ACH Payments for High-Risk Merchants in the US: Options & Risks

Card Processing Isn’t Your Only Option -But ACH Has Its Own Rules

For high-risk merchants in the United States, the conversation around payment processing almost always defaults to credit cards, the ongoing fight to secure a stable high-risk merchant account, manage chargebacks, and stay below Visa and Mastercard monitoring thresholds.

But there is a second payment rail that many high-risk businesses underutilize, misunderstand, or enter without fully grasping the regulatory framework that governs it: ACH payment processing.

In 2025, the ACH Network processed over 35 billion transactions valued at roughly $93 trillion. It is the backbone of US bank-to-bank payment infrastructure, powering direct deposit, bill payment, B2B transfers, and a growing share of eCommerce and subscription billing. For high-risk merchants, ACH offers lower transaction costs, reduced chargeback exposure on certain dispute types, and a payment channel that card-declined customers can still access.

But ACH is not a chargeback-free zone. It operates under its own compliance framework governed by NACHA (the National Automated Clearing House Association), carries distinct return rate risks, and in 2026, is subject to significantly expanded fraud monitoring obligations. Entering ACH processing without understanding these rules can expose high-risk businesses to penalties, processing suspension, and compliance reviews that are just as damaging as card network monitoring programs.

Why High-Risk Merchants Are Turning to ACH in 2026

Lower Transaction Costs

Credit card processing fees for high-risk merchant accounts typically range from 2.5% to 5%+ per transaction, depending on vertical and processing history. ACH transactions, by contrast, are priced at a flat per-transaction fee, usually between $0.25 and $1.50, regardless of transaction size.

For high-ticket B2B transactions, high-volume subscription billing, or any merchant processing large average order values, this cost differential is substantial. A merchant processing $50,000 in monthly volume through a 3.5% card rate pays $1,750 in processing fees. The same volume via ACH at $0.50/transaction (1,000 transactions) costs $500. That $1,250/month difference compounds materially over a year.

Reduced Card Network Scrutiny

ACH transactions do not flow through Visa or Mastercard’s card network infrastructure. They are processed directly between financial institutions through the NACHA-governed ACH network. This means ACH volume does not contribute to your card network chargeback ratio, the metric that can trigger VDMP, VAMP, ECM, and other card network monitoring programs.

For a high-risk merchant whose card chargeback ratio is approaching a monitoring threshold, routing a portion of suitable transactions through ACH can meaningfully reduce card volume concentration without losing those transactions entirely.

Access to Customers Without Cards

A non-trivial share of consumers in the US, particularly in lower-income demographics and in B2B contexts, either prefer bank-transfer payments or do not have access to credit cards that would otherwise be used for online purchases. ACH expands your addressable payment base beyond card-only processing.

Recurring Billing and Subscription Management

ACH is particularly well-suited to subscription businesses and SaaS platforms with established customer relationships. Unlike card-based subscriptions where cards expire, are replaced, or are lost, bank accounts are more stable billing targets over time. For merchants with subscription models, ACH recurring billing reduces involuntary churn caused by card decline events.

The Risks of ACH Processing for High-Risk Merchants

ACH is not without its own risk profile, and high-risk merchants who approach it without understanding the following dynamics often create new compliance problems while trying to solve existing ones.

NACHA Return Rate Thresholds: The ACH Equivalent of a Chargeback Ratio

Just as Visa and Mastercard monitor card merchants for chargeback ratios, NACHA monitors ACH originators for return rates. Exceeding these thresholds triggers compliance reviews, can result in fines of up to $500,000 per month, and in serious cases leads to suspension from the ACH network.

NACHA enforces three distinct return rate categories:

 

The unauthorized return threshold of 0.5% is the most consequential for high-risk merchants, and the hardest to stay below. Unauthorized returns occur when account holders dispute ACH debits, claiming they did not authorize the transaction. For subscription businesses with unclear billing terms, free-trial-to-paid conversions, or confusing cancellation processes, unauthorized ACH returns can accumulate quickly.

To put this in perspective: the 0.5% unauthorized return threshold means that for every 1,000 ACH debits originated, no more than 5 can be returned as unauthorized before NACHA takes notice. This is an extremely tight threshold for any high-risk payment processing environment.

Return rates are calculated on a rolling 60-day basis, meaning a spike in returns from a promotional campaign or a difficult month can rapidly affect your standing even if prior periods were clean.

Extended Dispute Window: 60 Days for Unauthorized Returns

Unlike credit card chargebacks, where the dispute window is typically 60–120 days from the transaction date, ACH unauthorized debit returns (R05, R07, R10, R11, R29) can be submitted for up to 60 calendar days after the settlement date. This extended window means disputes can arrive long after you believe a transaction is settled and funds are cleared.

For high-risk merchants operating subscription models with monthly billing cycles, this creates overlapping dispute exposure across multiple billing periods simultaneously.

No Real-Time Authorization

Credit card payments generate an authorization response in seconds, the card network confirms the cardholder’s account exists, has available credit, and the transaction is approved before funds are captured. ACH does not work this way.

ACH debits are initiated and submitted to the originating bank without real-time confirmation from the receiving bank. The transaction may be returned days later, for insufficient funds (R01), a closed account (R02), or an account not found (R03). For high-risk merchants with high average transaction values, this delayed rejection creates cash flow uncertainty and can complicate reconciliation and fulfillment workflows.

Fraud Exposure Without Card Network Protections

The card network fraud infrastructure, chargeback alerts, 3DS2 authentication, BIN intelligence, fraud scoring networks, does not apply to ACH transactions. ACH fraud prevention is entirely the merchant’s responsibility, implemented through the originating processor and bank relationship.

For high-risk payment processing environments where fraud is an ongoing operational challenge, entering ACH without a parallel fraud prevention layer creates exposure that card network tools would otherwise help manage.

2026 NACHA Compliance Updates: What High-Risk Merchants Must Know Now

Two significant NACHA rule changes came into effect in 2026 that directly affect high-risk merchants using ACH:

Expanded Fraud Monitoring Requirements (Effective March 20 and June 22, 2026)

NACHA’s 2026 fraud monitoring rules, effective in two phases, transform fraud detection from a narrow requirement covering only WEB debit transactions into a comprehensive, ACH-wide fraud risk management obligation.

Phase 1 (March 20, 2026): Applies to large originators with 6 million or more ACH originations in 2023, plus Third-Party Service Providers (TPSPs) and Third-Party Senders (TPSs). These parties must implement documented, reviewable fraud detection processes, not just a vague “commercially reasonable” system as required previously.

Phase 2 (June 22, 2026): Extends enhanced fraud monitoring requirements more broadly and introduces ACH credit monitoring controls for large Receiving Depository Financial Institutions (RDFIs), specifically targeting credit-push fraud, one of the fastest-growing ACH fraud vectors in 2025–2026.

For high-risk merchants originating ACH through a third-party processor, these rules place compliance obligations on your ODFI (Originating Depository Financial Institution) and payment processor, but the operational practices that drive your return rates remain your responsibility.

What this means practically:

• Your processor will apply stricter scrutiny to your ACH origination practices
• Account validation before first debit is increasingly non-negotiable
• Authorization documentation must be thorough and retained for a minimum of two years after the customer’s final payment
• Unauthorized return rates above 0.5% will trigger faster compliance action in the 2026 environment than in prior years

Company Entry Description Clarity (Effective March 20, 2026)

NACHA’s 2026 rules also require ACH Company Entry Descriptions, the text that appears on a customer’s bank statement identifying the debit, to be clear, accurate, and non-misleading. For subscription merchants and SaaS businesses, this is essentially the ACH equivalent of the billing descriptor clarity requirement on card processing.

Vague or generic entry descriptions are a primary driver of unauthorized return codes, customers don’t recognize the debit, contact their bank, and file an unauthorized return. Ensuring your ACH entry description clearly identifies your brand and the nature of the charge is both a NACHA compliance requirement and a return rate management strategy.

ACH Payment Options Available to High-Risk Merchants in 2026

Not all ACH processors will work with high-risk merchants, the same gatekeeping dynamic that exists in card processing applies here. However, several of the specialized high-risk merchant account providers in the US explicitly include ACH as part of their payment offering:

Corepay: Offers ACH processing through its NetValve gateway with integrated return code monitoring, automated alerts, and reporting tools specifically designed for high-risk ACH originators. Covers both one-time and recurring ACH debits, with explicit compliance support for NACHA return rate management.

PaymentCloud: One of the most accessible processors for high-risk merchants, PaymentCloud supports ACH and eCheck processing alongside card processing. Particularly strong for eCommerce and subscription businesses that need a unified payment processing relationship covering multiple payment rails.

SecureGlobalPay: Offers ACH and eCheck processing as part of its multi-channel payment solution for domestic and international high-risk merchants. Supports ACH alongside card, MOTO, and digital wallet payments under one processing relationship.

SoarPay: Includes ACH processing for eligible high-risk merchants, with gateway integrations (including NMI) that support ACH alongside standard card processing flows. Particularly relevant for subscription eCommerce and B2B-heavy verticals.

SMB Global: Offers eCheck and ACH as part of its global payment solution, coordinating with multiple financial institutions to support high-risk merchants with international customer bases alongside US ACH processing.

ECS Payments: A specialist in ACH and eCheck processing for high-risk merchants, ECS explicitly markets its ACH solutions as complementary to card processing for businesses that need multi-rail payment redundancy.

How to Manage ACH Return Rates Effectively

Staying below NACHA’s 0.5% unauthorized return threshold requires operational discipline parallel to card chargeback management:

Validate bank accounts before the first debit: NACHA requires account verification for online ACH payments. Use account validation tools, micro-deposits, or instant bank verification (IBV) services to confirm account validity before initiating any ACH debit. This eliminates administrative returns (R02, R03, R04) caused by invalid account data.

Obtain documented, explicit authorization for every debit: Every ACH debit requires proper written, verbal, or electronic authorization from the account holder. For subscription models, authorization must clearly specify the amount, frequency, and purpose of recurring charges. Retain authorization records for a minimum of two years after the final payment.

Use clear, recognizable Company Entry Descriptions: Your ACH entry description is what customers see on their bank statement. Make it match your brand name clearly. Unrecognized entries generate unauthorized return codes, the most costly category under NACHA’s threshold framework.

Align debit timing with customer cash flow: Insufficient fund returns (R01) are reduced when debit timing aligns with predictable customer cash flow events, such as debiting on or shortly after typical payroll deposit dates. This is particularly relevant for B2C subscription businesses.

Monitor return rates weekly: NACHA return rate calculations use a rolling 60-day window. Weekly monitoring allows you to identify emerging return rate trends and take corrective action before you breach a threshold, the same discipline that effective chargeback ratio management requires on the card side.

ACH as Part of a Multi-Rail Payment Strategy

The most resilient high-risk payment processing architecture in 2026 is not card-only or ACH-only, it is multi-rail. Adding ACH as a payment channel alongside card processing provides:

• Cost reduction on high-value and B2B transactions where card fees are disproportionate
• Revenue recovery from card-declined customers who have valid bank accounts
• Processing redundancy – if a card processor relationship is disrupted, ACH continuity protects cash flow
• Chargeback ratio insulation – ACH volume is independent of card network chargeback calculations

For fintech platforms, SaaS businesses, and eCommerce operators across the USA building durable payment infrastructure, ACH integration is increasingly a strategic necessity rather than an optional add-on.

The key is entering ACH processing with eyes open: understanding NACHA’s return rate thresholds, implementing proper account validation and authorization practices, and choosing a processor with genuine high-risk ACH underwriting experience, not just a checkbox on a feature list.

 

ACH payments high-risk merchantsACH vs credit cardeCheck processinghigh risk merchant accounthigh-risk ACH processorhigh-risk paymentmerchant account providerPaymentCloud ACH