Part of our eCheck Processing guide 10 min read

ACH Return Codes: Why an eCheck Comes Back and What to Do

ACH return codes tell you why a customer's bank sent an eCheck back. Each one is a short code, like R01 for "insufficient funds" or R10 for "I didn't authorize this." The code decides what you can do next: try again, fix the bank details, get a new authorization or stop. Here's how to read them, how long a payment can come back, the retry rules and the return-rate limits your bank watches.

A kraft envelope with a blank address label on top of a white window envelope on a wooden table

The short answer

An eCheck is an ACH debit, and the customer's bank doesn't approve it up front. So it can be returned after you submit it, with a code that says why. Under Nacha's rules, as of October 13, 2026:

  • Most returns (no money, closed account, wrong number) come back within two banking days of settlement.
  • Unauthorized returns on consumer accounts (R10, R11 and similar) can come back for up to 60 days, backed by the customer's signed statement.
  • R01 and R09 (not enough money) can be retried, at most two times, marked "RETRY PYMT". R10 can't be retried without a new authorization.
  • Return-rate limits: 0.5% unauthorized, 3.0% administrative, 15.0% overall, measured on debits.
Ask about eCheck for your business →

ACH Return Code Lookup

Type a code (R01) or a word ("closed", "stop") to find what it means, how long the bank has to send it and what to do next. The list covers the codes a business taking eCheck payments is likely to see.

22 codes listed.

  • R01Insufficient fundsCan be retried (max 2)

    Not enough money in the account to cover the debit.

    Return deadline
    2 banking days
    What to do
    You can send it again up to two more times, with RETRY PYMT in the description. Contact the customer first if you can.
  • R02Account closedAdministrative return (3.0% level)

    The customer or their bank closed the account.

    Return deadline
    2 banking days
    What to do
    Don't retry. Ask the customer for a different account and a new authorization.
  • R03No account / unable to locate accountAdministrative return (3.0% level)

    The account number looks valid, but it doesn't match an open account or the account holder's name.

    Return deadline
    2 banking days
    What to do
    Don't retry. Check the details with the customer and get correct ones.
  • R04Invalid account number structureAdministrative return (3.0% level)

    The account number isn't in a valid format.

    Return deadline
    2 banking days
    What to do
    Don't retry. Usually a typo; confirm the number with the customer.
  • R05Unauthorized debit to consumer account using corporate SEC codeCounts toward the 0.5% unauthorized rate

    A business (CCD) code was used to debit a personal account, without the kind of permission a consumer debit needs.

    Return deadline
    60 calendar days
    What to do
    Don't retry. Get a proper consumer authorization and use the matching SEC code.
  • R06Returned per ODFI's request

    The bank that sent your payment into the ACH network (the ODFI) asked for it back, usually to fix an error.

    Return deadline
    No fixed deadline
    What to do
    Ask your provider why it was pulled back before you send anything new.
  • R07Authorization revoked by customerCounts toward the 0.5% unauthorized rate

    The customer told their bank they had cancelled their permission for your debits.

    Return deadline
    60 calendar days
    What to do
    Stop debiting this account. Don't charge again without a new authorization.
  • R08Payment stopped

    The customer placed a stop payment on this debit.

    Return deadline
    2 banking days
    What to do
    Don't retry on your own. Contact the customer: a new debit needs their approval.
  • R09Uncollected fundsCan be retried (max 2)

    The balance covers the debit, but not enough of it is available to use yet.

    Return deadline
    2 banking days
    What to do
    Same as R01: you can send it again up to two more times, with RETRY PYMT in the description.
  • R10Customer advises originator is not known to receiver and/or originator is not authorized by receiver to debit receiver's accountCounts toward the 0.5% unauthorized rate

    The customer says they don't know you or never authorized the debit.

    Return deadline
    60 calendar days
    What to do
    Stop. Don't debit the account again without a new authorization. Pull your authorization record and contact the customer.
  • R11Customer advises entry not in accordance with the terms of the authorizationCounts toward the 0.5% unauthorized rate

    The customer authorized you, but the debit had an error, such as the wrong amount or date.

    Return deadline
    60 calendar days
    What to do
    Fix the error. Nacha lets you send a corrected payment within 60 days of the return without new permission, as long as the original authorization still stands.
  • R12Account sold to another DFI

    The account moved to a different bank or credit union (DFI: depository financial institution).

    Return deadline
    2 banking days
    What to do
    Don't retry. Ask the customer for their new bank details.
  • R13Invalid ACH routing number

    The routing number isn't one that can receive ACH payments.

    Return deadline
    Usually right away
    What to do
    Check the routing number with the customer and resubmit with the correct one.
  • R14Representative payee deceased or unable to continue in that capacity

    The person receiving payments for someone else can no longer act for them.

    Return deadline
    2 banking days
    What to do
    Stop debiting this account. Contact the account holder or their new representative.
  • R15Beneficiary or account holder (other than a representative payee) deceased

    The account holder has died.

    Return deadline
    2 banking days
    What to do
    Stop debiting this account.
  • R16Account frozen / entry returned per OFAC instruction

    The account is frozen by the bank or a legal order, or the U.S. Treasury's sanctions office (OFAC) told the bank to return the payment.

    Return deadline
    2 banking days
    What to do
    Don't retry. Contact the customer. From March 17, 2028, sanctions returns move to the new code R90.
  • R17File record edit criteria / entry with invalid account number initiated under questionable circumstances

    The bank couldn't process something in the payment details, or the account number was invalid and the payment looked suspicious.

    Return deadline
    2 banking days
    What to do
    Check the details and ask your provider before resubmitting.
  • R20Non-transaction account

    The account can't take ACH debits, such as some savings or investment accounts.

    Return deadline
    2 banking days
    What to do
    Ask the customer for a checking account.
  • R23Credit entry refused by receiver

    The customer refused a credit: money you sent them, such as a refund.

    Return deadline
    No fixed deadline
    What to do
    Contact the customer and agree on another way to send the money.
  • R24Duplicate entry

    The customer's bank thinks this payment repeats one already sent.

    Return deadline
    2 banking days
    What to do
    Check your records. Don't resend if the first payment went through.
  • R29Corporate customer advises not authorizedCounts toward the 0.5% unauthorized rate

    A business customer says it didn't authorize the debit.

    Return deadline
    2 banking days
    What to do
    Stop. Get a signed authorization (or agreement) from the business before debiting again.
  • R31Permissible return entry (CCD and CTX only)

    A business payment sent back after the normal deadline, with your bank's agreement.

    Return deadline
    No fixed deadline (by agreement)
    What to do
    Contact the business customer to settle the payment another way.

Code titles follow the Nacha Operating Rules. Return deadlines count from the settlement date. We checked them on October 13, 2026 against Nacha's rule pages and a U.S. bank's published ACH return table. "2 banking days" means the customer's bank must send the return by the start of business on the second banking day after settlement. For 60-day unauthorized returns on consumer accounts, the customer must sign a written statement. Nacha has approved a new code, R90 (returns for the bank's sanctions obligations), effective March 17, 2028. General guidance, not legal advice.

Code names follow the Nacha Operating Rules. Your gateway's report may word them a little differently.

The Return Codes You'll See Most

A handful of codes make up most returned eChecks. They fall into four groups, and each group needs a different response. The full wording and deadline for each is in the return code lookup above.

R01 and R09: not enough money (NSF eChecks)

R01 means insufficient funds. R09 means the money is there but hasn't cleared yet (uncollected funds). These are the classic NSF eCheck, the electronic version of a bounced check. The customer usually meant to pay. You can retry, within limits (retry rules below), or contact them for another payment.

R02, R03 and R04: bad or closed account

  • R02: the account is closed.
  • R03: no account, or the bank can't find it.
  • R04: the account number isn't a valid format.

Nacha calls these administrative returns. Don't retry them with the same details. Contact the customer for a new account and a new authorization. These three count toward the 3.0% administrative limit, so they're a sign your checkout or data entry needs tightening.

R10, R11, R05 and R29: unauthorized

R10 means the customer told their bank they don't know you or never authorized the debit. Since April 1, 2021, Nacha splits off R11 for a payment the customer did authorize but that had an error, like the wrong amount or an earlier date than agreed. R05 is a consumer account debited under a business-only SEC code (the code that says how the payment was authorized). R29 is a business customer saying the debit wasn't authorized.

These are the returns that hurt most. They count toward the 0.5% limit and work much like a card chargeback. After an R10, stop debiting that account until you have a new authorization. After an R11, Nacha lets you fix the error and send a corrected payment within 60 days of the return without a new authorization. Your best defense is a clear authorization record; see ACH SEC codes and authorization rules.

R07, R08, R16 and R20: the customer or bank stopped it

  • R07: the customer revoked their authorization. Treat it as a cancellation, and don't charge again without a new one.
  • R08: the customer stopped this payment. Talk to them before the next one.
  • R16: the account is frozen. Nacha has approved a new R90 code for sanctions-related returns, effective March 17, 2028; after that date R16 means "account frozen" only.
  • R20: the account can't take this kind of debit (a non-transaction account, such as some savings accounts). Ask for a checking account.

ACH Return Deadlines: Two Banking Days vs 60 Days

How long can an eCheck come back? It depends on the code and the type of account.

Return typeExamplesHow long the bank has
Most returnsR01, R02, R03, R04, R09, R20Two banking days after settlement
Consumer account, unauthorized or in errorR10, R11 (R07 is handled the same way)Up to 60 days, with the customer's Written Statement of Unauthorized Debit

Nacha's rules count return deadlines in banking days from the settlement date, the day the money moves between banks. Weekends and Federal Reserve holidays don't count. Nacha's own rule pages refer to the standard "two-day" return timeframe and give R11 a 60-day timeframe, with the same written-statement requirement as R10.

What that means for you: after about a week, an NSF return is very unlikely. But a consumer can still dispute a payment as unauthorized for about two months. For how this fits with funding, see how long an eCheck takes to clear.

Re-Presenting a Returned or NSF eCheck

Nacha calls sending a returned payment again "reinitiation." The rules, from Nacha's rule pages (in effect since 2015, clarified January 1, 2019):

  • Two retries at most. Nacha says reinitiation "is limited to 2 times."
  • Label it. The retry must say RETRY PYMT in the Company Entry Description, the short description the customer sees on their statement.
  • Keep it identical. Company name, company ID and amount must match the original. Other fields can change only to fix an error or help processing.
  • Only for the right codes. Retries are for "not enough money" returns (R01, R09). Don't retry an unauthorized return (R10) or a revoked authorization (R07). Nacha lets a bank return a payment that breaks the retry rules as R10, which counts toward your unauthorized rate.

Time the retry. A retry the next morning usually bounces again. Many businesses wait for the customer's likely payday, or call first and agree on a date. If you plan to charge a returned-payment fee, put it in your authorization and check your state's limits.

Some gateways retry automatically and some don't. Ask your provider how retries work on your account, and whether the retry carries the RETRY PYMT label.

ACH Return Rate Limits and What Happens If You Go Over

Nacha, the body that writes the ACH rules, sets three return-rate levels for debits. They've been in effect since September 18, 2015, and Nacha's how-to-calculate sheets (updated January 2024) still list them:

RateCodes countedLevel
UnauthorizedR05, R07, R10, R11, R29, R510.5% (a threshold)
AdministrativeR02, R03, R043.0% (starts an inquiry)
OverallAll return codes15.0% (starts an inquiry)

How it's counted. Returned debits divided by debits sent, over the preceding 60 days or two calendar months. It's a count of payments, not dollars. Example: 500 returns on 100,000 debits is 0.5%.

What happens if you go over. Nacha's rules apply to the ODFI, the bank that sends your payments into the ACH network. Your provider works with that bank.

  • Unauthorized over 0.5%: Nacha can ask the bank for information. If the bank agrees the rate is too high, it must give a plan to bring it below 0.5% within 30 days. Cases that aren't answered or fixed can lead to fines against the bank.
  • Administrative or overall over the level: Nacha says this isn't automatically a rules violation. It starts a review of how the business collects payments.

In practice, a bank facing that review often passes it on. Your provider may ask you to change how you collect authorizations, set limits, hold funds or, in serious cases, stop your eCheck processing. Terms differ by provider, so read yours.

Notification of Change (NOC): Update Before the Next Payment

A notification of change (NOC) isn't a return. The payment went through, but the customer's bank is telling you a detail was wrong or has changed, for example a new account number after a bank merger. NOC codes start with C: C01 is a wrong account number and C02 a wrong routing number. Authorize.Net's developer guide says NOC codes let you "learn of changes to a customer's banking information."

Update the saved details before the next charge, especially on recurring billing. Bank guidance commonly cites a Nacha deadline of six banking days after you get the NOC, or before the next payment, whichever is later. Ask your provider how NOCs reach you and whether the gateway updates stored details for you.

Returned eCheck and eCheck Chargeback Fees

Every return costs you something, even when the customer pays later. Authorize.Net's direct pricing, checked October 13, 2026, lists:

  • $3.00 for each returned eCheck transaction
  • $25.00 for each eCheck chargeback

The pricing page doesn't say which returns it counts as a chargeback. In everyday use, an "eCheck chargeback" is an unauthorized return such as R10. These are Authorize.Net's direct prices, not START's. Through a provider, return and chargeback fees vary, so ask for them in writing. For the full fee picture, see eCheck and ACH processing fees.

The hidden cost is bigger: the goods or service you've already delivered, staff time chasing the payment, and a return rate that can put your eCheck setup at risk.

How to Cut Returned eChecks

  1. Validate account numbers. For online (WEB) debits, Nacha has required account validation on first use of an account number since March 19, 2021. Authorize.Net has checked the account number as well as the routing number on WEB payments and the first recurring payment since March 18, 2022. That cuts R03 and R04 returns. It isn't a balance check, so R01s still happen.
  2. Get a clear authorization and keep it. Use the right SEC code and wording for how the customer agreed. Ready-made wording is in our ACH authorization form templates.
  3. Use a name customers recognize. Many R10s come from a customer who doesn't recognize the charge. Make the company name on their statement match your business name.
  4. Remind before recurring debits. A short email a few days before each charge, with the date and amount, cuts both NSF returns and "I forgot" disputes.
  5. Charge on the agreed date and amount. Charging early or the wrong amount is exactly what R11 is for.
  6. Make cancelling easy. A customer who can cancel with you won't need to ask their bank to stop it (R07, R08).
  7. Hold high-value orders. For big tickets, consider waiting until the two-day return window has passed before you ship.

Taking cards too? Card disputes follow different rules; see our card chargeback prevention guide. For the bigger picture on fees, timing and setup, start with our eCheck processing guide.

If returns are already a problem, tell us which codes you're seeing and how customers authorize payments. We'll tell you where to start.

ACH Return Codes FAQ

What is an R01 return code?

R01 means insufficient funds: the customer's account didn't have enough money. Under Nacha's rules you can retry an R01 at most two times, labeled "RETRY PYMT". Many businesses contact the customer and time the retry for payday. See the retry rules.

What does R10 mean on an ACH return?

R10 means the customer told their bank they don't know you or didn't authorize the debit. On a consumer account it can come back up to 60 days after settlement. Don't debit that account again without a new authorization. R10s count toward Nacha's 0.5% unauthorized return limit.

How long can an eCheck be returned?

Most returns, including insufficient funds and closed accounts, must be sent within two banking days of settlement. Unauthorized returns on consumer accounts can come back for up to 60 days. More on timing in how long an eCheck takes to clear.

Is a returned eCheck the same as a chargeback?

Not exactly. Any eCheck the bank sends back is a return. An unauthorized return, like R10, works most like a card chargeback, and some gateways charge more for it. Authorize.Net's direct pricing lists $3 per returned item and $25 per eCheck chargeback.

What is a notification of change (NOC)?

A NOC tells you the payment went through but a customer detail, like the account or routing number, was wrong or has changed. Update the saved details before the next charge, especially for recurring payments.

General payments guidance, not legal advice. Rules and prices as of October 13, 2026. ACH return codes, deadlines, retry rules and return-rate levels come from Nacha's public rule pages; the full Nacha Operating Rules are the final word, and your bank or provider may set stricter terms. Authorize.Net prices are its published direct prices, not START's, and can change.

Seeing returned eChecks?

Tell us which return codes you're getting and how customers authorize payments, and we'll tell you where to start. START has been in payments for 20+ years and has set up more than 60,000 Authorize.Net accounts.

New to this topic? Start with our eCheck Processing overview.

eCheck Payment Guides

Keep reading