How to Authorize ACH

Obtaining the proper authorization for ACH transactions is the most important step you can take to protect against disputes, return fees, and reversed transactions.

According to Nacha (the organization that oversees the Automated Clearing House (ACH) network) rules, there are only three reasons people can dispute ACH charges to their account:

• If it was never authorized by the account holder or the authorization was revoked;
• If it was processed on a date earlier than authorized; or
• If it is for an amount different than authorized

That’s it. And, disputing an ACH charge requires that the account holder provide notice to the bank in writing (or the electronic equivalent) that one of those three conditions exists. (Note that this is significantly different from credit card transactions where a customer can have a charge reversed simply by claiming that the product or service received was not what they expected.)

The key word is Authorized—which according to NACHA means something very specific depending on the SEC Codes provided when submitting the transaction via the ACHQ API

As part of the authorization process, we recommend collecting and storing digitally or in paper form for two years the following information from your customers (note this is not an exhaustive list):

Clear, legible consent

Your authorization page or consent checkbox must plainly state that you are obtaining consent to debit your customer’s bank account for a specific transaction or set of recurring transactions.

One way to achieve this is for the authorization form to have express language such as:

I authorize (your company) to electronically debit my account and, if necessary, electronically credit my account to correct erroneous debits.

Transaction specific details

Date, time of transaction, debiting account info (bank name and last 4 digits of the bank account at minimum,) item purchased, IP address (and corresponding details such as email/phone), frequency if it is a recurring payment

Client/account information

Name on account/shipping information, any other controls in place to verify the identity of the customer

Any additional or transaction info

Prior transaction history, particularly for recurring payments (e.g. IP information, other logins, other purchases)

Receipt of transaction

Prompt your customer to print the authorization and retain a hard copy or electronic copy, and send an e-mail receipt of the processed transaction to your customer.

Process for revocation

Your authorization flow must provide your customer with a method to revoke authorization by notifying you, so be sure to include a telephone number and/or e-mail address where your customer can contact you. You should display this information on the authorization page and receipt/confirmation sent to the customer after the transaction has been completed.

📘

Take this seriously!

Obtaining the proper authorization for your ACH transaction is the most important step you can take to ensure compliance with the network rules and protect yourself against disputes, return fees, and reversed transactions.