Autopay means the customer authorizes you once to charge their saved card or bank account on a schedule. For cards saved for later charges, Stripe says your terms must cover the agreement to charge, the timing and frequency, and how the amount is set. For recurring debits from a consumer's bank account, Regulation E requires an authorization signed or similarly authenticated by the consumer, with a copy given to them. A debit that differs from the authorized amount needs written notice at least 10 days before. Stripe also asks for 7 days' notice before changing the timing of recurring ACH debits.
What is autopay?
Autopay is a standing agreement that lets a business charge a customer's saved card or bank account on set dates, without the customer paying each time. On a payment plan, the customer agrees once at signup and each installment is charged on its date.
What must the customer agree to for a card on file?
Stripe says you must collect explicit consent before saving a payment method to charge when the customer isn't present, and use it only for what your terms describe. To charge a saved card later, your terms need to include:
- The customer's agreement to you starting a payment or a series of payments for specified transactions.
- The timing and frequency, for example scheduled installments.
- How you set the amount.
- Your cancellation policy, if it's a subscription.
What must the customer agree to for bank (ACH) autopay?
Two layers apply.
Regulation E. Preauthorized electronic fund transfers from a consumer's account "may be authorized only by a writing signed or similarly authenticated by the consumer," and the person who obtains the authorization must give the consumer a copy (12 CFR 1005.10(b)). The official interpretation allows electronic signatures that comply with the E-Sign Act.
The ACH mandate. Stripe requires a mandate before debiting a US bank account. It records the business name, whether the authorization is one-time or recurring, and the date and method of acceptance. Stripe says Nacha rules require giving each customer a copy, and Stripe emails it by default.
What notice do you owe before changing a debit?
| Change | Notice | Source |
|---|---|---|
| A debit amount differs from the last one or from the authorized amount | Written notice of the amount and date at least 10 days before | Reg E, 1005.10(d) |
| The timing of recurring ACH debits changes | At least 7 calendar days | Stripe's mandate guidance |
Under Reg E, you must tell the consumer they have the right to notice of every varying transfer. You may offer them the option of notice only when a debit falls outside an agreed range, or differs from the last one by more than an agreed amount.
Example: a $13,300 balance split into 12 payments is eleven of $1,108.33 and a final $1,108.37 that absorbs the rounding. Stating every amount and date in the authorization gives the customer those figures before the first debit.
Can the customer stop autopay?
Yes. Under Reg E, a consumer can stop a preauthorized debit by telling their bank at least three business days before the scheduled date (1005.10(c)). Stripe says customers can also revoke an ACH mandate by contacting you directly. A debit after the mandate is canceled will fail. A consumer can also dispute an ACH debit with their bank for up to 60 calendar days.
- CFPB: Regulation E, 12 CFR 1005.10 Preauthorized transfers
- Stripe: ACH Direct Debit
- Stripe: Save a customer's payment method without making a payment
Every figure on this page was checked against these sources on Oct 6, 2026. General information, not legal or tax advice.