What is an ACH authorization form?

An ACH authorization form is a signed document that gives a business permission to move money into or out of a bank account through the Automated Clearing House network. Whether you're collecting recurring payments from customers or setting up direct deposit for employees, this form is the legal foundation that makes the transfer possible.

What is an ACH authorization form?

An ACH authorization form is written consent from an account holder allowing a specific business to initiate electronic debits or credits against their bank account. Without it, no legitimate ACH transaction can proceed.

The form does four things:

• Establishes legal permission to access a specific bank account
• Defines whether the transaction is a one-time or recurring transfer
• Documents the amount, frequency, and purpose of the transaction
• Creates a paper trail that protects both parties in disputes

A one-time authorization covers a single transfer and expires after that transaction settles. A recurring authorization remains active until the account holder revokes it, covering repeated debits like monthly subscriptions or quarterly vendor payments.

For the account holder, the form provides a clear record of what they agreed to. For the business collecting payment, it's proof of consent that satisfies Nacha compliance requirements and protects against unauthorized transaction claims.

ACH debit vs. credit authorization

The two types of ACH authorization are defined by the direction of the fund flow, which determines which form type you need.

ACH debit authorization forms

An ACH debit is when you authorize a company to pull funds from your account. This is the most common type of authorization businesses use to collect payments from customers for things like recurring bill payments, SaaS subscriptions, utility bills, and loan repayments.

ACH credit authorization forms

An ACH credit is when a company pushes funds into your account. This is the type of form an employee completes to enroll in payroll direct deposit or a vendor completes to receive payments from a client. Common examples include payroll, vendor payments, and refunds.

What information does an ACH authorization form require?

Every ACH authorization form must collect specific data points to comply with Nacha Operating Rules.

Bank information

• Bank name
• Routing number (nine-digit ABA number)
• Account number
• Account type (checking or savings)

Transaction details

• Payment amount (fixed or variable)
• Payment frequency (one-time, weekly, monthly, etc.)
• Effective date or start date
• Transaction type (debit or credit)

Authorization language

• Clear statement of consent to initiate transfers
• Description of the transaction's purpose
• Revocation instructions explaining how the account holder can cancel

Signature and identity

• Account holder's full legal name
• Physical or electronic signature
• Date of authorization

Business identification

• Company name (originator)
• Company ID or tax identification number
• Contact information for disputes

ACH authorizations must be signed. Nacha rules require either a wet-ink signature on paper forms or an equivalent electronic signature for digital authorizations. Without a valid signature, the form isn't enforceable.

Nacha also mandates that every form include clear revocation instructions. The account holder must know how to cancel the authorization, and you must honor revocation requests promptly.

How to create an ACH authorization form

Building your own ACH authorization form is straightforward if you follow Nacha's compliance framework. The form must meet specific legal standards regardless of whether you collect authorization on paper, over the phone, or online.

Nacha compliance requirements

Nacha Operating Rules dictate what a valid ACH authorization must contain. Missing any required element can result in returned transactions and potential fines.

Mandatory elements include:

• Clear authorization language stating the account holder consents to electronic debits or credits
• Specific transaction terms (amount, frequency, duration)
• The originator's identity (your company name and ID)
• Revocation instructions with a method for the account holder to cancel
• Signature or equivalent authentication

You're required to retain authorization records for a minimum of 2 years after the authorization is revoked or the last transaction is processed. If a customer disputes a charge and you can't produce the original authorization, the transaction defaults against you.

Non-compliant forms put you at risk for Nacha rule violations, returned transactions, and potential penalties from your originating depository financial institution (ODFI).

Paper, phone, and online authorization methods

The method you choose depends on your business model and how you interact with customers or vendors.

Paper (PPD standard entry class)

Paper forms work well for in-person transactions, employee onboarding, and vendor setup. They require a physical signature and should be stored securely for at least 2 years. The downside is that manual data entry introduces errors, and physical storage creates compliance overhead.

Phone (TEL standard entry class)

Telephone authorizations are permitted when an existing business relationship exists or when the customer initiates the call. You must record key details of the verbal consent, including the date, amount, and confirmation that the customer authorized the transaction. You may want to record the call for your records.

Online (WEB standard entry class)

Online authorization forms are the most efficient method for recurring payments and vendor onboarding at scale. They require a secure, authenticated session and must display all required authorization language before the customer submits. WEB authorizations also require commercially reasonable fraud detection on the first transaction.

Tips for customer-friendly forms:

• Use plain language instead of legal jargon
• Pre-fill fields where possible to reduce errors
• Provide a confirmation email or receipt after submission
• Make revocation instructions visible, not buried in fine print

Whether you go paper, phone, or online, every ACH authorization form needs Nacha's core elements to protect your business and stay compliant.

See how AP teams process 10x more invoices in half the time

Learn how to automate 95% of manual invoice work

Follow step-by-step →

How to fill out an ACH authorization form

Filling out an ACH authorization form correctly the first time prevents payment delays and returned transactions.

If you're providing your bank details (payer/account holder):

1. Locate your routing and account numbers on a check or in your bank's online portal
2. Verify the routing number using your bank's website or the Federal Reserve's routing number lookup tool
3. Confirm whether the account is checking or savings
4. Read the authorization language carefully before signing
5. Keep a copy of the completed form for your records

If you're collecting authorization (payee/business):

1. Provide a clear, complete form with all Nacha-required fields
2. Verify the routing number format (nine digits, starts with 01–12 or 21–32)
3. Confirm the account holder's identity before processing
4. Store the signed form securely per your retention policy
5. Send a confirmation to the account holder

Common mistakes to avoid:

• Transposing digits in routing or account numbers (the most frequent error)
• Confusing the routing number with the account number on a check
• Selecting the wrong account type (checking vs. savings)
• Leaving the authorization date blank

If a field doesn't apply to your situation, write "N/A" rather than leaving it blank. Blank fields create ambiguity about whether the form was completed intentionally.

What to look for in an ACH form template

You don't need to build an ACH authorization form from scratch. A good template gives you a Nacha-compliant starting point that you can customize for your business needs. When evaluating templates, look for these qualities:

General ACH authorization form templates

Look for templates that cover standard one-time and recurring payment authorizations with all required fields and authorization language pre-written. The best templates are available in both PDF (for print and e-sign) and Word/DOCX (for customization) formats.

Vendor ACH authorization form templates

For accounts payable teams collecting banking details from vendors during onboarding, choose a template that includes fields for vendor tax ID, payment terms, and remittance preferences alongside standard ACH fields.

Recurring payment authorization templates

For ongoing payments from customers, look for templates with clear language about payment frequency, variable amounts, and cancellation procedures built in.

When customizing a template, retain all Nacha-required elements. You can add fields specific to your workflow (purchase order numbers, department codes, etc.) but removing required fields makes the form non-compliant.

For high-volume operations, digital authorization collection through your AP software eliminates the overhead of managing individual PDF or paper forms.

When is an ACH authorization required?

An ACH form is legally necessary in most business contexts involving electronic bank transfers. Here are the most common scenarios:

• Setting up vendor payments: You must have authorization before paying a vendor via ACH for the first time
• Employee onboarding: An authorization form is required when enrolling new hires in direct deposit
• Recurring customer billing: You need authorization before initiating automatic debits from customer accounts
• One-time payments: Even single ACH transfers require written authorization under Nacha rules
• Bank account changes: A new authorization is required when an existing payee updates their banking information

Best practices for managing ACH forms

Collecting authorization forms is only half the job. How you store, monitor, and retire them determines whether you stay compliant and avoid disputes.

Secure storage and record-keeping

Nacha requires you to retain ACH authorization records for a minimum of 2 years after the authorization is revoked or the last transaction processes, whichever is later.

• Digital storage: Preferable for searchability and disaster recovery. Use encrypted, access-controlled systems with audit logging. Cloud-based AP platforms handle retention and access controls automatically
• Physical storage: Requires locked cabinets with limited access and a documented chain of custody. Harder to manage at scale and more vulnerable to loss
• Audit trail: Maintain a clear record showing when each authorization was received, by whom, and any modifications
• Access controls: Implement role-based permissions so only authorized personnel can view sensitive banking information
• Retention deadlines: Set calendar reminders so records aren't destroyed prematurely

Revocation procedures

Account holders have the right to revoke their ACH authorization at any time. You need a documented process to handle these requests:

• Process revocation requests within 3 business days of receipt
• Notify your originating bank to stop future transactions against that authorization
• Send written confirmation to the account holder that the revocation was processed
• Retain the original authorization and the revocation record for the full retention period
• Update your internal systems to prevent accidental debits after cancellation

Failing to honor a revocation request exposes you to unauthorized transaction claims and potential Nacha penalties.

Simplify ACH payments with Ramp

Handling ACH payments at scale can be a major headache without the right tools and processes in place. Ramp Bill Pay is accounts payable automation software that collects ACH authorization forms during vendor onboarding with zero manual input.

Ramp simplifies all your vendor transactions by connecting directly to your existing AP workflow:

• Save time: Automate approval workflows and match documents with AI to reduce processing time by up to 10x per invoice
• Faster vendor setup: Centralize vendor onboarding and securely verify bank account details at scale
• Multiple payment methods: Pay vendors via ACH, check, or wire transfer, offering flexibility to meet varied needs
• Save money: Zero processing fees for domestic bill payments, lowering your transaction costs

Learn more about how Ramp Bill Pay can save you time and money.