Card-on-File vs Direct Debit for Recurring Bills

For most recurring household bills, bank-account autopay is the cheaper default and a credit card on file is the more forgiving one. An ACH debit (what the UK calls a direct debit) usually avoids card fees and can qualify for autopay discounts, but it draws straight from checking and can overdraw it. A credit card adds a written billing-error process and a buffer against a short balance, at the cost of possible surcharges and interest if the balance is not paid in full.

Key takeaways

To stop a preauthorized bank debit under federal Regulation E, tell the bank at least three business days before the scheduled date; the bank may require written confirmation within 14 days of an oral request.
Errors on a bank debit must reach the bank within 60 days after it sends the statement showing them; a credit card billing-error notice must be written and reach the card issuer within 60 days after the first statement showing the error.
Visa's 2023 merchant guidance caps credit card surcharges at 3% and at the merchant's cost of acceptance, and bars surcharges on debit and prepaid cards; some states ban or limit surcharges outright.
Apart from narrow exceptions such as overdraft credit lines, a lender cannot make automatic repayment a condition of a loan, but it may offer a lower rate for autopay as long as a non-autopay option exists.
A replacement card does not reliably cut off a biller: Visa and Mastercard updater services can pass the new number and expiry date to participating merchants.

What each method means in the US

""Direct debit"" is mainly a UK term. In the US the same arrangement is called bank-account autopay, an ACH debit (after the Automated Clearing House network that moves it) or, on older forms, a bank draft. The biller holds an authorization to pull money from a checking or savings account on a schedule. Regulation E calls this a preauthorized electronic fund transfer: one authorized in advance to recur at substantially regular intervals.

Card-on-file means the biller stores a card number and charges it each cycle. Which card matters more than most comparisons admit:

Credit card on file: the bill becomes card debt, covered by Regulation Z (the Truth in Lending rules for credit).
Debit card on file: it runs on card-network rails, but the money leaves checking immediately, so Regulation E applies, as it does to ACH debits. The overdraft and error rules are the bank-account ones, not the credit card ones.

A third route, the bank's own bill-pay service, is different again: the bank sends the payment on the account holder's instruction, so no biller holds standing permission to pull funds.

The federal rules in this guide are consumer rules. Regulation E covers accounts established primarily for personal, family or household purposes, and Regulation Z exempts credit extended primarily for business purposes, apart from its card-issuance and unauthorized-use rules. A small office paying bills from a business checking account or a business card therefore relies mostly on its account agreements for stop-payment and dispute terms.

Authorizing and stopping a pull

Bank debits: written authorization and a stop-payment right

Under Regulation E section 1005.10, preauthorized debits from a consumer's account may be authorized only by a writing signed or similarly authenticated by the consumer, and whoever obtains the authorization must provide a copy. That copy is worth filing: it records what was agreed and who is allowed to pull.

The same section gives two ways to stop the pull through the bank:

Stop-payment order. Notify the bank orally or in writing at least three business days before the scheduled debit. The bank may require written confirmation within 14 days of an oral order, but only if it says so at the time and gives an address; an oral order then lapses after 14 days without that confirmation. If the biller resubmits the debit, the bank must keep honoring the order.
Revocation of authorization. Once the bank is told the authorization is no longer valid, the official commentary says it must block all future payments for that debit from that biller and may not wait for the biller to stop. The bank may ask for confirmation that the biller was told, such as a copy of the revocation letter.

The CFPB's guidance on stopping automatic payments from a bank account recommends contacting the company and the bank, both with written follow-up, and notes that banks generally charge fees for stop-payment orders. A business day is any day the bank's offices are open to the public, so weekends and holidays usually do not count.

Illustrative example (dates only): an insurance premium is scheduled to debit on Monday, November 2, 2026. Counting back three business days at a bank open Monday to Friday gives Wednesday, October 28. If the order is made by phone on Tuesday, October 27, for a one-day margin, and the bank requires written confirmation, it must arrive by Tuesday, November 10, 14 days later.

Cards: the stop runs through the biller

Regulation Z has no stop-payment order for credit cards. Ending a card-on-file charge normally means cancelling the authorization with the biller and keeping the confirmation; if charges continue, the remedy is a billing-error dispute (next section). Some issuers let cardholders block a merchant, but that is a feature of the account, not a federal right.

When a card is replaced or expires

Cancelling or replacing a card is not a reliable way to stop a biller. Visa Account Updater, which a credit union describes as automatic for Visa debit and credit cardholders, passes a new number or expiry date to participating merchants the cardholder has authorized for recurring charges. Mastercard's Automatic Billing Updater works similarly; one issuer's explanation notes that not all merchants participate and that the cardholder still bears primary responsibility for updating billers. Some issuers allow an opt-out.

The flip side: a biller outside these programs will see a declined charge after a card expires, and the bill becomes late. Bank-account debits do not have an expiry date, but they break when an account is closed or the routing details change.

Disputes and error deadlines

When an autopay goes wrong (a wrong amount, a duplicate pull, a charge after cancellation), the deadlines and the treatment of the disputed money differ by payment type.

Point	ACH debit or debit card (Regulation E)	Credit card (Regulation Z)
Deadline	Notice received no later than 60 days after the bank sends the statement where the error first appears	Written notice received no later than 60 days after the issuer transmitted the first statement showing the error
Where to send it	The bank; the notice must identify name, account number and why there is an error	The billing-error address disclosed by the issuer, not the general payment address
Covered problems	Unauthorized or incorrect transfers, omissions, bank bookkeeping errors	Unauthorized charges, goods or services not accepted, payments not credited, accounting errors and more
Timeline	Decision within 10 business days, or up to 45 days if the bank provisionally credits the amount within 10 business days (20 business days and 90 days in some cases)	Acknowledgment within 30 days; resolution within two complete billing cycles and no later than 90 days
The disputed money meanwhile	Already gone from checking unless and until provisionally credited	Disputed amount need not be paid and the issuer may not try to collect it while the dispute is open

The bank-side rules are in Regulation E section 1005.11. A bank may require written confirmation within 10 business days of a phone notice, and if it asks and the confirmation does not arrive, it need not provisionally credit the account during a longer investigation. The 20-business-day window applies to transfers within 30 days after an account's first deposit; the 90-day window applies to those, to point-of-sale debit card transactions and to transfers not initiated within a state, such as ones started abroad. The card-side rules are in Regulation Z section 1026.13. The CFPB's page on disputing a credit card charge adds that a phone call alone does not protect these rights; the written notice does.

The practical difference is cash flow. A wrong rent pull from checking can leave the account short for days while the bank investigates; the same error on a credit card sits on a statement the cardholder does not have to pay in that amount while the dispute runs.

Fees, surcharges and discounts

Card surcharges and convenience fees

A surcharge is an extra charge for paying by credit card. Visa's 2023 merchant surcharging guidance limits it to the merchant's cost of accepting the card and never more than 3%, requires disclosure at the point of entry and on the receipt, and states that debit and prepaid cards cannot be surcharged in the US. Other card networks set their own caps. A convenience fee, often a flat amount charged for paying online or by phone, is a different kind of charge from a surcharge, so the payment screen is worth reading before confirming to see which fee applies and to which cards.

State law can be stricter. The same Visa document, dated August 2023, lists Connecticut, Maine, Massachusetts and Oklahoma as prohibiting or limiting surcharges; that list is not a full survey of state rules. Connecticut's Department of Consumer Protection describes its law as barring any fee that raises the transaction total because of the payment method used. New York's General Business Law section 518 allows surcharges but requires the total card price to be posted and caps the surcharge at what the card company charges the business.

A proposed settlement between Visa, Mastercard and merchants that would give merchants new surcharging rights received preliminary court approval on June 9, 2026; it is not final as of October 2026. Laws and network rules change, so a biller's current terms and the state attorney general's office are the places to check.

Autopay discounts and the no-compulsion rule

Regulation E's compulsory-use rule in section 1005.10(e) says no one may condition an extension of credit on repayment by preauthorized electronic transfers, except for overdraft credit plans and credit extended to maintain a minimum balance. The official commentary allows a reduced rate or other cost incentive for autopay, provided the autopay program is not the creditor's only loan program. So a lender may reward bank autopay but may not refuse the loan without it.

Some phone, internet, insurance and utility providers also offer autopay discounts; whether the discount requires a bank account rather than a card, and how large it is, depends on each provider's current terms. One verifiable case is federal student loans: servicer pages from MOHELA state that the Auto Pay rate reduction rose from 0.25% to 1% on July 1, 2026, as a temporary benefit through June 30, 2028, and give December 31, 2026 as the enrollment deadline.

Illustrative example: one month of bills on a card

A household has $1,900 of monthly bills: rent $1,500 (the landlord's portal adds a 3% card fee), electricity $150 (a $3 flat convenience fee by card), car insurance $120 and phone/internet $130 (no card fee). The card earns 1.5% back. All figures are illustrative.

Net card value per month = (B × r) − F
B = bills paid by card ($)
r = card reward rate (decimal)
F = card surcharges and convenience fees ($)
Interest per month ≈ carried balance × APR ÷ 12

Everything on the card: $1,900 × 0.015 = $28.50 back, minus $45 + $3 = $48 in fees, a loss of $19.50 a month, or $234 a year.
Rent and electricity by ACH, the rest by card: $250 × 0.015 = $3.75 a month, or $45 a year, with no fees.
Everything on the card with the balance carried: at an illustrative 22% APR, $1,900 × 0.22 ÷ 12 ≈ $34.83 of interest in one month, more than the $28.50 earned; with the $48 in fees, the month costs $54.33 net ($48 + $34.83 − $28.50). Issuers actually charge interest on a daily balance, so this is an approximation.

The numbers show that rewards are small next to card fees and interest: the card earns money in this example only on bills with no card fee and only if the statement is paid in full.

Overdraft risk vs interest risk

A bank debit draws whatever the bill says on the scheduled date. If checking is short, the bank may pay it into overdraft or return it unpaid, and either can carry a fee under the account terms. Regulation E's opt-in requirement for overdraft fees in section 1005.17 covers only ATM and one-time debit card transactions; the commentary confirms ACH and check items fall outside it, and recurring debit card payments are not one-time transactions. Declining overdraft coverage therefore does not stop overdraft fees on an autopay bill.

After a return for insufficient funds, the biller may resubmit the debit only in the limited cases the ACH network's rules allow, and Nacha requires such retries to carry the description ""RETRY PYMT"" and the same amount as the original. Each attempt may trigger a bank fee, and the biller may add its own returned-payment fee.

A credit card swaps that risk for two others. A charge that would exceed the credit limit may be declined, leaving the bill unpaid. And interest applies if the statement is not paid in full: the CFPB notes that issuers are not required to offer a grace period, and a card that loses it charges interest on new purchases from the day they are made. Card autopay itself is usually a debit from checking, so moving bills onto a card bundles them into one larger monthly pull rather than removing bank-balance risk.

Choosing a method by bill type

This table reflects the rules above; each biller's fees and discounts decide the final answer.

Bill	Usually favors	Why
Rent	ACH	Large fixed amount; card payments often carry a percentage fee that outweighs typical rewards
Mortgage, auto or student loan	ACH	Fixed amount; autopay rate reductions are usually tied to bank debits; card payments may not be accepted or may run through a fee-charging processor
Electricity, gas, water	Depends on the fee	Amounts vary, which raises overdraft risk on ACH; a card paid in full suits these only if no convenience fee applies
Insurance premiums	Either	Fixed amount; compare any installment or card fees, and keep a backup method, since a missed premium can lead to cancellation under the policy terms
Phone and internet	Check the discount terms	Autopay discounts may require a bank account or a specific card type; without a discount, a credit card paid in full adds dispute rights
The credit card bill itself	ACH autopay from the issuer	Paying at least the minimum automatically avoids late fees; paying the full statement balance keeps any grace period

Consumer rules, card network policies and biller terms change; this is general information, and the current agreement for each account is what applies.

Frequently asked questions

Does stopping autopay cancel what I owe?

No. The CFPB's guidance on stopping automatic payments points out that cancelling an automatic loan payment still leaves the loan payments due by another method. It also suggests telling the company whether the contract is being cancelled or only the payment method changed.

Will I be told before a variable autopay amount changes?

For bank debits, Regulation E section 1005.10(d) requires the biller or the bank to send written notice of the amount and date at least 10 days before a preauthorized debit that differs from the previous one or the authorized amount. The consumer may be offered the option of being notified only when a debit falls outside a set range.

How much can I lose if someone debits my bank account without permission?

Under Regulation E section 1005.6, an unauthorized debit made without a card or other access device carries no liability if reported within 60 days after the statement showing it is sent. Missing that window can make the consumer liable for later unauthorized debits that timely notice would have prevented. For a lost or stolen debit card, liability is capped at $50 if the bank is told within two business days of learning of the loss and up to $500 after that, and if an unauthorized transfer on a statement goes unreported for 60 days, the official commentary describes liability for later transfers made before the bank is told, which timely notice would have prevented, as unlimited.

Can my credit card issuer take money from my checking account?

Regulation Z section 1026.12(d) bars a card issuer from offsetting consumer card debt against funds the cardholder keeps on deposit with that same issuer. The exceptions are periodic deductions the cardholder authorized in writing, such as card autopay, a consensual security interest in the funds, and attachment, levy or a court order available to creditors generally. Separately, liability for unauthorized credit card use is capped at $50.

Can I lose a student loan autopay rate reduction?

Yes. According to MOHELA's Auto Pay page, Auto Pay is removed and the reduction lost if three consecutive payments are returned for insufficient funds. Auto Pay and the reduction are also inactive during deferment or forbearance and resume afterwards.

Before switching a bill's method

List each recurring bill with its amount, due date, and whether it is fixed or variable.
On each biller's payment page, note any card surcharge, convenience fee or autopay discount and which method the discount requires.
Set up the new method and confirm the first payment posts before cancelling the old one, so no cycle is missed or paid twice.
Revoke the old ACH authorization in writing with the biller, and tell the bank at least three business days before the next scheduled date if a stop-payment order is needed.
File the authorization copy and any cancellation confirmation, and put the 60-day dispute window on the calendar each time a statement arrives.
Keep a cushion in checking for variable ACH bills, or set the credit card's own autopay to the full statement balance.