The Anatomy of an MCA Daily Debit — and the Four Places You Can Interrupt It

The money is usually gone before the doors open. A merchant cash advance debit posts overnight, sometime between the close of one business day and the start of the next, and by the time a business owner checks the balance on their phone over coffee, the decision that moved that money was made roughly twenty-four hours earlier by someone at a funding company who has never seen the shop.

That timing detail explains why so much advice about halting these withdrawals fails. Business owners tend to think of the debit as something happening to their account in real time, something they might catch and stop mid-flight. It isn't. An ACH debit is a batch instruction that travels through four separate hands before it reaches the account, and the merchant is the last party in the chain. There is no moment of interception. There are only the points before the money moves and the points after — and each one carries a different remedy, a different deadline, and a very different set of consequences.

This piece maps those four control points, what can actually be done at each, and what breaks when the debit does.

First, what a daily debit actually is

Strip away the finance jargon and an MCA collection is a plain corporate ACH entry, almost always a CCD (Corporate Credit or Debit) transaction. Four parties handle it:

The batch is typically transmitted the business day before it settles. That single fact reframes everything: nothing a business owner does on the morning of a debit affects that debit. Every real remedy sits either upstream of the instruction — in the contract or the authorization — or downstream of the posting, in the return window and in court.

So: four control points, in order.

Control point one — the contract

The most underused tool in MCA collection is written into the agreement itself.

Nearly every merchant cash advance contract contains a reconciliation provision, and funders do not include it out of generosity. They include it because it is load-bearing. An MCA is documented as a purchase of future receivables rather than a loan, and that characterization is what keeps the transaction outside state usury caps. If repayment is truly contingent on revenue, the funder bears real risk and the "purchase" framing holds. If the merchant owes a fixed sum regardless of what the business earns, the transaction starts to look like a loan wearing a costume.

Courts assessing that question have repeatedly weighed three things: whether the agreement contains a meaningful reconciliation mechanism, whether the repayment term is functionally finite, and whether the funder keeps recourse if the business collapses. Reconciliation sits first on that list for a reason.

This creates a genuine dilemma for the funder. Invoke the clause properly and one of two things happens:

• The funder reconciles. The daily amount drops to match actual receipts. No breach, no default, no litigation — just a smaller number leaving the account each morning.
• The funder stalls or refuses. It demands documentation nobody could assemble daily, routes the request into a queue that never resolves, or simply ignores it. That refusal is now documented, and it is precisely the evidence that supports arguing the reconciliation right was decorative rather than real.

Either outcome improves the merchant's position. That is rare in this situation, and it is why reconciliation should be the first move rather than the last resort. CredibleLaw's breakdown of how MCA reconciliation rights work in practice covers what the clause typically requires and how funders structure them to be difficult to trigger.

Making the request count. Send it to the exact notice address named in the contract, by email and certified mail on the same day. Cite the section number and quote its language. Attach whatever the clause specifies — settlement reports, bank statements, a revenue summary for the stated lookback period. Propose a specific adjusted daily figure and show the math connecting it to the agreed percentage of receipts. Then calendar the response deadline the contract gives them and note in writing when it passes.

Control point two — the authorization

The debit exists because the merchant granted permission for it. Withdrawing that permission is the second control point.

Here is where most business owners are steered badly wrong, because the internet is saturated with guidance about cancelling automatic payments that was written for consumers and does not apply.

Regulation E stops at the business account door

The Electronic Fund Transfer Act and its implementing rule, Regulation E, give consumers a right to revoke preauthorized debits on three business days' notice and a sixty-day window to dispute unauthorized transfers. Those rights attach to transfers debiting a consumer's account. The rule text, published at eCFR, is explicit about that scope.

A business operating account is not a consumer account. The three-day rule, the sixty-day dispute window, the provisional credit requirement — none of it is available. What governs instead is the deposit agreement signed with the bank, UCC Article 4A, and the Nacha Operating Rules.

What revocation does and doesn't accomplish

A written revocation sent to the funder does two useful things: it removes the authorization the funder's bank warranted when it transmitted the entry, and it fixes a date on the record. It does not, by itself, stop anything. The funder's system will keep submitting entries until the merchant's bank refuses them.

It also does something less welcome, addressed further down: in most agreements, revoking ACH authorization is an express event of default.

Control point three — the merchant's bank

This is where debits actually stop, and it is the point most business owners approach with the wrong vocabulary. Walking into a branch and asking a teller to "cancel the withdrawals" tends to produce a stop payment order on one specific amount, which a funder defeats by varying the amount by a few cents.

Ask instead for the treasury management desk, and ask for the right instrument:

The filter is almost always the correct tool, and it must be keyed to the funder's originator ID, not its company name. Funders that expect resistance submit under affiliate names, DBAs, and third-party sender IDs. The originator ID appears in the ACH detail on the bank statement; the treasury desk can pull it. A filter built on a company name alone will let the next entry through under a slightly different label.

The clock almost nobody mentions

When a non-consumer account holder tells its bank a debit was not authorized, the bank returns the entry under code R29 — Corporate Customer Advises Not Authorized, and Nacha rules require that return within two banking days of settlement.

Two days. Consumers get sixty. This is the single most consequential asymmetry in the whole subject, and it means a debit noticed on Friday and disputed the following Wednesday is generally past recovery through the network. Disputes here are same-day work.

There is a corresponding advantage worth knowing. Under Nacha's reinitiation rules, an entry returned for insufficient or uncollected funds can be resubmitted up to two more times — but an entry returned as unauthorized, or because authorization was revoked, may not be reinitiated at all. A bounced payment invites retries. A properly documented unauthorized return does not.

Control point four — the courts

When the first three points are exhausted or unavailable, the remaining leverage is judicial.

Where litigation has already begun, the response deadline dominates everything else on the list, because a default judgment converts an arguable dispute into an enforceable one and hands the funder restraining notices and levies. Where a judgment exists, motions to vacate turn on grounds like defective service, jurisdictional problems, or a judgment figure that cannot be reconciled to the contract — and the window narrows quickly once enforcement starts.

The most absolute stop available is bankruptcy. Filing a petition triggers the automatic stay under 11 U.S.C. § 362, which halts collection activity, litigation, levies, and ACH debits at the instant of filing; the U.S. Courts' Chapter 11 overview describes the mechanics. For most small businesses the relevant path is Subchapter V, a streamlined reorganization with a debt ceiling that adjusts periodically — currently $3,424,000, after the temporary $7.5 million pandemic threshold lapsed in June 2024, as the U.S. Trustee Program documents. Bills to restore the higher figure have been introduced repeatedly, most recently in 2026, so the number should be confirmed rather than assumed.

Bankruptcy is a serious step with consequences for credit, contracts, and control of the business. But for an operation whose only structural problem is stacked advances draining an otherwise sound company, it is frequently the fastest route to a payment structure that the business can actually survive.

What breaks when the debit breaks

None of the above is free. Interrupting collection at control point two or three typically triggers a cascade that is written into the agreement and fires simultaneously:

• Acceleration. The entire unpaid purchased amount becomes due at once, not just the missed payments.
• The personal guarantee. Many MCA guarantees are guarantees of performance — meaning the act of blocking debits is itself the trigger that converts business debt into personal liability.
• Confession of judgment. Where still enforceable, a COJ permits entry of judgment without a hearing.
• UCC enforcement. The blanket lien on receivables is unaffected by which bank holds the deposit account.
• Cross-defaults. With stacked advances, defaulting on one commonly constitutes default on the others.
• Processor disruption. If the deal uses split funding or a lockbox, the collection point is the card processor, not the bank — changing the deposit account accomplishes nothing there.

None of this makes interruption the wrong choice. Sometimes it is the only choice that keeps payroll funded. It does mean the choice should be made deliberately, with counsel, and after the reconciliation record has been built rather than before.

What regulators found when they looked closely

Two enforcement records are worth knowing, because they establish that the practices merchants describe are not imagined.

The Federal Trade Commission's litigation against RCG Advances and its principal alleged unauthorized withdrawals beyond agreed repayment amounts and the misuse of confessions of judgment to seize business and personal assets. A federal court ultimately entered a $20.3 million judgment, combining redress with civil penalties, alongside a permanent industry ban.

On the reconciliation question specifically, the New York Attorney General alleged that Yellowstone Capital promised reconciliation while deploying measures that ensured merchants almost never qualified, producing effective rates functioning as extraordinarily expensive short-term loans. The resulting settlement cancelled roughly $534 million in merchant debt and vacated related judgments.

The pattern in both: the paperwork said one thing, the collection behavior said another, and the gap between them was the case.

The ground is shifting under the model

State law has moved considerably, and one change goes directly at the debit itself.

Texas. House Bill 700 added Chapter 398 to the Texas Finance Code, effective September 1, 2025. Among its provisions, a commercial sales-based financing provider or broker may not establish a mechanism to automatically debit a recipient's deposit account unless it holds a validly perfected, first-priority security interest in that account — a condition few MCA structures are built to satisfy. The chapter reaches providers offering financing over the internet to recipients located in Texas regardless of where the provider sits, and it also addresses confession-of-judgment provisions. See the Texas OCCC overview and the statutory text.

New York and California. Both require consumer-style cost disclosures on commercial financing, including estimated APR for sales-based products; New York's implementing regulations are published by the Department of Financial Services. Louisiana and others have since followed.

A disclosure failure does not void an agreement on its own. What it does is add a regulatory dimension, open a complaint channel, and change how a funder scores the risk of pushing a matter to judgment.

Five things merchants get wrong

"I'll just close the account." Closing removes the target, not the obligation. The lien, the guarantee, and the balance all survive, and a new account is a discoverable asset once a judgment exists.

"I can dispute it like a credit card charge." There is no chargeback equivalent here. There is a two-banking-day return window and then there is litigation.

"A stop payment will handle it." Stop payments key on amount and date. Funders vary both.

"They'll work with me if I explain." Some will — but informal phone conversations create no record. Reconciliation demands in writing create one.

"A reverse consolidation will fix the cash flow." It advances new money to cover existing debits and then debits for itself on top. Total obligations rise, secured parties multiply, and the underlying shortfall is deferred at higher cost.

Frequently asked questions

Which ACH entry class do MCA debits use, and does it matter? Typically CCD, the corporate class. It matters because corporate entries carry the two-banking-day unauthorized return window rather than the sixty days that applies to consumer entries.

What is an originator ID and why does it matter? It is the identifier the funder's bank attaches to every entry it submits. Filters keyed to originator ID survive a funder switching company names or affiliates; filters keyed to a name alone often don't.

Can a bank refuse to set up a block or filter? A bank can decline to offer a service, and some charge meaningfully for filters or require a treasury management agreement. If the primary institution won't accommodate it, that is worth weighing alongside the decision about where the operating account belongs.

Is revoking ACH authorization illegal? No. It is a contractual breach in most MCA agreements, not an unlawful act. Breach and illegality are separate categories, and the consequences of the former are contractual.

Can a funder resubmit a debit that was returned? Entries returned for insufficient or uncollected funds may be reinitiated up to two additional times. Entries returned as unauthorized or following revocation may not be reinitiated at all.

Will returned debits damage the banking relationship? Possibly. Sustained returns and overdrafts draw scrutiny and can put an account at risk, which is another argument for filters — which refuse entries cleanly — over letting debits post and bounce.

How long do funders usually wait before filing suit? It varies widely, from days to months, and correlates less with the size of the balance than with the funder's litigation posture. Some file almost immediately; others send demand letters for weeks. Neither pattern should be relied on.

Does any of this apply to a split-funding or lockbox deal? The banking tools do not, because the collection happens at the processor before funds reach the account. The contract and court control points still apply.

The practical order of operations

1. Export twelve months of statements and reconcile every debit against the contracted amount. Overcollection is a separate claim.
2. Pull the agreement and locate the reconciliation clause, guarantee, COJ, venue, and choice-of-law terms.
3. Send the reconciliation demand in writing, properly addressed, with the documentation the clause specifies.
4. Confirm whether anything has been filed — UCC-1, demand letter, summons, restraining notice.
5. Talk to counsel before touching the bank account, because step six triggers the default cascade.
6. Implement the banking measure, keyed to originator ID, with the record already built.

Businesses that follow that sequence tend to negotiate from a position supported by evidence. Businesses that block first and think afterward tend to spend the following year defending a judgment.

The daily debit is engineered to be hard to interrupt. It is not engineered to be impossible.

About the resource: CredibleLaw operates a national referral network connecting small business owners with attorneys handling merchant cash advance defense, reconciliation disputes, UCC lien matters, and business debt litigation. Consultations can be arranged at (888) 201-0441.

This article is general information, not legal advice, and does not create an attorney-client relationship. Merchant cash advance law varies by state and by contract, and outcomes depend on facts specific to each agreement. CredibleLaw is a referral network, not a law firm, and does not provide legal representation. Anyone facing daily ACH withdrawals, a collection action, a lien, or a judgment should consult a licensed attorney in their jurisdiction.