Quick overview

Unauthorized debits are electronic withdrawals from your checking or savings account that you did not permit — whether from fraud, a forgotten subscription, or a merchant error. Acting quickly improves your chances of getting money back and stopping further withdrawals. The steps below prioritize immediate containment, a formal dispute, and prevention.

Why speed matters

Banks and payment networks have rules and time windows for investigating claims and limiting consumer liability. Under U.S. consumer protections (see the Consumer Financial Protection Bureau on unauthorized transactions), reporting early both limits your exposure and speeds provisional relief from your bank. In my practice, clients who contacted their bank within 48 hours had far fewer losses and quicker provisional credits than those who waited.

Step-by-step checklist to stop unauthorized debits

  1. Pause and document
  • Do not panic; collect details: date, amount, merchant name, and the transaction ID from your statement or online banking. Take screenshots and save emails or text messages that reference the charge.
  • Note whether the charge is recurring (same merchant and amount) or a one-time debit.
  1. Contact your bank immediately
  • Use your bank’s fraud hotline or secure messaging. Tell them the transaction is unauthorized and ask how to file an electronic funds transfer (EFT) dispute under Regulation E.
  • Ask whether they will place a temporary hold or stop future debits from that merchant and whether they can provide provisional credit while they investigate. (Banks commonly provisionally credit accounts for many EFT disputes.)
  • In my experience advising clients, explicitly requesting a Regulation E dispute speeds the bank’s formal investigation process.
  1. File the formal dispute and follow bank instructions
  • Complete any online or paper dispute form your bank provides. Provide copies of your documentation.
  • Ask for a reference number and expected timeline. Keep records of every phone call, including names, dates, and what was promised.
  1. Notify the merchant (if appropriate)
  • For recurring charges from a legitimate vendor (e.g., subscriptions), contact the merchant and request cancellation and a refund in writing. Save your cancellation confirmation.
  • If the merchant disputes your claim or is unresponsive, rely on your bank’s formal dispute process.
  1. Consider a stop payment or close the account
  • For repeated unauthorized ACH debits from the same originator, you can ask your bank to place a stop payment on future debits from that merchant. Note: stop payments are not guaranteed for ACH transactions the same way they are for paper checks; ask your bank about the exact protections and fees.
  • If fraud is widespread or you suspect account credentials were compromised, close the account and open a new one. Redirect any legitimate automatic deposits and payments to the new account.
  1. If fraud or identity theft is involved
  • File a police report and create an identity theft report at IdentityTheft.gov. This helps when banks or credit bureaus need official documentation.
  • Place fraud alerts or a credit freeze with the three major credit bureaus if account numbers or personally identifying information were stolen.
  1. Escalate if the bank does not resolve
  • If your bank fails to follow Regulation E processes or delays unreasonably, file a complaint with the Consumer Financial Protection Bureau (CFPB) at consumerfinance.gov/complaint and your state banking regulator.

What to expect from your bank’s investigation

Federal rules give banks specific timelines to investigate electronic transfer errors. Typically, banks must investigate within 10 business days for most EFT complaints and may provisionally credit accounts during that period. In some cases (new accounts, point-of-sale, or foreign transfers), the investigation window can be longer. Check your bank’s disclosures and the CFPB’s guidance for exact timelines and procedures.

My clients typically see provisional credits within a week when the bank quickly accepts the dispute; full resolution can take longer if the merchant contests it.

Sample letter to stop future debits (send by certified mail)

[Date]

[Your name]
[Your address]
[Your bank name]
[Bank address]

Re: Stop payment and revocation of ACH authorization for [Merchant name]

Account number: [last four digits]
Transaction dates/amounts: [list]

To whom it may concern,

I did not authorize the electronic debit(s) listed above from my account. I hereby revoke any permission previously given to [merchant name] to debit my account and request a stop on any future debits from this originator. Please confirm in writing the actions you have taken, provide any provisional credit issued, and advise me of next steps to complete the dispute.

Sincerely,

[Your name]

Use this template as a guide; include the facts and attach evidence.

Documentation checklist (what the bank and merchant will want)

  • Bank account statement highlighting the unauthorized transaction
  • Transaction date, amount, merchant name, and reference/confirmation numbers
  • Any emails, text messages, receipts, or webpages showing charges or account info
  • Proof of cancellation or revocation (if you contacted the merchant)
  • Police report or identity theft report (if fraud is suspected)

Keeping a clear paper trail shortens investigations and improves outcomes.

Recovering recurring charges and refunds

  • For a legitimate subscription that renewed without notice, merchants sometimes refund after you request cancellation; if not, your bank’s dispute under Regulation E or the ACH return process can recover funds.
  • Credit card charges are handled differently — dispute unpaid charges under the Fair Credit Billing Act with your card issuer; credit cards often offer stronger dispute protection for unauthorized purchases.

Preventing unauthorized debits going forward

  • Review statements weekly and set low-balance alerts.
  • Use two-factor authentication (2FA) for banking and merchant sites.
  • Use unique passwords and a reputable password manager.
  • Prefer credit cards or virtual card numbers for online subscriptions where possible — they offer better dispute rights.
  • Limit stored payment methods on merchant accounts; remove cards you do not use.

Common misconceptions

  • “If I authorized a charge once, I can’t stop future charges.” You can revoke authorization in writing and ask your bank to block future ACH debits from that originator; keep proof of the revocation.
  • “Banks will always immediately refund unauthorized transfers.” Banks investigate and may give provisional credit, but outcomes depend on documentation and the nature of the transaction.
  • “Closing my account isn’t necessary.” If credentials are compromised or debits continue, closing and reopening an account is often the fastest, most secure fix.

When to involve law enforcement and regulators

File a police report when you suspect criminal fraud. For unresolved bank disputes, file with the CFPB. If a merchant is operating fraudulently, report them to your state attorney general and the Better Business Bureau.

Related FinHelp resources

Author notes and professional tips

In my 15 years helping people with account disputes and fraud recovery, the most effective practices are: act immediately, keep detailed records, and insist on a formal Regulation E investigation. When clients used certified mail for revocation letters and followed up persistently with their bank, recoveries were faster and final.

If a third-party processor or marketplace (for example, an online marketplace) supplied the account information, pressure the merchant and the marketplace simultaneously — marketplaces often mediate faster.

Sources and further reading

Professional Disclaimer: This article is educational and does not constitute legal or financial advice. For case-specific guidance, contact your bank, a consumer law attorney, or your state regulator.