What PayPal can and cannot do with your bank account

PayPal cannot take money from your bank account without your permission — but the permission you gave them might be broader than you remember. When you link a bank account to PayPal, you authorize them to pull funds for specific purposes: sending money, paying for purchases, or covering fees. If your account goes negative or you owe PayPal money, they can use that authorization to recover it. The catch is that you may have agreed to this in the terms you clicked through, even if you do not recall doing so.

The real problem is not that PayPal acts without authority — it is that the authority you granted can be used in ways that feel unexpected. A chargeback from a buyer, a refund you issued, a dispute you lost, or even a reserve hold on your account can all trigger a withdrawal. PayPal will pull from your linked bank account before they touch your PayPal balance, and they do this automatically under the terms of service.

If money left your account and you did not authorize that specific transaction, you have a dispute path. But you will need to prove either that you never linked the account, that the withdrawal was fraudulent, or that PayPal exceeded the scope of the authorization you gave them.

Key Takeaways

  • Linking a bank account to PayPal gives them standing authorization to withdraw funds for payments, refunds, chargebacks, and fees — not just for transactions you initiate.
  • PayPal will pull from your linked bank account before using your PayPal balance, which can overdraft your account if the balance is low.
  • Disputes with PayPal over unauthorized withdrawals must be filed with your bank, not with PayPal, because the withdrawal itself was technically authorized.
  • You can unlink your bank account at any time, but PayPal retains the right to collect money you already owe them through other means.
  • If your account was compromised or someone else linked the account without your knowledge, contact your bank when ready — that is a different legal path than a PayPal dispute.

How PayPal's authorization to withdraw works

When you link a bank account to PayPal, you are signing what the banking system calls an ACH authorization. ACH stands for Automated Clearing House, and it is the network that moves money between banks. Your authorization tells your bank: "PayPal can initiate transfers from this account for the purposes I have agreed to."

PayPal's terms of service spell out those purposes. They include sending money to other people, paying for goods and services, covering refunds you issue as a seller, paying fees PayPal charges you, and recovering money if you owe PayPal a balance. That last one is the surprise for most people. If your PayPal account goes negative — because a buyer won a dispute, a chargeback was filed against you, or you issued a refund — PayPal can pull from your bank account to bring the balance back to zero.

The authorization does not expire after one transaction. It stays active until you remove the bank account from your PayPal profile. Even then, PayPal can still attempt to collect money you already owe them, though they would need to use a different method — like a collection agency or small claims court.

When PayPal actually withdraws from your bank account

PayPal does not pull money every time you use the service. They pull from your bank account in these specific situations: when you send money and your PayPal balance is too low to cover it; when a buyer files a dispute or chargeback and wins; when you issue a refund as a seller; when PayPal charges you a fee and your balance cannot cover it; or when your account carries a negative balance for any reason.

The order matters. PayPal uses your PayPal balance first. Only when that runs out do they go to your linked bank account. This means if you keep a low balance in PayPal and use your bank account as the backup, you will see frequent withdrawals. If you keep PayPal funded, you may never see a direct bank withdrawal.

One scenario catches people off guard: a buyer disputes a transaction months after it happened. PayPal investigates, sides with the buyer, and reverses the payment. If your PayPal balance is now negative, they pull from your bank account when ready. You may not realize the dispute was filed until you see the withdrawal on your bank statement.

What counts as unauthorized and what does not

A withdrawal is authorized if you linked the account yourself and PayPal used it for one of the purposes in their terms. Even if you forgot you linked it, even if you did not read the terms, even if the withdrawal surprised you — it was technically authorized. Your bank will not reverse it just because you did not expect it.

A withdrawal is unauthorized if someone else linked your bank account without your knowledge, if your account was hacked and used to send money, or if PayPal withdrew money for a purpose outside their stated authorization (which is rare). In those cases, you have a claim against your bank under the Electronic Funds Transfer Act, and your bank can reverse the withdrawal and investigate.

The middle ground — where you linked the account but feel PayPal misused it — is harder to win. You would need to show that PayPal's withdrawal fell outside the scope of the authorization you gave. For example, if PayPal withdrew money for a purpose you never agreed to, or if they withdrew more than the amount you owed. These disputes exist but are uncommon because PayPal's terms are broad.

How to dispute a withdrawal with your bank

If you believe a PayPal withdrawal was unauthorized, contact your bank first, not PayPal. Your bank has the legal obligation to investigate claims of unauthorized ACH transfers. You will file what is called a dispute claim or unauthorized transfer claim. The bank will ask you to describe what happened and provide any evidence you have.

Your bank has up to 10 business days to investigate and tell you the result. If they find the transfer was unauthorized, they will reverse it and credit your account. If they find it was authorized — because you linked the account and PayPal acted within their terms — they will deny the claim. You can appeal, but the bar is high.

Do not rely on PayPal to reverse the withdrawal. PayPal will tell you that you authorized the transfer when you linked your account, and they will point to their terms of service. Your bank is the only entity with the power to reverse an ACH transfer, and only if they determine it was truly unauthorized.

Removing your bank account and stopping future withdrawals

You can unlink your bank account from PayPal at any time through your account settings. Go to Wallet, then Linked Banks and Cards, select the account, and choose Remove. Once removed, PayPal cannot initiate new withdrawals from that account.

However, unlinking does not erase the authorization. If you owe PayPal money, they can still attempt to collect it. They may pursue a collection agency, file in small claims court, or contact you directly. Unlinking just stops the automatic pulls.

If you want to prevent PayPal from ever pulling from your bank account again, you can also contact your bank and revoke the ACH authorization directly. Ask your bank's customer service for help revoking the PayPal authorization. This is more permanent than unlinking through PayPal, because it cuts off PayPal's ability to initiate transfers even if they try.

What to do if your account was compromised

If you did not link your bank account to PayPal, or if someone else did it without your knowledge, this is fraud. Contact your bank when ready and report the unauthorized ACH authorization. Your bank can revoke it and investigate the transfers. At the same time, find your PayPal account: change your password, enable two-factor authentication, and check for any linked devices or apps you do not recognize.

Report the fraud to PayPal as well, though your bank is your stronger avenue for recovery. PayPal will lock the account and investigate, but they move slowly. Your bank can reverse transfers faster and has more legal leverage.

If you see withdrawals you did not authorize and you are certain your account was not compromised, ask your bank to show you the ACH authorization on file. Sometimes a family member or someone with access to your account linked it without telling you. The authorization will have a signature or electronic consent record that may help you figure out what happened.

Frequently Asked Questions

Can PayPal overdraft my bank account?

Yes. If your PayPal balance is zero and you owe money, PayPal will pull from your linked bank account even if it means overdrafting you. Your bank may then charge you an overdraft fee on top of the withdrawal. You can prevent this by unlinking your bank account or by keeping a positive PayPal balance.

What if I dispute a PayPal transaction — can they still withdraw from my bank account?

Yes. While a dispute is pending, PayPal can still pull from your bank account if your balance goes negative for any reason. If you win the dispute, PayPal will credit your account. If you lose, they will keep the money and may pull more if you owe them additional amounts.

How long does PayPal keep the authorization after I unlink my account?

Unlinking removes the active authorization when ready, so PayPal cannot initiate new transfers. However, the authorization record stays on file with your bank for a period of time. If you want it completely gone, contact your bank and ask them to revoke the PayPal ACH authorization directly.

Can I get my money back if PayPal withdrew it for a fee I did not agree to?

Probably not, because PayPal's terms state they can charge fees and withdraw to cover them. You would need to show that the fee itself was improper — for example, that PayPal charged you twice for the same service. A single unexpected fee is almost never grounds for reversal, even if you did not read the fee schedule.

What if PayPal withdrew money but I never received the money they were collecting for?

Contact PayPal first to confirm the withdrawal was legitimate and ask for an explanation. If PayPal cannot explain it or admits it was an error, ask them to reverse it. If they refuse, file a dispute with your bank and explain that the withdrawal does not match any transaction you authorized. Your bank will investigate.