When using Stripe to initiate ACH transactions with your customers, you must ensure that you have all necessary authorizations and approvals from your customers for Stripe to transmit an ACH debit transaction to the customer's bank account. The information you provide Stripe about each ACH transaction must be accurate, timely and complete, including the name of your customer that authorized you to initiate the ACH transaction to their bank account.
As part of the authorization process, we recommend collecting and storing digitally or in paper form for two years the following information from your customers (note this is not an exhaustive list):
Clear, legible consent |
Your authorization page must plainly state that you are obtaining consent to debit your customer’s bank account for a specific transaction or set of recurring transactions. |
Transaction specific details |
Date, time of transaction, debiting account info, item purchased, IP address (and corresponding details such as country), frequency if it is a recurring payment |
Client/account information |
Name on account/shipping information, any other controls in place to verify the identity of the customer |
Any further transaction info |
Prior transaction history, particularly for recurring payments (e.g. IP information, other logins, other purchases) |
Receipt of transaction |
Prompt your customer to print the authorization and retain a hard copy or electronic copy, and send an e-mail receipt of the processed transaction to your customer. |
Process for revocation |
Your authorization flow must provide your customer with a method to revoke authorization by notifying you, so be sure to include a telephone number and/or e-mail address where your customer can contact you. You should display this information on the authorization page and receipt/confirmation sent to the customer after the transaction has been completed. |