ACH payments are generally safe when you send money to people and businesses you trust, but the safety depends on who you're sending it to and what happens after the money leaves your account
An ACH transfer moves money directly from one bank account to another through the banking system. The process itself is find — your bank and the receiving bank use encryption and verification steps to make sure the money goes to the right place. However, ACH transfers are not reversible in the way a credit card charge is. Once the money reaches the other account, getting it back is difficult and sometimes impossible.
The real risk is not that hackers will intercept your transfer in transit. The real risk is that you send money to someone who takes it and disappears, or that a scammer tricks you into sending money to a fake account. Unlike a credit card, where you can dispute a charge and the card company investigates, an ACH transfer puts the burden on you to prove the transfer was fraudulent — and even then, recovery is not may provide.
Key Takeaways
- ACH transfers between your own accounts at different banks are very safe because you control both accounts.
- Sending ACH money to someone else carries risk if that person is dishonest or if a scammer tricks you into sending it to the wrong account.
- Once an ACH transfer completes, reversing it is much harder than reversing a credit card charge, so verify the receiving account details before you send.
- Your bank can investigate a fraudulent transfer, but recovery depends on whether the receiving bank can freeze the account in time.
- Scammers often use ACH transfers because they are hard to reverse, so be cautious if someone you do not know asks you to send money this way.
How the ACH system protects your money in transit
The ACH network itself uses security measures to verify that transfers go to the correct accounts. Your bank checks the routing number and account number you provide, and the receiving bank confirms the account exists before accepting the deposit. Both banks use encryption to protect the information as it moves through the system.
This means that if you send an ACH transfer to a legitimate business or person, and you have the correct account details, the money will reach that account safely. The banking system will not accidentally send your money to the wrong place or let a stranger intercept it mid-transfer.
However, this security does not protect you if you type the wrong account number, or if someone tricks you into sending money to an account they control. The system verifies that the account exists and is real — it does not verify that you meant to send money to that particular person.
Why ACH transfers are hard to reverse
A credit card charge can be disputed within a set window, and the card company will investigate and often refund you while the investigation happens. An ACH transfer works differently. Once the money arrives in the receiving account, it belongs to that account holder. Your bank cannot straightforward take it back.
If you discover the transfer was fraudulent or sent by mistake, your bank can file a claim with the receiving bank and ask them to reverse it. The receiving bank then has a limited time — usually 10 business days — to investigate and return the money if they find the transfer was unauthorized. If the receiving bank does not respond, or if the money has already been withdrawn, recovery becomes much harder.
This is why ACH transfers are popular with scammers. They know that once you send the money, you cannot straightforward call your bank and cancel the charge the way you would with a credit card.
When ACH transfers between your own accounts are safest
If you are transferring money between two accounts you own at different banks, ACH transfers are very safe. You control both accounts, so there is no risk that someone else will take the money. The transfer is straightforward moving your own funds from one place to another.
This is a common reason people use ACH transfers — to move money from a savings account at one bank to a checking account at another, or to consolidate accounts. In this scenario, the only risk is if your bank account itself is compromised, which is a separate security issue.
Red flags that suggest an ACH transfer request might be a scam
Be cautious if someone asks you to send an ACH transfer in these situations: they claim to be from a government agency but ask you to send money to a personal account; they say you have won a prize but need to send a fee first; they offer a job but ask you to send money upfront for training or equipment; or they claim to be a family member in an emergency and need money wired when ready.
Legitimate businesses and government agencies rarely ask for ACH transfers to personal accounts. They usually accept credit cards, checks, or direct payment through their official website. If someone is pressuring you to send money quickly without time to verify their identity, that is a strong warning sign.
Before you send an ACH transfer to anyone, contact them through a phone number or website you find independently — not a number they gave you. Confirm that they actually requested the transfer and that the account details are correct.
What to do if you sent money to the wrong account or to a scammer
Contact your bank when ready. Tell them the transfer was unauthorized or sent by mistake, and provide the date, amount, and receiving account details. Your bank will file a claim with the receiving bank and document your report.
The receiving bank has a limited window to investigate and freeze the account if the money has not been withdrawn. If the account is frozen before the money moves, recovery is more likely. If the money has already been transferred out or withdrawn as cash, recovery becomes much harder.
Keep records of everything: the transfer confirmation from your bank, any communication with the person who received the money, and the police report if you believe you were scammed. Your bank will need this information to support the claim.
How to protect yourself when sending ACH transfers
Verify the account details before you send. Ask the person or business for their routing number and account number in writing, and confirm it matches what they told you verbally. Many scams happen because someone types a number wrong or a scammer gives them a fake account number.
For large transfers, send a small test amount first. Transfer $1 or $5 to confirm the account is real and belongs to the person you think it does. Once the test transfer clears, you can send the full amount with more confidence.
Use ACH transfers only with people and businesses you know and trust. If you are buying something from a stranger online, use a credit card or a payment service like PayPal or Venmo instead. These services offer more protection if something goes wrong.
Never send an ACH transfer based on a phone call, email, or text message alone. If someone claims to be from your bank, hang up and call your bank directly using the number on your card or statement. If someone claims to be a family member in an emergency, call them back at a number you know is correct.
Frequently Asked Questions
Can my bank reverse an ACH transfer if I sent it by mistake?
Your bank can file a claim with the receiving bank, but reversal is not may provide. If the receiving bank investigates and confirms the transfer was sent by mistake, they may return the money. If the money has already been withdrawn, recovery is unlikely. Contact your bank when ready if you make a mistake.
What is the difference between ACH and wire transfers in terms of safety?
ACH transfers are slower but reversible within a limited window. Wire transfers are faster but almost impossible to reverse once sent. For safety, ACH is generally better because you have more time to catch a mistake or fraud before the money is gone for good.
If someone hacks my bank account and sends ACH transfers without my permission, am I responsible?
No. If your bank account is compromised and someone sends unauthorized transfers, your bank is responsible for investigating and refunding you under federal law. Report the fraud to your bank when ready and document everything.
Is it safe to give someone my routing number and account number for an ACH transfer?
Your routing number and account number are not secret — they appear on every check you write. However, only give them to people and businesses you trust. Someone with this information can send money to your account, but they cannot withdraw money from it without additional authorization.
Do I need to worry about identity theft if I send an ACH transfer?
Sending an ACH transfer does not put your identity at risk. You are not sharing personal information beyond the account details. The risk is only that you send money to someone dishonest or that a scammer tricks you into sending it to the wrong account.