Free ACH Authorization Form Template

An ACH authorization form is a written document in which an account holder gives a business permission to move money to or from their bank account through the Automated Clearing House (ACH) network. The ACH network is the electronic system that processes most direct deposits, bill payments, and account-to-account transfers in the United States, and it is governed by the Nacha Operating Rules together with federal consumer protection law.

The form does two main things. First, it records the customer's consent to a specific type of electronic debit or credit, such as a one-time charge, a fixed recurring payment, or a variable amount that changes from invoice to invoice. Second, it captures the bank details and terms the business needs to initiate those entries: the account holder's name, the bank name, the routing number, the account number, and whether the account is checking or savings.

Under Nacha rules and the federal Electronic Fund Transfer Act, a business may not pull funds from a consumer's account by ACH unless it holds a valid authorization. For consumer accounts, that authorization must be in a writing signed or similarly authenticated by the consumer, and the business must give the consumer a copy. A clear, complete ACH authorization form is therefore both the legal foundation for the payment and the proof the business will need if the transaction is ever disputed or returned as unauthorized.

A signed ACH authorization is not the same as a contract for the underlying goods or services. It is a payment instrument that sits alongside the main agreement, granting the right to collect the amounts that agreement creates.

You need an ACH authorization form any time you intend to debit or credit someone's bank account electronically rather than processing a card or accepting a paper check. Collecting written consent first is not optional for consumer debits; it is required by Nacha and by Regulation E. The most common situations include the following.

Recurring subscriptions and memberships rely on ACH authorizations so a business can charge the same amount on a regular schedule, such as a monthly gym fee, software subscription, or insurance premium, without re-requesting permission each cycle.

Installment and loan repayments use ACH authorizations to pull fixed payments from a borrower's account on set dates. Lenders, dealerships, and service providers often pair the authorization with a promissory note or financing agreement.

Variable or invoice-based billing covers situations where the amount changes each period, such as utility bills or usage-based services. Because the amount is not fixed, Nacha rules require the business to notify the customer of the amount and date before each debit when the figure varies from a previously authorized amount.

One-time payments, such as settling a single invoice or making a deposit, can also be collected by ACH with a single-entry authorization that permits only that one transaction.

Payroll and vendor payments run in the other direction. Employers use authorizations to deposit wages, and companies use business-to-business authorizations to credit or debit vendor accounts.

In each case, the written form protects both sides. The customer knows exactly what they agreed to, and the business holds documented, retrievable proof of consent that satisfies its bank and Nacha if the entry is questioned.

A compliant ACH authorization form must give the customer enough information to clearly understand what they are agreeing to, and it must give the business everything needed to originate the entry and prove consent later. The following components form the core of an effective form.

Drafting an ACH authorization form is straightforward when you work through it section by section and keep the language plain enough for the customer to understand.

Start by identifying the parties. Enter the full legal name and contact details of the business that will initiate the entries and the full name and contact details of the account holder. Because the business name appears on the customer's bank statement, use the name the customer will recognize.

Next, define the authorization. Choose whether the customer is approving a one-time charge, a recurring charge, or a variable amount, and state the corresponding figures. For recurring payments, specify the exact amount and the frequency, such as monthly on a particular day. For variable payments, state a maximum or describe how each amount is determined, and commit to notifying the customer before any debit that differs from the amount previously authorized.

Then collect the bank details: bank name, account type, routing number, and account number. Adding a line for a voided check or bank verification letter helps prevent costly returns.

Set the effective dates. State the date the authorization begins and how it ends, either on a fixed end date or by remaining in effect until the customer revokes it in writing with adequate advance notice.

Include the terms and conditions and the revocation instructions described above, then finish with a clear consent statement, a signature line, and a date. Once signed, give the customer a copy and store the original securely, because both Nacha and Regulation E require you to retain and be able to produce the authorization on request.

ACH authorizations are governed by a layered set of rules. The Nacha Operating Rules set the network standards, while the federal Electronic Fund Transfer Act (EFTA) and its implementing Regulation E protect consumers. Several requirements deserve particular attention.

Written, signed authorization for consumer debits is mandatory. Regulation E section 1005.10(b) provides that preauthorized electronic fund transfers from a consumer's account may be authorized only by a writing signed or similarly authenticated by the consumer, and the business that obtains the authorization must provide a copy to the consumer. An electronic signature satisfies this requirement when it complies with the E-SIGN Act.

The authorization must be readily identifiable and clearly state its terms. Nacha requires that a consumer be able to understand what they authorized, including the amount or method of calculating it, the timing, and how to revoke consent. Vague or buried authorization language is a frequent cause of unauthorized-return disputes.

Standard Entry Class (SEC) codes matter. Debits from consumer accounts generally use PPD for standing or single authorizations obtained in writing, WEB for authorizations obtained over the internet or a mobile channel, and TEL for authorizations obtained by phone. TEL is limited to one-time debits unless a written or electronic authorization is also captured for a recurring series. Business-to-business debits use the CCD code, and Nacha does not require business receivers to have the same consumer-style written authorization, though a written agreement remains best practice.

Retention is required. Nacha rules require originators to retain the original or a copy of each authorization for at least two years following the termination or revocation of the authorization, and to provide proof of authorization on request.

Consumers retain a right to stop payment. Under Regulation E section 1005.10(c), a consumer may stop a preauthorized transfer by notifying their financial institution at least three business days before the scheduled date, and the institution may require written confirmation of an oral stop-payment order within 14 days. A well-drafted form should make the business's own cancellation process clear so customers rarely need to escalate to their bank.

Even routine ACH authorizations fail to protect a business when the form is incomplete or carelessly executed. The following mistakes are among the most common and the most costly.