ACH can be a useful option for professional firms that collect invoices or recurring fees. But bank-to-bank payments still require clear authorization, protection of account information and a process for handling returns.
For accountants, consultants and other service businesses, the goal is a payment workflow your clients can use and your team can reconcile. This guide outlines the questions to answer before adding ACH.
Understand what kind of payment you are accepting
ACH is a U.S. network for electronic transfers between bank accounts. A client may send an ACH credit to pay an invoice, or your firm may originate an authorized ACH debit to collect a payment. These are different workflows with different responsibilities.
Ask the provider which payment types your account supports, whether clients use consumer or business accounts, and how the method of authorization affects the process. An online form, a phone request and a business-to-business arrangement should not automatically be treated the same.
ACH is not a guarantee of immediate or irreversible payment. Confirm submission cutoffs, availability of faster options, funding policies and how returns can affect a payment you have already recorded.
Collect authorization through the approved workflow
Before initiating a debit, use the authorization process appropriate to that transaction type. Have the provider explain what the client must agree to, what record you need to retain and how to handle changes or cancellation.
For recurring payments, document the payment arrangement and explain how the client can contact your firm about it. If the amount or timing changes, follow the applicable notice and authorization requirements rather than assuming the original permission covers everything.
Ask your provider for current instructions on record retention and responding to authorization requests. Do not rely on one generic retention period for every payment type.
Verify account information without confusing it with permission
Nacha’s WEB debit rule, covering consumer debits authorized or initiated online, requires account validation as part of a commercially reasonable fraud-detection system before first use of an account number for WEB debits and when the account number changes. The minimum validation standard is not the same as proof of account ownership or authorization for a particular payment.
Ask the provider which checks are used for your workflow, what an unsuccessful check means and how staff should handle an exception. Do not bypass an unresolved verification step just to get an invoice paid.
Include the 2026 fraud-monitoring requirements
Nacha’s Phase 2 fraud-monitoring rules extend the requirements to all non-consumer ACH originators, regardless of transaction volume. The practical compliance date was June 22, 2026.
If your firm originates ACH entries, establish risk-based procedures appropriate to your role to identify suspected unauthorized payments and payments induced through false pretenses, such as impersonated payment instructions. Review those procedures at least annually. Work with your bank or provider to document which controls they supply and which your team must perform. The rules do not require every firm to purchase a particular software product.
Protect access and bank details
- Use the supported collection method. Direct clients to the approved payment form or portal. Avoid requesting complete bank details through ordinary email or an unprotected spreadsheet.
- Enable strong account access controls. Use individual staff accounts and multi-factor authentication where available. Give each employee only the access needed for their work.
- Verify changes independently. When payment instructions change, confirm them through a trusted contact method rather than relying only on the incoming message.
- Separate duties where practical. Decide who may create, approve, refund or change payment instructions.
- Review activity. Monitor unusual amounts, new account details, repeated failures and other exceptions appropriate to your business.
Ask which controls the platform provides and which are your firm’s responsibility. A claim that the system is “secure” is not a substitute for understanding how it will be used.
Build a reconciliation and returns process
Decide how your accounting system distinguishes a submitted payment, a settled payment, a deposit and a returned transaction. Those events may happen at different times.
Assign responsibility for reviewing payment reports and return notifications. Staff should know how to update the invoice, contact the client through an appropriate channel and follow the provider’s instructions on any permitted retry. Do not repeatedly re-submit failed debits without checking the reason and applicable rules.
Test how the system handles partial payments, multiple invoices, refunds and changes to a recurring arrangement. If an accounting connection is proposed, confirm exactly which records it creates and which steps remain manual.
Compare ACH costs on a complete basis
Request the per-payment pricing, any percentage charges or caps, monthly fees, verification costs, return fees, expedited-service charges and integration costs. Include only the features your firm plans to use.
ACH may produce a different cost result from cards, but the answer depends on your actual pricing, invoice sizes, payment mix and workflow. Compare the total expected cost using the same collection assumptions.
A lower transaction fee may be less useful if the team must spend substantial time matching payments or resolving exceptions. Include the operational work in the evaluation.
For the card side of the comparison, see our guide to calculating credit card processing costs.
Keep specialized funds separate from ordinary invoices
If your firm handles client trust funds, escrow or other restricted accounts, obtain specific guidance before using a payment service for those funds. Confirm account handling, fee deductions, returns and any professional obligations with your bank and qualified advisor. General merchant-processing capability does not establish suitability for trust accounting.
Discuss your invoicing workflow with Platinum
Platinum offers ACH and invoicing options as part of its payment-services discussions. Our professional services page explains the types of client-payment workflows we help businesses evaluate.
Tell us how you invoice, whether payments are one-time or recurring, and which accounting tools you use. Features, underwriting, funding and integration depend on the selected solution.
Request a Free Merchant Analysis to review your current payment costs and discuss whether ACH fits your collection process.
Starting a new business without a statement? Contact Platinum and tell us how you plan to invoice and collect payments.
Frequently asked questions
Are ACH payments risk-free?
No. Account errors, unauthorized activity and returned payments can occur. Use the approved authorization, verification and monitoring processes.
Does account validation authorize a debit?
No. Verifying an account and obtaining permission for a payment are different steps.
Can ACH automatically connect to our accounting software?
Only if the selected solution supports the required connection. Confirm your exact software, data flow and exception handling before committing.
