What Is an ACH Payment? How Bank Transfers Work for Business

On this page 7 sections

1. How an ACH Payment Moves and Who Writes the Rules
2. ACH Debit vs. ACH Credit: Who Starts the Transfer
3. Same Day ACH Is Faster, but Still a Batch
4. What ACH Costs Next to Card Processing
5. ACH Returns Work Differently From Chargebacks
6. When ACH Is the Better Way to Get Paid
7. Setting up ACH Without Raising Your Return Rate

Key takeaways

• Nacha's unauthorized return threshold is a rate above 0.5% of debits. If you debit 1,800 accounts a month, 18 unauthorized returns over two months puts you exactly at the limit. The 19th puts you over.
• Most ACH returns arrive within two banking days. A consumer who says a debit was unauthorized has up to 60 days to return it, and you can't dispute that return through the banking system the way you can fight a chargeback.
• Online-authorized (WEB) debits need account validation the first time an account is used and again whenever the account number changes. Checking that the routing number exists isn't enough.

An ACH payment is an electronic transfer between two U.S. bank accounts. It travels over the Automated Clearing House network, not the Visa or Mastercard rails. Either you pull money from a customer's checking account with their permission, or the customer pushes it to your account. A standard transfer usually lands in one to two business days. For large invoices and recurring billing, ACH is often the cheapest way to get paid. A failed ACH debit behaves very differently from a card chargeback, though, and that difference should shape how you use it.

How an ACH Payment Moves and Who Writes the Rules

Payroll direct deposit and utility autopay both run on ACH. The rules come from Nacha, which publishes the Nacha Operating Rules. These are network rules, much like Visa's and Mastercard's rules for cards. Your bank and your payment provider agree to follow them and pass the obligations down to you in your merchant agreement. Two operators handle the central clearing: the Federal Reserve and The Clearing House.

To pay this way, the customer gives you a routing number and account number, or connects their account through a bank-login flow. Your provider then submits the entry. You'll see a few terms on applications and reports:

• Originator: the business that starts the payment. When you debit a customer, that's you.
• ODFI: the originating bank that sends the entry into the network for you.
• RDFI: the customer's bank, which receives the entry.
• SEC code: a label for how the payment was authorized. WEB, for example, marks a consumer debit authorized online. The code decides which authorization and fraud rules apply to that payment.

Why an ACH Debit Is Never Approved up Front

ACH moves in batches. Your provider submits payments in files during set windows, and the network sorts them and delivers them to receiving banks. Batching keeps ACH cheap. It also makes ACH slower than a card authorization, which comes back approved or declined in seconds.

So there is no approval step. If a customer's balance is short, you find out only when their bank sends the entry back as a return. That often happens a day or two after you thought you'd been paid.

ACH Debit vs. ACH Credit: Who Starts the Transfer

With an ACH debit, you pull the funds. Autopay and memberships work this way. You need the customer's authorization before you debit, and you must be able to produce it later. Our article on ACH authorization forms, wording and proof covers what to capture for each channel.

With an ACH credit, the customer sends money from their own bank. B2B customers usually do this through an accounts payable system, using the remittance details on your invoice. Return risk is close to zero because the payer started the transfer. The cost is control: the customer picks the date, and thin remittance data can turn invoice matching into manual work.

Same Day ACH Is Faster, but Still a Batch

Standard ACH settles in roughly one to two business days. The exact timing depends on when your provider submits files and how it funds you. The network doesn't settle on weekends or federal banking holidays. Some providers also hold funds from new accounts or unusually large debits. That hold is the provider's risk control, not a network delay, so ask about it before you sign. Our breakdown of ACH transfer timelines walks through the calendar.

Same Day ACH lets eligible entries settle on the business day they're submitted, as long as they make the cutoffs. Since March 18, 2022, Nacha has capped each Same Day ACH payment at $1 million. The cap applies to consumer and business payments, and to credits and debits. In 2025, Nacha asked for comment on raising the limit to $10 million, so check with your provider whether it has changed. Nacha's guidance also says plainly that you shouldn't split a payment over the limit into several same-day entries to fit under it.

ACH is the wrong rail for money that has to arrive in seconds, at any hour. Our comparison of RTP, FedNow and ACH instant payment options explains where each one fits.

What ACH Costs Next to Card Processing

Card pricing is mostly a percentage. Each sale carries interchange set by the card networks, plus network assessments and the processor's markup, so the fee rises with the ticket. Our explainer on how interchange fees are set shows where that cost comes from.

ACH is usually priced per transaction, either as a flat fee or as a small percentage with a cap. Each provider sets its own price; Nacha doesn't set it. Because the fee is flat or capped, a $500 payment and a $5,000 payment can cost about the same. The per-item fee is rarely the whole bill, though. Get a written fee schedule that lists return fees, monthly or gateway fees, Same Day ACH premiums and any account verification charge.

Worked Example: A $5,000 Monthly Retainer

Every number here is illustrative. Your real rates depend on your pricing, card mix and provider.

Assume a consulting firm bills one client $5,000 a month. The client pays with a business credit card at an all-in cost of 3%. Here is that cost next to two common ACH pricing models:

On these assumptions, moving this one client to ACH saves between $1,740 and $1,782 a year.

Many businesses make ACH the default for invoices and keep cards for clients who want rewards or float. If you keep cards, dual pricing or surcharging (where permitted) can offset card costs. Read up on Visa and Mastercard surcharge rules and your state's law first.

ACH Returns Work Differently From Chargebacks

A card dispute is a chargeback under card network rules. A failed ACH debit is a return under Nacha rules. Both pull the money back, but the similarity ends there.

Most returns, including insufficient funds and closed or invalid accounts, must be sent within two banking days of settlement. A consumer who reports a debit as unauthorized has much longer: that return can come back up to 60 days after settlement. Card merchants can contest a chargeback with evidence through chargeback representment. The banking system has no equivalent process for ACH. If a customer claims a debit was unauthorized and you hold a valid authorization, your recourse is to collect from the customer directly, using your records as proof.

A retry after an R01 must carry the label RETRY PYMT in the company entry description. The label tells the customer's bank that the entry is a permitted retry, not a new charge.

The Return Thresholds Are Tighter Than Most Merchants Assume

Nacha measures every originator's debit returns against three thresholds. For unauthorized returns (R05, R07, R10, R11, R29 and R51), the threshold is a rate above 0.5%, and going over it can lead to Nacha enforcement. Administrative returns (R02, R03 and R04) are reviewed above 3.0%, and all returns combined above 15.0%. Going over either of those two opens an inquiry, which can escalate if the rate stays high. Rates are measured over the preceding 60 days or two calendar months.

The 0.5% threshold is smaller than it sounds. Take an illustrative gym that debits 1,800 members every month. Over two months that's 3,600 debits, and 0.5% of 3,600 is 18. Eighteen unauthorized returns puts the gym exactly at the limit, and the nineteenth puts it over. It doesn't take much to get there: nineteen members who don't recognize the billing name, or who call their bank to cancel instead of the front desk. Track this rate as closely as a card merchant tracks its chargeback ratio.

Account Validation Is Required for Online Debits

Since March 19, 2021, Nacha has required originators of WEB debits to include account validation in a "commercially reasonable" fraud detection system. You must validate an account the first time you debit it and again whenever the account number changes. Common methods include a zero-dollar prenotification entry and micro-deposits, and many providers use a third-party validation service. Checking that the routing number exists isn't enough. Nacha's newer risk management rules go further. They require business originators to set up risk-based processes for spotting entries initiated by fraud. Ask your provider what those rules require of your setup.

When ACH Is the Better Way to Get Paid

ACH works best when tickets are large, the amount is predictable and the customer relationship is ongoing. Wholesale accounts on payment terms are the clearest case. Online invoice payment portals for B2B buyers help here because accounts payable teams can pay without calling you. Monthly retainers for professional firms fit too; see MannyPay's payment solutions for professional services. Memberships benefit because bank accounts don't expire the way cards do. Recurring debits come with their own authorization duties, which our guide to Nacha rules for ACH recurring billing covers. Nonprofits keep more of each monthly gift, as our piece on ACH donations for monthly giving explains.

Cards are still the better choice for one-time buyers and small tickets. They also suit new customers you haven't vetted, because a card authorization tells you at checkout whether the money is there. Our piece on whether to push customers toward ACH or card works through that choice.

Setting up ACH Without Raising Your Return Rate

1. Pick a provider and gateway that run ACH alongside cards, so both appear in one report. MannyPay works with payment gateways including Authorize.net and NMI. Ask a specialist which payment types your setup supports.
2. Capture authorization for each channel you sell through, whether that's an online form or a recorded phone approval.
3. Validate accounts before the first debit and after any change of account number.
4. Use a billing name customers recognize on their bank statements. Send notice before recurring debits, especially when the amount changes.
5. Write down your return-handling process, including who follows up and which codes allow a retry. Make it easy to cancel or update bank details, so customers come to you instead of their bank.

This article is general information, not legal or compliance advice. Confirm current Nacha requirements and any state rules with your provider or a qualified professional.

Start with your last card statement. Pull your ten largest recurring card payers and price each one at a flat or capped ACH fee, the same way the retainer example does. If the savings are worth going after, request a free quote and a MannyPay specialist will respond within one business day.

Sources

1. Nacha: Same Day ACH $1 Million Per Transaction Limit Guidance
2. Nacha: Increasing the Same Day ACH Dollar Limit
3. Nacha: Nacha Wants to Hear from You on Increasing the Same Day ACH Payment Limit
4. Nacha: Beyond WEB Debits: Why Account Validation Deserves a Broader Role in ACH Risk Management
5. Mastercard: How the Nacha WEB Debit Rule Affects Your Organization
6. Sila: Understanding the NACHA Web Debit Rule
7. Plaid: ACH Return Codes: A Complete Guide for Businesses
8. Eco: ACH Return Codes: The Complete R01 to R85 List Explained
9. Oscilar: ACH Return Codes Explained
10. WeAudit: ACH Return Fee: Why You Were Charged and What It Costs
11. BTRSW: How Nacha's ACH Return Rules Reopen a Month

AR

About the author

Adrian Reyes

Adrian Reyes is Senior Payments & Fintech Editor for Beyond the Swipe, covering credit card processing, merchant accounts, payment technology and processing fees.

This article is for general educational purposes and is not legal, tax or financial advice. Card network rules and state laws change; confirm current requirements for your business.