ACH Debit vs ACH Credit: Differences, Risks, Uses
ACH debit vs ACH credit explained: who starts the payment, authorization rules, return windows, fraud risks and which to use for invoices, payroll and bills.
Quick answer: In an ACH credit, the payer pushes money from their account to yours (direct deposit, a client paying your invoice from its bank). In an ACH debit, the payee pulls money from the payer's account with authorization (autopay, subscriptions). Credits are lower risk for the recipient; debits are more convenient but can be returned.
Both ride on the same Automated Clearing House network run under Nacha rules, settle in the same timeframes and cost far less than wires or cards. The difference is who starts the payment, and that one fact decides the authorization you need, how long a payment can be returned and who carries the fraud risk. This comparison of ACH debit vs ACH credit shows how each works, when to use each for invoices, payroll and recurring billing, and the mistakes that cause returns.
What is an ACH credit?
An ACH credit is a push payment. The account holder sending the money tells their bank (the originating depository financial institution, or ODFI) to deliver funds to another account. The bank sends the entry through an ACH operator (the Federal Reserve or The Clearing House) to the receiving bank (the RDFI), which credits the recipient.
Common examples:
- Payroll direct deposit (see how to set up direct deposit)
- A client's accounts payable team paying your invoice
- Paying contractors and suppliers from your business bank
- Tax refunds and government benefits
What is an ACH debit?
An ACH debit is a pull payment. The business receiving the money (the originator) uses the payer's routing and account numbers, plus their authorization, to request funds from the payer's account. The payer's bank sends the money unless the account lacks funds, is closed or the debit is blocked or disputed.
Common examples:
- Utility, insurance and loan autopay
- Subscriptions and memberships paid by bank account
- Invoice payments where the customer enters bank details on a payment page
- IRS EFTPS tax payments and payroll provider funding pulls
ACH debit vs ACH credit: key differences
| Feature | ACH credit (push) | ACH debit (pull) |
|---|---|---|
| Who starts it | The payer | The payee (with authorization) |
| Authorization needed | Payer authorizes own bank; recipient often authorizes for direct deposit | Payer must authorize the payee; rules vary by entry type |
| Typical uses | Payroll, supplier payments, B2B invoice payments | Recurring bills, subscriptions, customer-initiated invoice payments |
| Risk of insufficient funds return | Very low (payer controls timing) | Real (R01 returns) |
| Unauthorized return window | Rare | Up to 60 days for consumer accounts; usually 2 banking days for business accounts |
| Control for the payee | Low: you wait for the payer | High: you choose the date |
| Fraud exposure | Payer side: credit push fraud and impersonation | Account holder side: unauthorized pulls; merchant side: returns |
| Common SEC codes | PPD (payroll), CCD/CTX (business) | PPD, WEB, TEL (consumer), CCD (business) |
Standard Entry Class (SEC) codes describe how the payment was authorized. WEB entries come from online authorizations, TEL from phone, PPD from written consumer authorizations and CCD from corporate accounts. Nacha publishes the operating rules at nacha.org. For the latest changes, including the 2026 fraud monitoring requirements, see our guide to Nacha 2026 rules.
How long do ACH credits and debits take?
Settlement timing is the same for both. Originators choose same day ACH or next-day settlement, and standard entries can settle within one to two business days. Same Day ACH has a per-payment limit of $1 million. Our article on how long ACH takes explains processing windows and cutoffs. The practical difference: with a debit, you can schedule collection on the due date; with a credit, you depend on when the customer chooses to pay.
Which should you use for invoices, payroll and recurring billing?
Getting paid on invoices
Most B2B clients pay invoices by ACH credit through their own bank or AP system. Put your bank details on the invoice and ask for a remittance reference. If you want more control, offer a payment link where clients authorize an ACH debit. Our guide to accepting ACH payments compares both setups, and our free invoice generator lets you add bank details and a payment link to every invoice.
Payroll
Always ACH credit. You push wages to employees. Your payroll provider may pull the total from your account by ACH debit first, then push credits to employees.
Recurring billing
ACH debit is the standard for subscriptions, retainers and installment plans, because you collect on schedule without waiting for the customer. Read recurring payments for small business for setup options and authorization wording.
Worked example: the same $1,200 retainer, two ways
A bookkeeping firm bills 20 clients a $1,200 monthly retainer. Figures below are illustrative.
| Item | Clients pay by ACH credit | Firm collects by ACH debit |
|---|---|---|
| Monthly billed | $24,000 | $24,000 |
| Paid on the due date | 14 clients (70%) | 19 clients (95%, one return) |
| Cash on day 1 | $16,800 | $22,800 |
| Fees to the firm | $0 to receive | 20 x $1.00 origination + one $5.00 return fee = $25.00 |
| Follow-up work | 6 reminder emails | 1 return to resolve |
The debit route costs $25 a month but brings $6,000 in a week or more earlier and removes most chasing. That is why service businesses with fixed monthly fees often move to authorized ACH debits.
How to set up ACH debits correctly: step by step
- Choose a provider. Use your bank's ACH origination service or a payment processor.
- Write a clear authorization. Include amount (or how it is calculated), frequency, start date, how to revoke, and the customer's account details.
- Collect it properly. Signed form, online authorization with authentication, or recorded phone authorization depending on SEC code.
- Verify the account. Use micro-deposits, instant account verification or a prenote, and for WEB debits use a commercially reasonable account validation.
- Notify before variable debits. If the amount changes, send advance notice as the rules require.
- Monitor returns. Learn the common ACH return codes and act on R01, R02, R03 and R10 promptly.
- Keep records. Store authorizations for at least two years after termination.
What are the risks of ACH debits vs ACH credits?
Risks for the business receiving money
With ACH credits, the main risk is simply waiting: the customer decides when to pay, and some pay late. Fraud risk is low because you do not touch the payer's account. With ACH debits, you carry return risk. A debit can come back for insufficient funds (R01), a closed account (R02), an invalid account (R03) or because the customer says it was not authorized (R10). Each return usually carries a fee, and Nacha monitors originators whose unauthorized return rate exceeds 0.5% or whose overall return rate exceeds 15%. High return rates can lead to fines or losing access to ACH debit processing.
Risks for the business paying money
With ACH credits you control the payment, but you are exposed to impersonation fraud: a scammer posing as a supplier sends new bank details, and you push money to the wrong account. Because credits are push payments, recovery is difficult. With ACH debits, the risk is that someone uses your routing and account numbers, which are printed on every check you write, to pull money without authorization. Banks offer debit blocks and filters, and you have a short window (generally two banking days for business accounts) to return unauthorized debits. Review your account daily.
How much do ACH debits and credits cost?
Costs depend on whether you use your bank or a processor. Banks offering ACH origination often charge a monthly service fee plus a per-entry fee, with extra for same day ACH. Payment processors that let customers pay invoices by bank account usually charge a percentage with a cap, or a flat fee per payment, which is still far below card processing. Receiving an ACH credit is normally free. If you only need to get paid occasionally, asking clients to send ACH credits costs you nothing; if you bill dozens of recurring clients, the fees for originating debits are usually worth the faster, predictable cash. For a full comparison with wires, see ACH vs wire transfer.
Common mistakes with ACH debits and credits
- Debiting without proper authorization. Leads to R10 returns, fees and possible processor termination.
- Using the wrong SEC code. A consumer debit sent as CCD can be returned and breaks the rules.
- No debit block on operating accounts. Fraudsters with your account number can try debits; a block or filter stops them. A related protection for checks is positive pay.
- Accepting changed bank details by email. Credit push fraud starts with fake payment instruction changes.
- Treating a debit as final immediately. Do not ship high-value goods on a fresh consumer debit; returns can arrive later.
- Mixing up numbers. See routing number vs account number; a voided check is still a common way to confirm both.
ACH vs direct debit outside the US
Other countries have similar pull systems with their own mandates. In the UK it is Bacs Direct Debit (UK Direct Debit guide); in the eurozone it is SEPA Direct Debit. The concepts match: credits are pushed by the payer, debits are pulled with a mandate.
Choosing between ACH debit vs ACH credit comes down to control versus risk: debits put the timing in your hands, credits put the risk in the payer's. Whichever you use, a clear invoice with bank details and terms speeds payment. Make one with our free invoice generator: no sign-up, and it downloads a PDF built in your browser.
Frequently asked questions
Is direct deposit an ACH credit or debit?
Direct deposit is an ACH credit. The employer, through its bank or payroll provider, pushes money into each employee's account. Nothing is pulled from the employee. The same applies to tax refunds, government benefits and supplier payments sent by a customer's accounts payable team. If money arrives in your account without you starting it, it was almost always an ACH credit.
Is autopay an ACH debit?
Usually, yes. When you sign up for a utility, loan or subscription to take payments from your bank account on a schedule, the company originates ACH debits against your account using the authorization you gave. Autopay that you schedule from inside your own bank's bill pay is different: your bank sends a payment, often an ACH credit or a check, to the company.
Which is safer for a business, ACH debit or ACH credit?
For the business receiving money, ACH credits are safer because the payer pushes funds and returns are rare. ACH debits can be returned for insufficient funds, closed accounts or unauthorized claims. For the business paying, credits are also safer because no outside party can pull from your account. Debit blocks and filters protect accounts that should never be debited by unknown companies.
How long does a customer have to dispute an ACH debit?
Under Nacha rules, a consumer can generally have an unauthorized debit returned for up to 60 days after the settlement date of the statement showing it. Business accounts have much shorter windows, typically two banking days for most return reasons. That is one reason consumer ACH debits carry more risk for merchants than business-to-business payments.
Do I need written authorization to debit a customer's account?
Yes, you need authorization, and its form depends on the type of entry. Consumer debits require an authorization that is clear, readable and similarly authenticated, such as a signed form or an online authorization with proper confirmation. Phone authorizations need a recording or written confirmation. Business accounts typically authorize through an agreement. Keep authorizations for two years after they end or are revoked.
What is an ACH debit block?
An ACH debit block is a bank service that stops ACH debits from posting to your account unless the originator is on an approved list. An ACH filter is similar but lets you set rules, such as maximum amounts. Businesses use them to stop fraud and unexpected pulls. Remember to whitelist legitimate debits such as tax payments, loan payments and payroll funding.
Can an ACH credit be reversed?
The originator can issue a reversal only in narrow cases, such as a duplicate payment, wrong amount or wrong account, and generally within five banking days of settlement. Reversals for any other reason are not allowed. The receiver's bank may also return a credit if the account is closed or invalid. In practice, an ACH credit that settles correctly is close to final.
Which costs less, ACH debit or ACH credit?
Per-transaction fees are often similar, but the total cost differs. With credits, the payer bears the cost of sending and the payee usually receives for free. With debits, the business pulling money pays origination fees and also absorbs return fees when payments bounce. A processor that pulls ACH debits for invoices typically charges a small percentage with a cap, or a flat fee.
Invoice Creator Editorial Team
Guides on invoicing, cash flow and small-business finance from Invoice Creator, operated by Next Software Development Company. Content is reviewed for accuracy against the fields our own invoice generator produces.
Try the invoice generator