How to dispute an unauthorized ACH withdrawal from your bank account
Recognizing an Unauthorized ACH Withdrawal
An unauthorized ACH withdrawal happens when money leaves your checking or savings account without your permission through the Automated Clearing House network. ACH transfers include direct deposits, bill payments, and electronic checks, often labeled with codes like PPD or WEB on your statement. You might spot it as an unfamiliar merchant name, odd amount, or transaction you don't recall authorizing.
These withdrawals can stem from data breaches, stolen account info, phishing scams, or malware. For U.S. consumers, Regulation E under the Electronic Fund Transfer Act provides key protections for unauthorized electronic transfers from bank accounts. Spotting it early on your online banking app, mobile alerts, or monthly statement can limit losses.
Act quickly, as time limits apply for disputes. Review your account agreement for your bank's specific ACH policies, which can vary.
Your Legal Protections Under Regulation E
Regulation E governs electronic fund transfers, including ACH debits, for most U.S. bank and credit union accounts. It limits your liability for unauthorized transfers to $50 if you report within two business days of learning about the issue, or up to $500 if reported within 60 days. After 60 days, you could lose the entire amount unless you prove no fault.
Your bank must investigate promptly and provisionally credit your account within 10 business days for disputes over $50, or up to 20 days for new accounts. Full resolution typically takes up to 45 days, extendable to 90 days for certain cases like foreign transactions or point-of-sale debits.
Check the Consumer Financial Protection Bureau (CFPB) bank accounts page for details. Rules apply to deposit accounts at FDIC-insured banks and NCUA-insured credit unions, but not credit cards or wire transfers.
This is general information; verify your bank's policy, as exceptions exist for business accounts or if you shared login details.
Immediate Steps After Spotting the Withdrawal
Don't panic, but move fast to minimize risk. First, log into your bank's official app or website from a trusted device to confirm the transaction details: date, amount, originator (payer name or ID), and ACH type (e.g., PPD for payroll, WEB for internet-initiated).
Secure Your Account Right Away
- Change passwords for online banking, email, and linked apps from a secure device.
- Enable or strengthen multi-factor authentication (MFA) if available.
- Turn on transaction alerts for all withdrawals over a set amount, like $10.
- Lock or freeze your debit card through the app if linked to the account.
Contact your bank immediately using the number on your debit card, statement, or official website, not from pop-ups or emails. Tell them: "I need to report an unauthorized ACH debit of [amount] on [date] from [originator]." Note the representative's name, time, and any reference number.
Avoid using public Wi-Fi or sharing verification codes with anyone claiming to be from your bank.
Gathering Essential Documentation
Before filing a formal dispute, collect proof. Banks require specifics to investigate ACH returns or disputes effectively. Save everything digitally and in print.
Here's a checklist of key documents:
| Document | Why It Matters | Where to Find It |
|---|---|---|
| Bank statements | Shows transaction details, dates, and balances | Online banking, app, or mailed copy |
| Transaction screenshot | Captures originator ID, amount, ACH type | Banking app or website transaction history |
| Account agreement | Outlines dispute process and timelines | Bank's website under "disclosures" or app |
| Emails/texts related to the transaction | Evidence of no authorization or scam attempts | Your inbox or phone |
| ID and account info | Verifies your identity (redact sensitive parts) | Driver's license, SSN last 4 digits |
| Police report (if fraud suspected) | Supports identity theft claims | Local police non-emergency line |
Take screenshots of pending transactions or holds. If the withdrawal caused an overdraft, note those fees too, as they may be reversible. Keep a log: date/time of discovery, bank contacts, and what was said.
Do not send full account numbers or SSNs unless through secure bank channels.
How to Contact Your Bank and File the Dispute
Use official channels only: app chat, secure message, phone from your statement, or in-branch. Avoid Google-searched numbers, which may be scams.
Prepare Your Call or Message
- State facts: "This is an unauthorized ACH withdrawal of $[amount] posted [date] from [originator]. I did not authorize it."
- Ask: "What is the dispute process? Provisional credit timeline? Reference number?"
- Request written confirmation of the dispute via email or mail.
Submit the dispute form online, by phone, or in writing. Provide:
- Your name, account number, contact info.
- Transaction details (date, amount, originator).
- Explanation: "I did not authorize this transfer."
- Supporting docs.
For ACH, banks use the Unauthorized Debit Entry return code (R10). Your bank coordinates with the originator's bank via NACHA rules. Rules and policies vary, so confirm your bank's process.
If it's a recurring ACH, cancel future debits through your bank's "Stop Payment" or authorization revocation tool.
What to Expect During the Investigation
Once filed, your bank must:
- Acknowledge the dispute (often same day).
- Provisionally credit funds (typically 10 business days).
- Investigate, contacting the originator for proof of authorization.
You'll get updates. If they rule in your favor, credits become permanent, including related fees. If not, they'll debit the provisional credit and explain why in writing.
Timelines:
- Provisional credit: 10 business days (20 for new accounts).
- Resolution: 45 days (90 max).
Monitor statements meanwhile. Provisional credits don't earn interest if reversed.
Credit impact is usually minimal for disputed bank fraud, but overdrafts could affect ChexSystems reports used by banks.
Following Up and Resolving the Dispute
Check status weekly via app, phone, or secure message. Ask for updates using your case number: "What is the status of dispute [number]? Any new info from the originator?"
If no provisional credit by day 10, follow up immediately. Request fee reversals for overdrafts caused by the withdrawal.
If denied, review the explanation. You can:
- Appeal with more evidence.
- Re-dispute if new facts emerge.
- File with CFPB if the bank violated Reg E.
Keep all correspondence. Document every interaction: rep name, date, summary.
Protecting Your Account Long-Term
After resolution:
- Review all linked autopays and revoke unknowns.
- Use virtual account numbers or debit controls for online buys.
- Monitor via FDIC consumer resources.
- Consider a credit freeze if identity theft suspected (free at Equifax, Experian, TransUnion).
Set up alerts for low balances and transfers. Use strong, unique passwords and a password manager.
Common Scams Involving ACH Withdrawals
Scammers fake ACH by sending phishing texts: "Your account was debited fraudulently; click here to dispute." Never click. Fake job offers or rentals request ACH "deposits" that reverse later.
Report suspicions to your bank first, then FTC ReportFraud.ftc.gov. Watch for:
- Urgent calls demanding codes.
- Overpayment schemes via ACH.
- Romance scams pushing transfers.
Verify originators via official sites, not caller ID.
When to Escalate to Regulators
If your bank drags feet, denies wrongly, or violates timelines: 1. Send a written demand letter citing Reg E. 2. File a complaint at CFPB.gov with case docs. 3. Contact state attorney general or banking department.
For identity theft, use IdentityTheft.gov. Nonprofits like legal aid help complex cases.
This is general info; a qualified professional can assist.
Step-by-Step Checklist for Disputing Unauthorized ACH
Use this to stay organized:
- Confirm the transaction: Screenshot details from app/statement.
- Secure account: Change passwords, enable MFA, lock card.
- Call bank: Use official number; get reference number.
- Gather docs: Statements, screenshots, ID.
- File dispute: Online/form/phone; include all info.
- Monitor: Track status weekly; note provisional credit.
- Follow up: Request written resolution.
- Escalate if needed: CFPB complaint.
- Protect future: Alerts, revoke autopays.
Print and check off as you go.
Potential Outcomes and Next Steps
Most unauthorized ACH disputes resolve favorably if reported timely with proof. You may recover full amount plus fees. However, if negligence (e.g., shared PIN), liability rises.
If overdraft hits credit, it rarely affects FICO scores directly but flags ChexSystems. Rebuild by consistent habits.
Review your fee schedule for prevention. For gig workers or families with multiple autopays, audit monthly.
Bank policies vary; always get written confirmation.
Unauthorized ACH withdrawals affect thousands yearly, but Reg E empowers quick action. By documenting thoroughly and using official channels, you protect your funds effectively. Stay vigilant with alerts and reviews for peace of mind.
About the TDL Expert Panel
TDL Expert Panel · TheDigitalLife Editorial Team
TDL Expert Panel is the editorial team behind TheDigitalLife. The team researches, reviews, and creates practical guides to help everyday readers make better decisions about home repair costs, refunds, AI tools, digital safety, productivity, and useful online resources. Each guide is written to be clear, useful, and easy to understand.