Direct Deposit for Small Business: Setup, Cost, and Rules
How to set up direct deposit as a small employer. The three routes, what it costs, the consent rules, and the ACH rule changes that now apply to you.
Direct Deposit for Small Business
How to set it up, what it actually costs, and the rules that changed while nobody was looking
The first time I ran direct deposit, I funded the business account on Friday morning, because Friday was payday. That is not how it works. Everything below is what I wish someone had told me before that run.
The Automated Clearing House (ACH) network works in batches, and the file has to be submitted days before the money lands. My run failed, six people did not get paid on time, and I spent the morning explaining a banking mechanism to people who quite reasonably did not care about banking mechanisms. They cared that their rent was due.
Direct deposit is genuinely simple and it is genuinely cheaper than checks. But it has a handful of operational realities that nobody puts in the setup guide, and it now carries obligations that arrived without anyone telling you.
This guide covers all of it: the three ways to set it up, what to collect from employees, what it actually costs, the consent rules that vary by state, and the ACH rule changes that are already in force and apply to you whether or not you knew about them.
How Direct Deposit Actually Works
Understanding the mechanism prevents most of the problems, so it is worth ninety seconds.
The critical word is batches. According to the Federal Reserve, the ACH system is a nationwide network through which depository institutions send each other batches of electronic credit and debit transfers. It is a queue processed on a schedule, not an instant transfer, and that produces the one consequence that surprises every first-time employer.
Your money leaves before their money arrives. If you fund the account on payday morning, you have already missed the window. This is not a quirk of your bank. It is how the network works.
The Three Ways to Set It Up
There are three ways to set up direct deposit, and all three move money identically, because they all use the same ACH network. What differs is how much of the surrounding work you keep.
Which Route to Pick
For most small businesses the answer is payroll software, and the reason has almost nothing to do with the deposit itself.
The bank route looks cheaper on a spreadsheet and costs more in practice, because the bank does not calculate your withholding, file your quarterly Form 941, or remit your payroll taxes. You still do all of that, with an electronic payment rail attached. That trade only makes sense if you already handle payroll tax filing confidently, which most small businesses do not.
What You Need to Collect
Four things per employee, and one of them is not optional in many states.
| What | Why | The Detail That Matters |
|---|---|---|
| Bank routing number | Identifies the employee's financial institution in the ACH network. | Nine digits. A voided check is the traditional way to verify it, because transcription errors here send money to a real account that is not theirs. |
| Account number | Identifies the specific account to credit. | Verify it against a document rather than a text message. This is the field where a typo becomes an expensive recovery problem. |
| Account type | Checking or savings. The ACH file needs it. | Sounds trivial. People get it wrong often enough that providers ask for it explicitly. |
| Signed authorization form | Written permission to deposit wages into that account. | Legally required in many states before you can pay by direct deposit at all. Everywhere else, it is the document proving the employee gave you those numbers voluntarily. |
Collect all four before the first run, not during it. The authorization form in particular is the document you will want if anyone ever disputes where their money went, and it is the one people skip because it feels like formality between colleagues.
Voided Checks and What to Accept Instead
A voided check for direct deposit does one job: it proves the routing and account numbers came off a document the bank produced rather than out of somebody's memory. The employee writes VOID in large letters across the front, leaves the signature line blank so it cannot be cashed, and sends it in with the authorization form.
Plenty of people do not own a checkbook anymore, so I treat the check as one option rather than the requirement. A direct deposit letter from the bank works. So does an account summary printed from online banking, as long as it shows the employee's name next to both numbers. The test is whether a bank generated the document.
What I will not do is copy numbers off a photo in a message thread. That leaves an image of someone's bank credentials in two archives I do not control, and it makes me the person who mistyped a digit instead of the person who checked one. Let the employee enter their own details, then let a prenote (a zero-dollar test deposit) confirm them.
Setting It Up, Step by Step
How Long It Takes
Direct deposit runs on two different timelines, and people conflate them. Initial setup takes one to two pay cycles before the first electronic deposit lands. That covers approval, collecting details from every employee, and the prenote if you use one. Do not promise employees that next payday will be electronic. Promise them the one after.
Each ongoing run has to be submitted before your cutoff, typically one to three business days ahead of payday. Same-day ACH exists but generally costs more and is not what standard payroll uses. The cutoff is set by your provider or bank and is not negotiable on the day you miss it.
What It Costs
Direct deposit is cheaper than paper checks. That is the honest headline, and it is true across every route, because the underlying ACH network is inherently inexpensive to use.
The confusion in most cost comparisons comes from mixing up two different things: the cost of the payment itself, and the cost of the payroll service the payment is bundled into.
| Route | How the Cost Works | What You Are Actually Paying For |
|---|---|---|
| Payroll software | Direct deposit is typically bundled into a monthly subscription plus a per-employee charge, rather than priced per transaction. | Payroll processing, withholding calculation, tax filing, employee self-service, and ACH origination handled for you. The deposit is a feature, not the product. |
| Business bank | Often a one-time setup fee, plus a small per-transaction cost. Some banks charge a monthly ACH origination fee, many do not. | The payment rail only. You still calculate withholding, file your payroll taxes, and produce pay stubs yourself. |
| Manual ACH | Cheapest per transaction, since you are doing the work. | Nothing but the rail, and you now personally own the ACH file format, the cutoffs, and the fraud-monitoring obligations of an originator. |
| Paper checks (for comparison) | Check stock, printing, postage or distribution, plus the labor of producing and handing them out. | Meaningfully more per payment than ACH, plus a reconciliation burden as checks are cashed at unpredictable times. |
Prices change constantly and vary by provider, so any specific figure in an article is a figure to verify rather than rely on. What does not change is the shape: bundled through software, per-transaction through a bank, and always more expensive to print checks.
Can You Require Direct Deposit?
In many states you can, but the employee always chooses the bank. The rule has two layers, and people usually know only one of them.
The federal layer is narrow but absolute. Per 15 U.S.C. § 1693k, part of the Electronic Fund Transfer Act, no person may require a consumer to establish an account for receipt of electronic fund transfers with a particular financial institution as a condition of employment.
In plain terms, you may not tell an employee they must bank where you chose. Note what the statute does not say: it never prohibits requiring direct deposit generally, only requiring it at a specific institution. Regulation E, which implements the act, applies the same rule to payroll cards, so no employee can be forced onto a card or account you picked.
The state layer is where it actually gets decided, and it varies considerably. Some states, New York among them, prohibit mandatory direct deposit outright and require you to offer an alternative. Some allow it with conditions. Many require written consent regardless of whether it is mandatory.
Published state-by-state lists disagree with one another, which is reason enough not to lean on any one of them. Check your own state labor department rather than trusting a summary on a blog, this one included, because the rule that governs you is the one in the state where the employee works.
The practical answer that works everywhere is simple. Get signed written authorization from every employee, and offer an alternative to anyone who does not want it. That posture is compliant in every state, requires no research, and removes the question entirely.
Employees Without a Bank Account
Plan for this before it comes up, because handling it badly is both a compliance problem and a dignity problem.
According to the FDIC National Survey of Unbanked and Underbanked Households (2023), 4.2 percent of US households, about 5.6 million of them, had no bank or credit union account. The share has fallen by almost half since 2011 and changed little since 2021, but in a workforce of thirty you still cannot count on everyone having an account.
Two alternatives, and one of them has a trap.
| Alternative | How It Works | What to Watch |
|---|---|---|
| Paper check | The traditional fallback. Slower and more expensive per payment, but it works everywhere and stays legally uncomplicated. | Nothing, really. It costs more and it is fine. Do not overthink this one. |
| Payroll card | A prepaid card loaded with the employee's wages each pay period. No bank account needed. | Fees. If card fees cut into minimum wage or overtime pay, you have recreated the free and clear problem, and states such as Illinois and Kansas require at least one free withdrawal of full net wages each pay period. You generally cannot require a payroll card either. |
The simplest defensible policy at a small company: offer direct deposit, offer a check to anyone who wants one, and do not make anyone explain why. The cost of printing occasional checks is trivial compared to the cost of getting this wrong.
The ACH Rules That Just Changed
Nacha, which writes the operating rules for the ACH network, made two changes that reach ordinary small employers, and both effective dates have now passed. Neither arrives as a letter from your bank. If you originate ACH, they are already your obligations.
Nacha says the PAYROLL descriptor is there for descriptive purposes only, so that receiving banks can identify compensation payments and apply fraud logic to them. The target is payroll redirection fraud, where an attacker impersonates an employee and asks you to change their deposit account.
What this means practically depends on your route. If you use payroll software, this is your provider's job, and you should confirm they have handled it. If you originate ACH yourself through your bank, it is your job, and a non-compliant entry description is your exposure.
The fraud-monitoring obligation is the one small originators did not see coming. It is no longer only your bank's job. Nacha expects risk-based processes and procedures that fit the role you play in sending payments, and a review of them at least once a year.
The underlying fraud is worth knowing about regardless. According to a 2019 public service announcement from the FBI Internet Crime Complaint Center, payroll and HR departments receive spoofed emails that appear to come from employees requesting a change to their direct deposit account, and the wages land in an account the attacker controls, often a prepaid card.
The countermeasure is procedural rather than technical. Verify every bank detail change through a channel other than the one the request arrived on. Call the person on the number in their employee record, not the one in the email. It takes a minute and it defeats the whole attack.
A call only defeats it if it happens every time, and every time means writing down who called, on which number, and where that number came from. That written record is the simplest proof the process exists, and it gives the annual review something to check.
The payroll security guide has a form for exactly that, alongside the other controls worth your time at this size. Print it, keep it with the authorization forms, and the process exists before you need it rather than after.
What Goes Wrong
These are the six direct deposit problems I would plan for, starting with the one that caught me.
Five of those six are preventable with a checklist, and the remaining one, the typo, is preventable with a prenote. None of them requires expertise. They require the process to exist before you need it, which is the recurring theme of everything on this page.
Running Payroll Without an HR Team
The setup is a one-time task. What persists is the record layer around it, and at a small company that layer is usually an inbox.
| What Needs a Home | Why | What Happens Without It |
|---|---|---|
| The signed authorization form, per employee | Legally required in many states, and everywhere it is what proves the employee gave you those account numbers voluntarily. | You have bank details you cannot demonstrate you were authorized to hold, which is an uncomfortable position in a dispute. |
| A verified change process for bank details | Payroll redirection fraud works precisely because bank detail changes arrive as ordinary requests and get processed as ordinary requests. | Someone emails a plausible change request before payday and you pay an attacker instead of your employee. |
| The pay calendar with cutoffs and bank holidays | ACH settles in batches and does not run on holidays. The cutoff is real and it is not negotiable on the day. | You miss a cutoff in a holiday week and everybody is paid late for reasons that sound like excuses. |
| Payroll records, retained | Federal retention rules apply to payroll records regardless of whether you paid by check or ACH. | You cannot produce what you paid and when, which is the position from which wage disputes are lost. |
Payroll record retention has specific numbers attached. According to Department of Labor Fact Sheet 21, payroll records must be preserved for at least three years, and the supporting records that wage computations rest on, such as time cards and wage rate tables, for two. Nothing about paying electronically shortens either window.
This is the layer FirstHR holds. Document management with e-signature captures the direct deposit authorization form and keeps it with the employee it belongs to. When bank details change, the employee signs a new authorization, so the change is a signed document in their file rather than an email someone acted on. And task workflows can assign the call-back verification to whoever processes the change, which is the control that actually stops payroll redirection fraud.
FirstHR is not a payroll processor and does not move money or originate ACH; that stays with your payroll provider or bank. What it holds is the authorization, the record, and the process discipline around them.
Frequently Asked Questions
How do I set up direct deposit for my small business?
Three routes. Use payroll software, which bundles direct deposit with tax filing and is the right answer for most small businesses. Apply to your business bank for ACH origination, which is cheaper per transaction but leaves you doing the payroll calculation and tax filing yourself. Or generate Nacha files manually and upload them to your bank, which is rarely worth the effort. Whichever route you pick, you will need employee bank details, signed authorization, and a funded business account before the first run.
What do I need from employees to set up direct deposit?
Four items per person. You need the routing number that identifies their bank, the number of the account to credit, whether that account is checking or savings, and a signed form in which the employee authorizes you to pay their wages into it. To confirm the two numbers, ask for a voided check, the traditional proof, or a confirmation issued by the bank. Get the signed form back before the first deposit goes out: many states make written consent a legal requirement, and in every state it is your evidence that the employee chose that account and supplied its details.
Do I need a voided check for direct deposit?
Not strictly, but you should ask for some form of bank-issued verification. The point of the voided check is that a nine-digit routing number and an account number are easy to get wrong, and one mistyped digit sends wages to a real account belonging to somebody else. Have the employee mark the check VOID in ink across the face and leave the signature line blank. Checkbooks are no longer universal, so also accept the bank's own direct deposit letter or a printout from online banking, provided the employee's name appears beside both numbers. File whatever you accept with the signed authorization rather than leaving it in an email thread, and run a prenote before the first real deposit so an error surfaces on a zero-dollar transaction instead of on payday.
How much does direct deposit cost a small business?
It depends on the route, but the payment itself is cheap on all of them, because the ACH network costs little to use. A bank that lets you originate ACH may charge a one-time fee to set you up and a small amount per transaction. Payroll software usually folds direct deposit into its monthly subscription instead of pricing it on its own, which means your money really goes to payroll processing and tax filing, with deposits included. Whatever the route, do not pass the cost to the employee. The FLSA counts a fee for getting paid as a deduction made for your benefit, which becomes unlawful once it pushes pay below the minimum wage or eats into overtime pay, and a number of states forbid the charge outright.
How long does direct deposit take to set up?
Plan on one or two pay cycles before your first electronic payday. In that window your provider or bank verifies your account, you gather bank details and signed authorizations from each employee, and you often send a prenote, a zero-dollar test entry that flags bad account details before any wages move. Once direct deposit is live, the cutoff is what matters: because ACH processes payments in batches, each payroll file typically has to go in one to three business days before payday, not on the day itself.
Can I require employees to use direct deposit?
It depends on your state, with one federal limit that applies everywhere. The Electronic Fund Transfer Act bars employers from making a job conditional on opening an account at a particular financial institution, so even in a state that lets you insist on direct deposit, each employee chooses the bank that receives their pay. State law decides the rest, and it differs a lot. Some states forbid mandatory direct deposit altogether, some permit it if you meet certain conditions, and many demand the employee's written consent either way. Check the rule where the employee actually works before you turn it into a policy.
Can I charge employees for direct deposit?
Treat the answer as no. The Fair Labor Standards Act requires wages to be paid free and clear, and the Department of Labor reads that to mean no deduction may leave an employee with less than the required minimum wage or overtime compensation. A charge for receiving wages is a deduction that benefits the employer, so it becomes a federal violation the moment it bites into either figure, and several states prohibit any charge for wage payment whatever the employee earns. Payroll card fees raise exactly the same question. The simplest defensible position is that the cost of paying your people is part of the cost of employing them.
What if an employee does not have a bank account?
You need an alternative, and you should plan for it rather than discover it. The FDIC put the unbanked share at 4.2 percent of US households in its 2023 national survey, so do not assume that everyone you hire has an account. Practical alternatives are a paper check or a payroll card. If you use a payroll card, be careful: card fees that push pay below the minimum wage or cut into overtime owed run into the same free and clear rule as a direct deposit charge, and some states, Illinois and Kansas among them, require one no-cost way to withdraw the whole net wage each pay period.
What happens if I enter the wrong account number?
The money goes to whatever account those numbers point to, and getting it back depends on how fast you catch it and whether the receiving party cooperates. Nacha rules provide a limited window for reversing certain erroneous entries, but a reversal is a request, not a guarantee, and if the funds have been withdrawn recovery becomes difficult. That is the whole case for running a prenote first: a zero-dollar test entry that checks the account details are valid before any wages leave your account.
What are the new ACH rules for payroll?
Two matter for employers. Since March 20, 2026, any ACH credit that pays wages, salaries, or similar compensation has to say PAYROLL in its Company Entry Description, a standardized label that replaced whatever wording the employer used to choose. The label lets receiving banks spot payroll suddenly arriving at a new account, the pattern behind payroll redirection fraud. Since June 22, 2026, Nacha's fraud monitoring rule also applies to any business originating ACH entries, however few it sends, so a small employer that submits its own payroll file needs risk-based processes for catching fraudulent entries and must review them at least annually. If a payroll provider sends your deposits, ask it to confirm it handles both.
Can I pay 1099 contractors by direct deposit?
Yes, and ACH is generally the cleanest way to pay them. The mechanics are the same: you need their bank details and authorization. What differs is everything around the payment. Contractors are not employees, so you do not withhold taxes, you collect a W-9 rather than a W-4, and you report the payments on Form 1099-NEC rather than a W-2 once you reach the $2,000 reporting threshold that applies to payments made on or after January 1, 2026. Some businesses pay contractors through accounts payable rather than payroll for exactly that reason.
Make HR the easy part of running your business
Onboarding, e-signatures, training and core HR in one place. Up and running in 5 minutes.
- 7-day free trial
- No credit card required
- Cancel anytime