ACH Debit vs ACH Credit: Push vs Pull

Short answer: an ACH credit pushes money and an ACH debit pulls it. With a credit, the payer starts the payment from its own account, like an employer paying wages. With a debit, the business being paid starts it and takes the money from the payer's account, with permission, like a utility collecting a bill. An online store taking "pay by bank" at checkout uses ACH debits. Debits need the payer's authorization and can be returned, as unauthorized, for up to 60 days on a consumer account; credits are controlled by the payer and are harder to undo.

If you want the basics of ACH first, start with What is an ACH payment?. This guide is about the difference between the two directions.

ACH debit vs ACH credit at a glance#

Nacha's own wording: an ACH credit is a "Push" of funds from the Originator's account to the Receiver's; an ACH debit is a "Pull" of funds from the Receiver's account to the Originator's. Nacha says credits make up "just under 50%" of ACH payments and debits "just over 50%".

What is an ACH debit?#

An ACH debit is the "pull" side of the ACH Network. The business (the Originator) asks its bank (the ODFI) to collect money from the customer's account; the request goes through an ACH Operator to the customer's bank (the RDFI), which takes the money from the customer (the Receiver).

Because money leaves an account at someone else's request, debits carry the most rules:

• Authorization. "For consumers, a debit authorization must be in writing or similarly authenticated," with terms that are clear and easy to understand. Recurring debits must include how to revoke.
• Proof. The Originator must be able to prove it had permission, within 10 days of a request.
• Notice. At least 7 calendar days' notice if the date of a recurring debit changes; 10 calendar days for an amount change on a consumer account.
• Account validation. For online (WEB) debits, since 19 March 2021, fraud detection "must, at a minimum, validate the account to be debited" on first use.
• Timing. Nacha says debits can settle no more than one banking day in the future.

What does "ACH debit" mean on a bank statement?#

It means a company you authorized pulled money from your account through ACH. The statement shows a descriptor chosen by the company or its processor. Stripe, for example, says its descriptor is truncated "to the first 16 alphanumeric characters on the bank statement." A short, recognizable descriptor matters to a business: customers who do not recognize a debit tend to dispute it.

What is an ACH credit?#

An ACH credit is the "push" side. The payer tells its own bank to send money to someone else's account. Payroll direct deposit is the classic example: the employer is the Originator, and each employee's bank posts the credit.

For a business, ACH credits show up in three places:

1. Paying others: suppliers, staff, contractors, affiliates.
2. Refunds: Stripe says ACH Direct Debit refunds "are always processed as a separate credit to the customer's bank account," not a reversal of the debit.
3. Customer-sent bank transfers: the customer pushes money to an account number you give them. Stripe describes this as letting "customers send money to you directly from their bank account".

That third use has trade-offs. Stripe's documentation on credit transfers says they may not fit businesses with many low-value payments because customers "can send the wrong amount", may not fit if payments must complete at a set time, and that most credit transfer methods "don't support refunds directly." They work best for large, one-off payments, such as B2B invoices.

Is an ACH debit the same as a debit card payment?#

No, although both take money straight from a checking account. A debit card payment runs on a card network such as Visa or Mastercard, is approved or declined in seconds, and carries card fees. The Federal Reserve regulates debit card interchange under Regulation II, and reports that in 2024 the average interchange fee on debit cards from regulated issuers was 23 cents per transaction.

An ACH debit runs on the ACH Network, uses the account and routing number instead of a card number, and confirms over days rather than seconds. For the business, the fee is usually lower on larger payments: Stripe lists online cards, debit included, at 2.9% + 30¢ and ACH Direct Debit at 0.8% capped at $5.00. The trade-off is that a card payment is approved up front, while an ACH debit can still fail after you send it.

Return windows and reversals#

Both directions can come back, but for different reasons and on different clocks.

Debit returns are the ones a store feels. Plaid's documentation gives the two windows: most returns must happen "within 2 banking days" of settlement, and for unauthorized returns "the window is 60 calendar days." Stripe says much the same for disputes: up to 60 calendar days on a personal account and up to two business days on a business account, and Braintree's ACH guide lists 2 calendar days for business accounts and 60 for personal ones. Insufficient funds (R01) is "by far the most common return type," per Plaid. The full code list is in ACH return codes.

Credit returns happen when the receiving account cannot take the money, for example because it is closed. Plaid says that if a credit "experiences an ACH return, the funds will be returned" to the sender's balance.

Reversals are the sender's undo button for mistakes, and they apply to both directions. Nacha allows a reversal only for a duplicate entry, the wrong receiver, the wrong amount, certain employment-related payroll credits, a debit dated earlier than intended or a credit dated later than intended. It must reach the receiving bank "within 5 banking days following the Settlement Date of the Erroneous Entry." Nacha is explicit that failing to fund the original entry is not a valid reason.

So in practice: once you push an ACH credit to the right account for the right amount, it is very hard to get back. Once you pull an ACH debit, the customer has days or weeks to send it back.

Which one should a business use?#

For a store, the answer is almost always a debit at checkout, which is why the rest of this guide focuses on making debits safe.

Making ACH debits safe at checkout#

The weakness of a debit is that you send it before you know it will succeed. Every return costs a fee (Stripe lists $4.00 for a failed ACH payment and $15.00 for a disputed one), and every unauthorized return counts toward Nacha's thresholds, explained in Nacha return rate thresholds.

Three checks remove most of that risk before the debit leaves your site:

1. Is the account real and open? Validation on first use, required for WEB debits.
2. Does it belong to the buyer? An ownership check compares the account holder's name with the buyer's.
3. Does it hold the money? A balance check before a large debit avoids R01.

Typed routing and account numbers answer none of these. A bank login can answer all three in the same step.

For a full comparison of verification methods, see bank account verification for WordPress. For the processor options that send the debit, see ACH payment processors for small business.

What authorization wording does a debit need?#

Nacha requires clear terms and, for recurring debits, how to revoke. Stripe publishes recommended mandate text for custom forms, beginning: "By clicking [accept], you authorize [Business Name] to debit the bank account specified above for any amount owed..." and allowing the customer to cancel "with 30 (thirty) days notice." Stripe also says you must give each customer a copy of the mandate, and that if you use Stripe-hosted checkout, Stripe collects and stores it for you.

For a one-time WooCommerce order, a short line next to the pay button usually covers it: who is debiting, how much, when, and how to contact you. For a membership, add the amount per period, the billing day and how to cancel. More on recurring rules is in ACH payments for membership sites. Have your own adviser review final wording.

How BankBridge helps with ACH debits#

BankBridge adds Plaid Link to WooCommerce checkout and MemberPress signups, so a customer authorizes an ACH debit by logging in to their bank and picking an account instead of typing numbers. Plaid Auth returns the account details for the payment, which also validates the account. Before the debit, BankBridge can run Plaid Balance for available funds, Plaid Identity to compare the account owner with the buyer, and Plaid Signal to score the chance of a return. The debit is then sent through a processor such as Stripe or Dwolla, or through Plaid Transfer if Plaid approves your business, as described in the WooCommerce doc.

Plans start at $79 a month for a single site ($149 for five sites, $299 for unlimited). Plaid bills its own fees separately. If your customers are mostly businesses that push you ACH credits against invoices, you may not need a checkout debit at all. If you do take debits, try the bank login in Plaid's Sandbox on the live demo, then pick a plan.

This guide is general information, not legal or financial advice. Rules and fees are from Nacha, Plaid, Stripe and PayPal public pages, checked 26 October 2026, and change over time. Plaid, Stripe and Braintree are trademarks of their owners; BankBridge is not affiliated with or endorsed by any of them.