# ACH Debit Block vs ACH Debit Filter

- Author: PreciseBankFlow (https://precisebankflow.com)
- Published: 2026-10-17
- Category: Internal controls over cash
- Canonical: https://precisebankflow.com/blog/ach-debit-block

> What an ACH debit block does, how a debit filter differs, which accounts need one and how to authorize the legitimate debits you still want.
An ACH debit block tells your bank to return every ACH debit that tries to pull money from an account, so nobody can take funds using only your routing and account numbers. An ACH debit filter is the softer version: it rejects debits except those from companies you have approved in advance. Most businesses need one or the other.

## What an ACH debit block stops, and what it lets through

An ACH debit block stops electronic debits that a third party originates against your account: a vendor pulling a payment, a utility's autopay, or a fraudster who has copied the numbers from one of your checks. It does not stop deposits, checks you write, card transactions, wires or payments you push out yourself through the bank portal.

That last point surprises people. A block is about who starts the transaction. When your own team creates an ACH payment to a vendor, your bank is sending money on your instruction, so the block does not apply. When someone else's bank asks to take money from you, the block applies and your bank returns the debit as unauthorized.

A full block suits accounts where no outside party should ever pull money. Payroll funding accounts, reserve accounts and accounts that only receive deposits are the usual candidates. Because the block is a setting at the bank, it works even when nobody is watching the account, which is exactly when an unauthorized debit tends to land.

Ask the bank how it reports blocked items. Some banks send an alert or a daily report, and some give you a window to accept a blocked debit before it is returned. Knowing this matters because a blocked debit you actually wanted, such as a tax payment, will not post, and you may not find out until a late notice arrives.

## How is an ACH debit filter different from a full block?

An ACH debit filter is an allow list. The bank returns every incoming ACH debit unless the originating company's ID is on your approved list, sometimes with a maximum amount per debit. It keeps known autopays working while still rejecting anything new.

Each ACH entry carries an identifier for the company that originated it. Your filter list pairs that company ID with rules you choose. Common options include:

- **Company ID only.** Any debit from that originator posts.
- **Company ID plus a maximum amount.** A debit over the limit is returned or held for review.
- **Company ID plus a transaction type.** For example, allowing only corporate-format debits from that originator.

Filters need upkeep. When a vendor changes payment processors, its company ID may change, and the first debit under the new ID will be returned. Treat a returned debit from a known vendor as a prompt to confirm the change with that vendor directly, using contact details you already hold, before you add the new ID.

Some banks combine filtering with a review queue. Instead of returning an unknown debit automatically, they show it in the portal for a person to approve or reject by a cut-off time. That is convenient, but it moves the control from the bank to whoever works the queue. The person approving exceptions should not be the person who records payables, for the same reason that [dual signature on checks](/blog/dual-signature-on-checks) separates the two signers.

## Which business bank accounts need an ACH debit block?

Every business account should have either an ACH debit block or a filter, chosen by what the account is for. Business accounts do not get the consumer protections that apply to personal accounts, so preventing an unauthorized debit matters more than disputing it later.

The federal rule on electronic transfers, Regulation E, defines an account as one [established primarily for personal, family, or household purposes, in the CFPB's text of Regulation E section 1005.2](https://www.consumerfinance.gov/rules-policy/regulations/1005/2/). A business account falls outside that definition, so recovery of an unauthorized debit depends on your deposit agreement and how fast you report it. Read that agreement for the reporting deadline.

The table below is an example of deciding account by account. The accounts and settings are made up.

| Account (example) | What it is for | Debits you expect | Setting |
| --- | --- | --- | --- |
| Operating checking | Bills, vendor payments, autopays | Utilities, card processor fees, loan payment | Filter with those company IDs |
| Payroll account | Funded by transfer, pays staff | Payroll provider debit, tax debits | Filter with the payroll provider and tax agencies |
| Reserve savings | Holds cash, rarely moves | None | Full block |
| Deposit-only account | Receives customer payments | None | Full block |
| Merchant settlement | Receives card batches | Processor fee and chargeback debits | Filter with the processor's ID |

Keep this list next to your record of [authorized signers on each business bank account](/blog/authorized-signers-on-business-bank-account), so one document shows who can move money and what can pull it.

## Authorizing a new ACH debit after the filter is in place

To authorize a new ACH debit, collect the originator's company ID and the expected amount from the payee, then add them to the filter through the bank portal or a signed bank form. Do this before the first debit date, or the debit will be returned.

A short procedure:

1. **Get the details in writing from the payee.** Ask for the company ID they will use, the expected amount or range, and the first debit date.
2. **Confirm the request is real.** Call the payee at a number from your own records, not from the email that asked for the change.
3. **Approve internally.** The person who approves payables, not the clerk who requested it, signs off on adding a new originator.
4. **Update the filter.** Add the company ID with an amount cap if the bank offers one.
5. **Watch the first debit.** Check that it posts at the expected amount, then file the setup record with the account documents.

Review the full filter list once a year and remove vendors you no longer pay. An old authorization is an open door.

## When an ACH debit block causes trouble: returned tax and payroll debits

A blanket ACH debit block can return debits you need, and the most painful are tax payments and payroll funding. If a tax agency or payroll provider pulls money by ACH debit and the account blocks it, the payment fails. The penalty notice that follows costs more than the block saved.

Before switching on a full block, list every recurring debit on the last few statements. Watch for these edge cases:

- **Tax payments made by debit.** If you schedule tax payments that the agency draws from your account, its originator ID must be on the filter.
- **Payroll providers.** Many draw net pay, taxes and fees as separate debits, sometimes under more than one company ID.
- **Loan and lease payments** set up years ago and forgotten.
- **Card processor adjustments** such as chargebacks and fee debits on a merchant account.

A debit block also changes what you see during reconciliation. A returned debit may appear on the statement as a debit and an offsetting return, or not at all, depending on the bank. When a reconciliation shows a vendor marked paid but no matching bank line, a blocked debit is one explanation. Banks and credit unions that reconcile many member accounts face the same pattern at scale, which is covered in [reconciliation software for credit unions](/blog/reconciliation-software-for-credit-unions). For your own accounts, [PreciseBankFlow](/get-started) matches statement lines to the ledger and lists the items that did not clear, so a returned debit shows up as an exception instead of a surprise.