Collecting ACH Direct Debit mandates from customers

When using Stripe to initiate CHAPS transactions with your customers, you must ensure that you have all necessary authorisations and approvals from your customers for Stripe to transmit a CHAPS debit transaction to the customer's bank account. The information that you provide to Stripe about each CHAPS transaction must be accurate, timely and complete, including the name of the customer who authorised you to initiate the CHAPS transaction to their bank account.

As part of the authorisation process, we recommend collecting and storing digitally or in paper form for two years the following information from your customers (note that this is not an exhaustive list):

Clear, legible consent

Your authorisation page must plainly state that you are obtaining consent to debit your customer's bank account for a specific transaction or set of recurring transactions.

One way to achieve this is for the authorisation form to have express language, such as:

I authorise (your company) to electronically debit my account and, if necessary, electronically credit my account to correct erroneous debits.

Transaction-specific details

Date, time of transaction, debiting account info, item purchased, IP address (and corresponding details such as country), frequency if it is a recurring payment

Client or account information

Name on account or delivery information, any other controls in place to verify the identity of the customer

Any further transaction info

Prior transaction history, particularly for recurring payments (e.g. IP information, other logins, other purchases)

Receipt of transaction

Prompt your customer to print the authorisation and retain a hard copy or electronic copy, and send an email receipt of the processed transaction to your customer.

Process for revocation

Your authorisation flow must provide your customer with a method to revoke authorisation by notifying you, so make sure that you include a telephone number and/or email address that your customer can use to contact you. You should display this information on the authorisation page and receipt or confirmation sent to the customer after the transaction has been completed.

Additional information