date. Some banks allow longer, but do not wait.

What happens if something goes wrong

If a company withdraws the wrong amount, withdraws on the wrong date, or continues withdrawing after you canceled, your bank can reverse the transaction and return the money to your account. This is called a chargeback or reversal. You do not lose money while the bank investigates — the funds go back to you when ready in most cases, and the bank handles the dispute with the company.

To start a dispute, contact your bank and explain what happened. Have the authorization form, your bank statements showing the withdrawal, and any written communication with the company (emails, texts, letters) ready to show. The bank will ask you to sign a dispute form. They then contact the company and ask them to explain the withdrawal. If the company cannot justify it, the reversal stands and the money stays with you.

If the withdrawal was truly unauthorized — meaning you never signed an authorization form at all — report it when ready. This is fraud, and your bank takes it seriously. You are protected under federal law (Regulation E) and cannot be held liable for unauthorized ACH withdrawals if you report them promptly.

The difference between fixed and variable ACH authorizations

A fixed ACH authorization specifies an exact dollar amount that will be withdrawn on a set date each month or billing cycle. Your car payment, mortgage, or a fixed subscription fee typically uses this type. You know exactly what will leave your account and when, which makes budgeting easier and gives you clear control.

A variable ACH authorization allows the company to withdraw different amounts on different dates, as long as they notify you in advance. Utility bills often work this way because your electric or water usage changes month to month. The company must tell you the amount and date before they withdraw it — usually through a bill or an email. If they do not notify you, you can dispute the withdrawal.

Some authorizations are even more open-ended: they give the company the right to withdraw money whenever they decide, for whatever amount they decide, with little or no notice. Avoid signing these if you can. If you must, make sure you understand exactly what triggers a withdrawal and that you can monitor your account closely.

Questions to ask before you sign

Before signing any ACH authorization, ask the company: What is the exact amount? What is the exact date or schedule? How long does this authorization last? Can I cancel it, and how? Will you notify me before each withdrawal? What happens if I want to change the amount or date? If they cannot answer these questions clearly, ask them to put the answers in writing on the form itself.

Also ask whether the authorization is required to do business with them, or whether you have other payment options. Some companies will let you pay by credit card, check, or one-time bank transfer instead. If you have a choice, a one-time payment or a credit card gives you more dispute protection than an ACH authorization.

Frequently Asked Questions

Can a company withdraw money from my account without an authorization form?

No. A company must have your written authorization before they can set up automatic withdrawals from your account. If money is being withdrawn without your permission, that is fraud, and you should report it to your bank when ready and file a dispute.

What if I signed an ACH authorization but now I do not want the company to have it?

Contact your bank in writing and ask them to revoke the authorization. You can do this even if the company refuses to cancel on their end. Also notify the company directly. If they attempt to withdraw after you have canceled, report it to your bank as an unauthorized transaction.

How long does it take to cancel an ACH authorization?

It depends on your bank. Some banks process cancellations within one business day; others take up to five business days. Ask your bank for their timeline when you submit the request. If the company tries to withdraw before the cancellation takes effect, you can dispute that withdrawal.

Am I responsible if someone steals my ACH authorization form?

No. If someone uses your authorization without your knowledge or permission, that is fraud. Report it to your bank within 60 days and you are protected under federal law. Your bank will reverse the unauthorized withdrawals at no cost to you.

Can I change the amount on an ACH authorization after I sign it?

You can ask the company to change it, but they are not required to agree. If they refuse and you want a different amount, your only option is to cancel the authorization and set up a new one with the new amount. Some companies will do this; others may require you to sign a new form.