What companies can actually withdraw from your account
A company can only take money from your bank account if you have given them explicit permission to do so. That permission usually comes in one of three forms: a signed agreement, a verbal authorization you confirmed in writing, or a court order. Without one of these, any withdrawal is unauthorized and you have grounds to dispute it.
The most common legitimate withdrawals happen through ACH debits (Automated Clearing House transfers), which move money directly from your account to a company's account. These require your written consent, usually buried in a contract or terms of service you signed. Subscription services, insurance companies, utilities, and loan servicers all use ACH debits. A second method is check authorization, where you write a check or authorize a one-time payment by phone or online. A third is a court judgment, where a creditor has sued you, won, and obtained a wage garnishment or bank levy.
The key word is written. A company cannot legally take money based on a verbal promise or a vague checkbox you clicked without reading. Your bank is responsible for verifying that the company had authorization before processing the withdrawal. If they process an unauthorized debit, you have the right to dispute it.
Key Takeaways
- A company needs your written permission before withdrawing money from your account, whether through a signed contract, online authorization, or a court order.
- ACH debits are the most common method and require explicit consent, which you can revoke at any time by contacting your bank or the company.
- If a company withdraws money without authorization, you can dispute the transaction with your bank within 60 days and usually recover the funds.
- Scammers often pose as legitimate companies to trick you into authorizing payments; verify the company's real phone number before confirming any withdrawal.
- A court judgment is the only circumstance where a company can take money without your consent, but they must follow specific legal procedures first.
How to stop a company from withdrawing money
If a company is withdrawing money from your account and you want it to stop, your first step depends on whether the withdrawal is authorized or not. If you did sign up for the service but want to cancel, contact the company directly and ask them to stop the ACH debit. Most companies will do this when ready, though some require written notice. Keep a record of your cancellation request—email confirmation is ideal.
If the company does not stop after you cancel, contact your bank. Tell them you have revoked authorization and ask them to block future debits from that company. Your bank can place a stop payment order on the account, which prevents that specific company from withdrawing money. This usually costs $25 to $35 and lasts for six months; you can renew it if needed.
If you never authorized the withdrawal in the first place, do not contact the company first. Instead, go directly to your bank and file a dispute for an unauthorized transaction. Your bank will investigate and, if they find the withdrawal was not authorized, they must return the money within 10 business days (or up to 45 days in some cases). The company will have a chance to prove they had your permission, but if they cannot, the money stays with you.
Disputing unauthorized withdrawals with your bank
When you discover a withdrawal you did not authorize, call your bank when ready. Do not wait. Your bank has specific timelines for investigating disputes, and the sooner you report it, the faster they can act. Most banks allow you to file a dispute by phone, but follow up with a written statement within a few days—send it by email or through your online banking portal.
In your dispute, be specific: the date of the withdrawal, the amount, the company name, and a clear statement that you did not authorize it. If you have any evidence—a cancellation email, a screenshot of your account, a record that you never signed a contract—include it. Your bank will assign the dispute a reference number; keep this number and use it in all future communication.
The bank will contact the company and ask them to prove they had authorization. The company will usually submit a copy of the agreement or authorization form they claim you signed. If you genuinely did not sign it, tell your bank that when ready. If the company cannot produce proof of authorization, your bank must refund the money. This process typically takes 10 to 45 days depending on your bank and the complexity of the case.
When a court order allows a company to take money
If a company has sued you and won a judgment, they can take money from your bank account without your permission. This happens through a bank levy, a legal process where the court orders your bank to freeze and transfer funds to the creditor. Before this can happen, the company must have filed a lawsuit, obtained a judgment, and then filed a separate request for the levy with the court.
You will usually receive notice before a levy happens, though the timing varies by state. Some states require the company to notify you 10 days in advance; others allow the levy to happen first and notify you after. If you receive notice of a pending levy, you have the right to object in court, usually by filing a claim of exemption. Certain funds are protected from levy—Social Security, unemployment benefits, and some disability payments cannot be taken, even with a judgment.
If your bank account has been levied, contact the court when ready and ask about exemptions that might explore to you. You may also be able to negotiate a payment plan with the creditor to stop the levy. A lawyer can help you file an exemption claim, though many courts have forms you can file yourself for free.
Recognizing scams that trick you into authorizing withdrawals
Scammers often pose as legitimate companies—utilities, banks, government agencies, subscription services—to trick you into authorizing a withdrawal. They might call you, email you, or text you claiming there is a problem with your account or a payment due. They create urgency and pressure you to "verify" your information or "confirm" a payment right away.
Here is what to watch for: a real company will never ask you to authorize a payment through a link in an email or text, and they will never ask for your full account number or PIN over the phone. If you receive a call claiming to be from your bank, hang up and call your bank's official number from the back of your card. If you receive an email from a company you do business with, go directly to their website instead of clicking any link in the email.
If you accidentally authorized a payment to a scammer, report it to your bank when ready as an unauthorized transaction. You also have the right to revoke the authorization. Your bank should be able to block the company from future withdrawals and may be able to recover the money if the scammer has not already moved it.
Your rights when a company overcharges or charges twice
If a company charged you twice for the same thing, or charged you more than you authorized, you have the right to dispute that charge. This is different from an unauthorized transaction—you did authorize the company to charge you, but they charged the wrong amount or charged you multiple times.
Contact the company first and ask for a refund. Explain what happened and provide your transaction details. Most companies will refund overcharges when ready once they see the mistake. If the company refuses or does not respond within a few days, file a dispute with your bank. Your bank will investigate and determine whether the charge was correct according to the authorization you gave.
Keep records of all communication with the company—emails, chat transcripts, confirmation numbers. If the company claims you authorized the extra charge and you have proof you did not, your bank will side with you. The dispute process is the same as for unauthorized transactions: your bank investigates, the company responds, and if they cannot justify the charge, you get your money back.
Frequently Asked Questions
Can a company charge my bank account without a signed contract?
No. A company needs your written authorization, which can be a signed contract, an online agreement you checked a box to accept, or a recorded phone call where you explicitly authorized the charge. An email or text alone is not enough. If you did not give clear written permission, the charge is unauthorized and you can dispute it.
How long do I have to dispute an unauthorized charge?
Federal law gives you 60 days from the date the charge appeared on your statement to report it to your bank. Some banks allow longer, but 60 days is the legal minimum. The sooner you report it, the faster your bank can investigate and return your money.
What if my bank refuses to refund an unauthorized charge?
Ask your bank in writing why they denied your dispute and request the documentation they received from the company. If you believe the bank made a mistake, you can file a complaint with the Consumer Financial Protection Bureau (CFPB) or your state's banking regulator. You can also consult a lawyer, though most unauthorized charge disputes are resolved without one.
Can a company take money from my account if I owe them money?
Not unless they have a court judgment. If you owe a debt, the company must sue you first, win the case, and then obtain a bank levy order from the court. They cannot straightforward take money because you owe them. If a company claims they can, they are either lying or they have already won a lawsuit against you.
What should I do if I think a company is using my account information fraudulently?
Contact your bank when ready and report the fraudulent activity. Ask your bank to freeze your account and issue you a new debit card. File a dispute for any unauthorized charges. You should also check your credit report for fraudulent accounts opened in your name and file a report with the Federal Trade Commission (FTC) at IdentityTheft.gov.