High-risk payments guide

How Does an ACH Payment Work?

ACH is the bank-to-bank rail behind direct deposit and bank debit. For a high-risk business it is cheaper than cards, slower than cards, and it fails in a completely different way.

An ACH payment moves money directly between two US bank accounts through a shared network, without a card ever being involved. You collect the customer’s routing and account number plus their permission to charge it, your bank sends that instruction into the ACH Network in a batch, and the customer’s bank debits the account and passes the funds back. The whole thing runs on a banking-day schedule instead of in real time, which is why it is cheaper than a card payment and why it takes a day or two rather than seconds.

Key takeaways

  • ACH is a batch network. Payments are grouped and exchanged between banks on a set schedule, so standard settlement lands in one to two banking days.
  • The network is enormous and still growing. It carried 35.2 billion payments worth $93 trillion in 2025, up nearly 5% in volume over 2024 (Nacha, 2026).
  • Same Day ACH clears within the banking day and is capped at $1 million per payment. It handled 1.4 billion payments worth $3.9 trillion in 2025 (Nacha).
  • ACH fails through returns, not chargebacks. Nacha’s unauthorized return rate threshold is 0.5%, and crossing it is a rules violation, so your authorization records matter more than your evidence files.

What is an ACH payment?

ACH stands for Automated Clearing House, the US network that banks use to send money to each other in batches. Nacha, the industry association that writes the rules, governs how those payments are formatted, authorized, and returned. If you have ever been paid by direct deposit or paid a utility bill straight from your checking account, you have used it.

There are two directions. An ACH credit pushes money out, which is how payroll and vendor payments work. An ACH debit pulls money in, which is what a business uses to charge a customer’s bank account. Merchants care mostly about debits, because that is the version that replaces or sits beside card acceptance.

The scale is worth knowing, because it tells you this is a mainstream rail and not a workaround. The ACH Network moved 35.2 billion payments worth $93 trillion in 2025, and business-to-business volume alone grew almost 10% to close to 8.1 billion payments (Nacha, 2026).

How does an ACH payment work, step by step?

An ACH debit passes through four parties in a fixed order. Knowing the sequence explains both the timing and the failure points.

  1. You collect authorization and bank details. The customer gives you their routing number, account number, and clear permission to charge the account. That permission is the legal basis for the debit, so it has to be captured and stored properly rather than assumed.
  2. Your bank submits the entry. Your bank, called the originating bank, packages your payment instruction with everyone else’s into a batch and sends it to an ACH operator at the next processing window.
  3. The operator sorts and passes it on. The ACH operator, either the Federal Reserve or The Clearing House, routes each entry to the right receiving bank and handles settlement between the two institutions.
  4. The customer’s bank debits the account. The receiving bank posts the debit, and the money settles to your side. If the account is closed, short of funds, or the customer says they never agreed, the bank sends a return back up the same chain instead.

Nothing here happens instantly, and that is by design. Batching is what makes ACH so cheap to run compared with the real-time authorization a card transaction needs.

How long does an ACH payment take to settle?

Standard ACH normally settles in one to two banking days from submission. Same Day ACH, launched in 2016, can settle within a few hours on the same banking day, and Nacha caps it at $1 million per payment (Nacha, ACH Payments Fact Sheet). That limit rose from $100,000 in March 2022.

Same Day ACH is the fastest growing part of the network. It carried 1.4 billion payments worth $3.9 trillion in 2025, increases of 16.7% in volume and 21.4% in value over 2024 (Nacha, 2026). It also costs more per item, so most businesses use it selectively rather than as the default.

The detail that catches people out is the banking calendar. Weekends and federal holidays are not banking days, so a payment submitted late on a Friday can post on Tuesday. Build that into your cash-flow planning, especially if you are switching a payment plan from cards to bank debit. A card sale and an ACH debit taken on the same afternoon do not reach you at the same time.

What does ACH cost compared with card processing?

ACH is usually charged as a small flat fee per item, while card processing is charged as a percentage of the sale plus a fixed amount. That difference is the whole argument. On a $40 order the percentage barely registers, but on a $4,000 invoice a per-item fee is a fraction of what interchange would cost you.

So the honest rule is that ACH gets more attractive as your average ticket rises. Businesses running large invoices, tuition, rent, wholesale orders, or long payment plans typically save the most. Businesses running small impulse purchases usually do not, and they also lose the checkout convenience that cards provide.

There is a second saving that does not show up on a rate sheet. ACH does not carry card-network dispute fees, and it does not feed the dispute ratio that decides whether a high-risk card account survives. What any of this actually costs you depends on your volume, ticket size, and history, which is why real high-risk pricing is worked out from your own numbers rather than a published table.

What happens when an ACH payment fails?

ACH failures come back as returns, each carrying a code that says why. R01 is insufficient funds, R02 is a closed account, R03 is a bad account number, and R10 is the customer telling their bank the debit was not authorized. You get the code, not a dispute case to argue, which makes ACH failure faster to read and harder to reverse.

The timing is not symmetrical. Most returns arrive within two banking days, but an unauthorized consumer debit can come back much later, generally up to 60 days after the customer’s statement. A signed or clearly logged authorization is your protection, and it is the reason authorization capture belongs in your setup rather than in a folder somewhere.

Return rates are also monitored, and the numbers are public. Nacha sets an unauthorized return rate threshold of 0.5%, and exceeding it is a direct rules violation. An administrative return rate above 3% or an overall return rate above 15% is not an automatic violation, but it lets Nacha open an inquiry into your origination practices (Nacha, ACH Network Risk and Enforcement Topics). Sponsoring banks frequently hold merchants to tighter limits than these, so treat them as a ceiling and not a target.

Reinitiation rules matter here too. You may resubmit a returned debit only in limited circumstances, and a reinitiated entry has to carry the same company name, company ID, and amount as the original. Retrying a failed debit over and over with small changes is a rules problem, not a collections tactic. If failed payments are a recurring drag on your revenue, the discipline that fixes it is a proper dunning process rather than more retries.

Where does ACH fit in a high-risk payment stack?

For most high-risk merchants ACH is a second rail, not a replacement for cards. Customers still expect a card field at checkout, and taking it away costs conversions. What ACH does well is carry the money that cards handle badly, which means large invoices, recurring payment plans, and anything where the fee percentage hurts.

It also changes your risk profile. Because ACH sits outside the card networks, it does not carry chargebacks in the card sense, and the difference between a return and a card dispute is worth understanding alongside chargebacks and refunds. For a business already running close to the card networks’ monitoring thresholds, moving some volume to bank debit relieves pressure on the ratio that puts the account at risk.

That is also why underwriting for ACH is its own conversation. Bank debit has its own authorization requirements and its own return rate limits, so a provider that boards you for cards is not automatically set up to run your bank payments. If you are rebuilding after a shutdown or a MATCH or TMF listing, bank debit is often the rail that comes back first. Setting it up properly, with authorization capture and return monitoring built in, is what ACH processing is for.

The short version

ACH works by batching bank-to-bank instructions and settling them on a banking-day schedule, which buys you a much lower cost per payment and costs you the speed of a card. Standard payments land in one to two banking days, Same Day ACH lands within the day up to $1 million, and failures arrive as return codes with rate limits attached. Use it where the ticket is large or the billing is recurring, keep clean authorization records for every debit, and watch your return rates the same way you would watch a dispute ratio. Run alongside a card account rather than instead of one, it is one of the few changes that lowers both your processing cost and your account risk at the same time. If you want to see how it would sit next to your current setup, you can start your application and we will work through the numbers with you.

Frequently asked questions

How long does an ACH payment take to clear?
Standard ACH usually settles in one to two banking days, because payments are gathered into batches and passed between banks on a schedule rather than one at a time. Same Day ACH can settle in a few hours on a banking day. Weekends and federal holidays are not banking days, so a Friday submission often lands on the following Monday or Tuesday.
What is Same Day ACH and when is it worth paying for?
Same Day ACH is a faster option on the same network that clears within the same banking day, and Nacha caps it at $1 million per payment. It costs more per item than standard ACH, so it earns its keep on time-sensitive money like payroll or a supplier payment with a deadline. Routine subscription debits rarely need it.
Can a customer reverse an ACH debit the way they file a card chargeback?
Yes, but the process is different. The customer's bank sends the payment back with a return code instead of opening a network dispute with reason codes and evidence rounds. A consumer who says a debit was unauthorized can generally get it returned for up to 60 days after their statement, so your signed authorization record is the thing that protects you.
What ACH return rate levels should a merchant watch?
Nacha sets three lines for debits. The unauthorized return rate threshold is 0.5%, and going over it is a rules violation. An administrative return rate above 3% or an overall return rate above 15% is not an automatic violation, but it lets Nacha open an inquiry into how you originate payments. Sponsoring banks often enforce tighter internal limits than these.
Which ACH transaction code applies to online payments?
Payments a consumer authorizes over the internet use the WEB code, phone authorizations use TEL, paper or recurring consumer authorizations use PPD, and business-to-business payments use CCD or CTX. The code tells the receiving bank how the payment was authorized, so picking the right one is part of keeping your authorization records defensible.

Sources

Get reviewed

See where your account lands.

Share your vertical, monthly volume, current processor status, and any recent statements. Midnight Payments prices high-risk accounts from your real numbers, with low or no monthly fees and no long-term contract.