ACH Authorization Language
Required NACHA authorization language for ACH debit transactions.
NACHA requires specific authorization language before debiting a customer's bank account. The required text varies by ACH transaction type.
Use this authorization language verbatim or consult legal counsel before modifying. Cresora is not a legal advisor — these templates are provided as a starting point.
One-time ACH debit
Display this before collecting bank account information for a single payment:
By providing your bank account information and clicking "Authorize Payment," you authorize [Your Company Name] to initiate a one-time electronic debit from your bank account ending in [last 4 digits] for $[amount] on or after [date]. You have the right to revoke this authorization by contacting us at [contact information] before the debit date.
Recurring ACH debit (fixed amount)
For subscription plans with a fixed monthly or annual amount:
By providing your bank account information and clicking "Authorize Payment," you authorize [Your Company Name] to initiate recurring electronic debits from your bank account ending in [last 4 digits] for $[amount] on [schedule, e.g., "the 15th of each month"]. This authorization will remain in effect until you cancel by contacting us at [contact information] with at least 3 business days' notice before the next scheduled debit.
Recurring ACH debit (variable amount)
For plans where the amount varies (usage-based, etc.):
By providing your bank account information and clicking "Authorize Payment," you authorize [Your Company Name] to initiate recurring electronic debits from your bank account ending in [last 4 digits] for amounts that may vary based on your usage, on [schedule]. You will receive advance notice of the debit amount at least 10 days before each charge. This authorization remains in effect until cancelled.
Retaining authorization records
NACHA requires you to retain authorization records for 2 years after the last ACH entry. Store:
- The full authorization text displayed to the customer
- Timestamp of customer acceptance
- IP address and user agent (for digital authorizations)
- Account number (masked) and routing number
Re-notification language
When ach.renotification_required fires, send the customer:
This is a notice that we will be debiting your bank account ending in [last 4] for $[new amount] on [new date]. If you wish to revoke this authorization, contact us at [contact info] at least 3 business days before the debit date.