Stop future debits and document this one
- Save the statement entry, company name, amount, date and transaction description.
- Tell the bank whether the debit was never authorized or continued after authorization was revoked.
- Ask how to dispute the debit and stop future preauthorized electronic transfers.
Separate a debit that never had permission from one that continued
The authorization history changes what evidence the bank needs.
Never authorized
Record the company name, amount, date and every related debit you do not recognize.
Authorization revoked
Keep the original agreement, cancellation request, delivery proof and the first debit that followed cancellation.
Handle bank withdrawals that do not use a card
Why ACH needs its own record
An ACH debit uses bank-account information and may repeat without a physical card. Replacing a debit card alone may not stop it, so ask which account credentials, authorizations or payment instructions must change.
Separate one debit from a series
Review earlier statements for small tests, varying company names and a repeating schedule. Mark each item individually and do not include legitimate payments merely because the descriptor is unfamiliar.
Document revoked authorization
If you previously allowed withdrawals, keep the agreement, cancellation request, delivery proof and any confirmation. Record the last authorized amount and date so the bank can distinguish the dispute from an ordinary billing complaint.
Protect essential cash flow
List fees, returned payments and necessities affected by the debit. Ask the institution how it handles related fees or temporary funds, but do not represent either outcome as guaranteed.
Know which guidance is local
US electronic-transfer rules distinguish types of authorization, errors and reporting times. Readers elsewhere should use the bank's official process and the relevant national regulator rather than importing US deadlines.
Trace the debit back to its claimed authorization
An ACH debit can be unfamiliar because it was never approved, because authorization ended or because the company name looks different. Gather the history before labeling it.
- Debit identity
- Record company descriptor, amount, date, frequency, status and statement reference. Search earlier statements for related entries and ask the bank whether it can identify the originator.
- Authorization history
- Keep any signed mandate, online agreement, trial terms, cancellation notice or revocation message. State clearly whether permission never existed or existed and was later withdrawn.
- Future control
- Ask the bank what stops future debits from the same originator and whether changing an account is necessary. Confirm how any block could affect legitimate payments from a similar descriptor.
- Case record
- List every disputed debit separately with the bank's reference, written confirmation requirement and follow-up date. Keep communication with the company separate from the bank dispute.
Do not wait for another debit before reporting the current one. The bank can explain the applicable process and timing, which may differ by account type, authorization and jurisdiction.
If the incident reaches another account or record
If the debit affected essential payments, organize the impact with the fraud exposure and cash-flow estimator.
For card-number misuse instead, review the debit and credit card reporting differences.
Put every debit, authorization and bank contact into a verifiable incident timeline.
Record the debit and authorization history
- Copy each statement descriptor, amount, date and trace or reference information the bank provides.
- State whether authorization never existed or when and how a previous authorization was revoked.
- Record the dispute, stop-payment or account-control instruction and any affected fees or essential payments.
Questions that come up during containment
Will replacing my debit card stop an ACH debit?
Not necessarily. ACH debits can use bank-account authorization rather than the card number. Ask the bank what must be blocked or changed.
Is every charge from an unfamiliar company unauthorized?
No. Descriptors can differ from a trading name. Verify legitimate subscriptions and household activity, but report a genuinely unknown or revoked debit promptly.
Processes, rights and deadlines depend on your location, provider and policy. Use the relevant official service for your jurisdiction.