An ACH Authorization Form is a legal document that grants a business, organization, or individual written permission to initiate electronic fund transfers to or from a bank account through the Automated Clearing House (ACH) network. Unlike the direct deposit variant (which covers incoming credits only), a general ACH authorization may cover both ACH credits (deposits) and ACH debits (withdrawals), making it suitable for recurring bill payments, subscription charges, loan repayments, and vendor payments.

The ACH system is regulated under the Electronic Fund Transfer Act (EFTA, 15 U.S.C. 1693) and Regulation E (12 CFR 1005) for consumer accounts, and governed by NACHA Operating Rules for all participants. Under NACHA rules, any entity originating an ACH debit transaction must obtain written authorization from the account holder before initiating the first transfer. The authorization must be readily identifiable as such and must clearly state the terms of the recurring debit, including the amount, frequency, and duration.

For business-to-business ACH transactions, UCC Article 4A governs funds transfers and provides a different framework than consumer protections under Regulation E. Businesses authorizing ACH debits from their commercial accounts should understand that the liability protections available to consumers (such as the 60-day error resolution window) may not apply to commercial accounts.

An ACH Authorization Form is required whenever a business sets up recurring payment collection from customers, such as monthly subscription fees, membership dues, insurance premiums, or loan installments. Under NACHA rules, the originating company must have written or electronic authorization on file before debiting the customer's account.

Businesses use this form when establishing vendor payment arrangements, automating accounts payable, or setting up payroll processing through a third-party payroll provider. Property management companies collecting monthly rent via ACH need authorization from each tenant. Utilities, telecom providers, and SaaS companies that offer autopay all require this documentation.

This form is also essential when a business opens a new merchant account and needs to authorize the payment processor to deposit transaction proceeds and debit processing fees. Nonprofit organizations collecting recurring donations electronically must have donor authorization on file.

Operating without a valid ACH authorization exposes the originator to return codes R07 (Authorization Revoked) and R10 (Customer Advises Not Authorized), which can result in NACHA fines, increased return rate monitoring, and potential termination from the ACH network. For consumers, unauthorized debits may be disputed for up to 60 days under Regulation E.

A compliant ACH Authorization Form must include the account holder's full legal name, physical address, and the name of the financial institution holding the account. The bank routing number (ABA number) and full account number are required, along with a designation of whether the account is checking or savings, as NACHA uses different Standard Entry Class (SEC) codes for each.

The authorization must specify the transaction type -- whether it covers ACH debits (payments from the account), ACH credits (deposits to the account), or both. For recurring debits, the form must state the amount (or how the amount is determined), the frequency of transactions (weekly, biweekly, monthly), and the start date. Variable-amount authorizations must include a notification provision so the account holder is informed before each debit.

A revocation clause is legally required under Regulation E for consumer accounts. The account holder must be informed of their right to stop any preauthorized transfer by notifying the originator at least 3 business days before the scheduled date. The form should include the contact method for revocation requests.

For ACH debits, NACHA rules require that the authorization include specific language confirming the account holder's consent to the debiting arrangement. The authorization must be signed (physically or electronically under the ESIGN Act) and dated. The originator is required to retain the original authorization, or a copy, for a minimum of two years following termination of the authorization.

Including the company's name, address, and phone number on the form ensures the account holder can easily contact the originator to modify or cancel the arrangement. A governing law clause specifying the applicable state jurisdiction is recommended for dispute resolution.