ACH Dispute Guide for Merchants: Response Timelines, NACHA Rules, and 2026 Fraud Changes

An ACH dispute occurs when a customer claims they did not authorize a transaction and notifies their bank, which then places a hold on the payment headed to the merchant's account, disrupting cash flow immediately. Key parties include the merchant's bank or payment processor as the Originating Depository Financial Institution (ODFI), the customer's bank as the Receiving Depository Financial Institution (RDFI), and NACHA, which sets the rules. Merchants typically have 10 business days to respond, while customers can initiate disputes within a 60-day window after the transaction's statement date. Unlike credit card chargebacks, ACH disputes follow distinct NACHA-governed procedures with limited appeal options and greater finality.

This guide equips merchants with strategies to respond within timelines, comply with NACHA rules, and adapt to 2026 fraud monitoring expansions amid rising threats--34% of companies report ACH debit fraud incidence, per AFP 2024 data cited by Cheqly. Protecting cash flow starts with understanding these processes.

What Is an ACH Dispute and Who’s Involved?

An ACH dispute arises when a customer informs their bank that they did not authorize a specific transaction. The bank intervenes by halting the payment transfer to the merchant's account, creating an immediate cash flow interruption. This process operates under strict guidelines from NACHA, the governing body for the ACH Network.

Several parties play critical roles. The merchant's bank or payment processor serves as the ODFI, responsible for originating the transaction. The customer's bank acts as the RDFI, handling the dispute initiation and notification. NACHA oversees the rules, deadlines, and compliance for all involved. Merchants must coordinate primarily through their ODFI to address claims effectively.

Understanding these roles clarifies the merchant's position: not as the direct counterparty to the customer, but as an originator navigating bank intermediaries and NACHA protocols. This structure emphasizes proactive documentation and swift communication to resolve issues, as the ODFI serves as the primary point of contact for merchants throughout the process.

ACH Dispute Timelines: What Merchants Must Know

Timelines dictate merchant success in ACH disputes. Customers can dispute unauthorized debit charges within 60 days of the transaction's statement date. Merchants then receive notification and must respond within 10 business days, or the dispute may resolve automatically in the customer's favor, leading to fund reversal.

These deadlines stem from NACHA rules enforced through participating banks. Missing the response window risks not only losing the disputed amount but also potential impacts on account standing. Merchants should prioritize immediate review upon notification to gather evidence like authorization records within this narrow period.

Banks provide the entry point for timeline awareness, so integrating dispute alerts into payment systems helps merchants act fast. With fraud pressures mounting, adhering to these timelines supports overall NACHA compliance and helps mitigate the 34% ACH debit fraud incidence reported by companies.

Types of ACH Disputes and Common Codes

NACHA governs ACH dispute categories, each with specific codes that indicate the reason for the claim. These help banks and merchants classify and address issues efficiently. ACH disputes can be categorized into several types, each governed by NACHA’s detailed rules.

One common code, R10, signals that the customer states the originator is unknown or not authorized to debit their account--“Customer Advises Originator is Not Known to Receiver and/or Originator is Not Authorized by Receiver to Debit Receiver’s Account”. Other codes similarly tie back to NACHA's detailed framework, guiding resolution paths.

Merchants benefit from recognizing these codes early, as they inform the evidence needed--such as signed agreements or transaction records--to rebut claims. Training teams on code meanings accelerates handling and ensures alignment with NACHA protocols for more effective responses.

Step-by-Step Merchant Response to ACH Disputes

Upon receiving an ACH dispute notice from the ODFI, merchants should first review the details, including the code and amount. Gather supporting documentation, such as customer authorization forms or transaction confirmations, within the 10-business-day response window. Submit this to the ODFI or payment processor for forwarding to the RDFI. If merchants don’t respond within the required timeframe (typically 10 business days), the dispute may automatically resolve in favor of the customer, and the funds will be reversed.

Monitor progress through the ODFI, as they track status updates from the RDFI--merchants can monitor the status of an ACH dispute through their bank or payment processor, which acts as the ODFI. Failure to respond timely can result in automatic reversal of funds. Non-compliance with NACHA rules carries broader risks, including fines or removal from the ACH Network.

This process demands organized record-keeping from the outset of customer relationships. Regular audits of authorizations prevent escalation, while ODFI portals provide real-time visibility into dispute status, enabling merchants to stay proactive within NACHA frameworks.

ACH Disputes vs. Credit Card Chargebacks: Key Differences

ACH disputes and credit card chargebacks share surface similarities but diverge in rules, procedures, timelines, and outcomes. ACH processes rely on NACHA oversight, while chargebacks follow card network rules like Visa or Mastercard. ACH resolutions often prove final with no formal appeal, unlike chargebacks that allow merchant representment. ACH disputes don't offer the same appeal procedures as credit card disputes.

These distinctions mean merchants cannot apply chargeback strategies directly to ACH. ACH demands upfront prevention, as resolutions add administrative burdens without appeal safeguards, requiring focus on NACHA-specific evidence submission.

Preventing ACH Disputes: NACHA Compliance and 2026 Fraud Rules

NACHA compliance forms the foundation of prevention. Merchants must secure proper authorizations, maintain records, and adhere to origination rules to minimize disputes. With 34% of companies facing ACH debit fraud, proactive steps like verifying customer details reduce exposure. If merchants don’t stick to NACHA rules, they could end up being fined or even kicked off the ACH network.

2026 brings expanded fraud monitoring under NACHA's multi-phase roadmap to combat high fraud rates in payroll, direct deposits, and online purchases. NACHA requires covered parties to establish and implement risk-based processes and procedures reasonably intended to identify ACH entries initiated due to fraud and to revisit those processes at least annually. Phase 1, effective March 20, 2026, applies to Originators with 2023 origination volume of 6 million entries or more. Phase 2, effective June 19, 2026 (practically June 22 due to holiday), extends to all remaining non-consumer originators.

Financial institutions and originators must implement these monitoring procedures. Merchants should audit processes now, leveraging ODFI tools for ongoing surveillance. Non-compliance risks fines or network exclusion, underscoring the need for updated policies ahead of deadlines.

FAQ

What is the timeframe for merchants to respond to an ACH dispute?
Merchants typically have 10 business days to respond, or the dispute may resolve in the customer's favor with funds reversed.

Who are the main parties involved in an ACH dispute?
The key parties are the merchant's bank or processor (ODFI), the customer's bank (RDFI), and NACHA, which sets the rules.

What happens if a merchant misses the ACH dispute response deadline?
The dispute may automatically favor the customer, reversing funds, with potential NACHA non-compliance risks like fines or network expulsion.

How do ACH disputes differ from credit card chargebacks?
ACH disputes use NACHA rules with final resolutions and no appeal, while chargebacks follow card networks, allow representment, and have longer timelines.

What are NACHA's 2026 fraud monitoring requirements for ACH originators?
Originators must establish risk-based processes to identify fraudulent ACH entries, with annual reviews; Phase 1 starts March 20 for high-volume, Phase 2 June 19 for others.

How can merchants monitor the status of an ACH dispute?
Merchants monitor through their bank or payment processor, acting as the ODFI.

To apply this guide, review your current authorization processes and ODFI dispute tools today. Schedule a NACHA compliance audit before 2026 deadlines to strengthen fraud defenses.