Payroll Direct Deposit: A Guide for Small Employers

Every guide to payroll direct deposit is written by a payroll company, and every one of them arrives at the same conclusion, which is that you should use their payroll company. That is not dishonest, but it does mean the parts they gloss over are the parts you most need.

So here is the thing they skip, and it is the single most misunderstood point in this entire subject: federal law does not stop you from requiring direct deposit. Most employers believe it does. What the Electronic Fund Transfer Act actually prohibits is requiring an employee to bank at an institution you choose. The employee picks the bank; that is the protection. Whether you can mandate direct deposit at all is a state question, and it is one most owners have never looked up.

The second thing they skip is where the real work lives. Setting up direct deposit is a payroll task and it takes an afternoon. Collecting a signed authorization from every employee, storing it somewhere defensible, and still having it years after they leave, because several states require exactly that, is a records task. It never ends, it is entirely on you, and your payroll provider will not do it.

This guide covers both. It is written for a US business with five to fifty people and no HR department. Being direct about what I build: FirstHR is not a payroll processor and does not move money. Your payroll provider does the ACH. What I build is the layer that collects the authorization forms, holds the employee records, and makes sure the consent you are legally required to keep is still there in six years. This is general information rather than legal advice, state wage payment laws vary considerably, and this is an area where a short conversation with an employment attorney is cheap insurance.

What Direct Deposit Is

Payroll direct deposit is the electronic transfer of wages from your business bank account into your employee's bank account. No paper, no signing, no distributing, no reconciling checks that were never cashed.

The thing worth internalizing early is that you are not moving the money. You are submitting instructions to a network that moves the money on its own schedule, under its own rules, with its own timelines. That distinction explains almost everything that surprises employers about direct deposit, starting with why the deadline is so far ahead of payday, and it interacts directly with your pay schedule.

How the Money Actually Moves

Four parties, one of which is you, and you have influence over exactly one step.

The ACH network is a batch system, not a real-time one. Payments are collected, sorted, and settled in cycles rather than instantly. That design is the reason for the one to two day standard settlement, and it is why your payroll provider imposes a cutoff several days before your pay date.

Same-day ACH exists, and some providers offer next-day or same-day funding, generally at a premium and often with limits. But the default, and what almost every small employer runs on, is the standard batch timeline. Plan around it rather than fighting it, and remember that it sits on top of the lag you already have from paying in arrears.

Why Employers Use It

The honest answer has three parts, and only one of them is about cost.

Look at the reconciliation row, because it is the one owners underrate. Paper checks create an open item for every payment, and some of those items stay open for months because the employee lost the check, or moved, or simply never cashed it. Direct deposit is one debit. It clears or it does not, and you know immediately.

And look at the last row, which is the one that actually matters at hiring. Almost every American worker is paid by direct deposit. An employer who offers only paper checks is not seen as traditional; they are seen as behind, and the person deciding whether to accept your offer is doing that arithmetic whether they mention it or not. It sits alongside every other operational signal covered in the small business HR guide.

What You Need Before You Start

Two lists, and the second one is where every delay comes from.

The right-hand column is the whole game. Every one of those items has to come from a person who has other things on their mind, and the moment you are collecting them by email, screenshot, and text message, you have created both a data security problem and a delay. It belongs with the rest of the onboarding documents, collected once and properly.

How to Set Up Direct Deposit for Employees

Six steps. The first four are one-time, the last two repeat every cycle.

Steps four and five are the ones that get compressed when you are busy, and they are the two that cause the failures. An employee whose account number was never verified is an employee whose first paycheck bounces, and their first paycheck was already late because you pay in arrears like everyone else.

The Authorization Form

Small piece of paper, and it is doing more legal work than most employers realize. In several states it is not optional, and in at least one it has to survive for six years after the employee's last paycheck.

What it needs to contain is straightforward.

The reversal clause in the second-to-last row is the one people skip and later wish they had not. If you overpay someone by mistake, an authorization that explicitly permits correcting an erroneous entry puts you in a materially better position than one that does not. It is one more form in a stack that is worth standardizing rather than improvising, as the onboarding forms guide sets out.

Timing and Cutoffs

The single most common operational failure with direct deposit is a missed cutoff, and it is entirely preventable.

The bank holiday row deserves a moment. Your payroll calendar has a payday on it. The ACH network has a holiday calendar. Those two things do not consult each other, and if your pay date falls just after a federal holiday, your submission deadline moved and nobody told you. The separate question of whether the holiday itself is paid is covered in the holiday pay rules guide.

Your own account has to be funded

Easy to overlook because it is invisible until it fails. Your payroll provider debits your account to fund the payments, usually a day or two before payday. If the money is not there, the debit is returned for insufficient funds, the payroll does not go out, and you have a returned-item fee plus a team that did not get paid.

That failure is entirely yours. The bank did nothing wrong and the provider did nothing wrong. Know when the debit hits your account, not just when the money hits theirs, and keep a buffer for the pay period that lands on a bad week for cash.

What It Costs

Less than checks, which is why this question rarely decides anything. But the components are worth knowing so you are not surprised.

The comparison that matters is not the ACH fee against the price of a check. It is the ACH fee against the fully loaded cost of a check, which includes the twenty minutes someone spends printing and signing them, the stop-payment fee when one goes missing, and the reconciliation of the ones that never cleared. Priced honestly, direct deposit is cheaper at almost any headcount above one, and the time it frees is the kind that otherwise disappears into HR admin.

Can You Require Employees to Use Direct Deposit?

This is the question everyone asks and almost everyone has the wrong answer to. So let us be precise about what federal law actually says, because it is narrower than the folklore.

That distinction is not a technicality. It is the whole answer, and it means the federal government is not the thing standing in your way. What may be standing in your way is your state, which is true of a surprising amount of employment law.

The rule that implements the EFTA is Regulation E, issued by the CFPB and codified at 12 CFR Part 1005. It is worth knowing the name, because most of the specific obligations around electronic wage payments, including error resolution procedures and the rules on payroll cards, live there rather than in the statute.

There is one more federal constraint worth knowing, and it comes from the wage laws rather than the banking ones. The DOL position, set out in its Field Operations Handbook, is that direct deposit is an acceptable method of payment provided employees have the option of receiving payment by cash or check. Layered on top is the FLSA requirement that wages be paid free and clear, which means any arrangement that imposes fees eating into the employee's pay, particularly for anyone near minimum wage, is a problem regardless of how the payment is delivered.

The Texas Workforce Commission maintains a useful summary of the federal framework that walks through the interaction between the EFTA and the DOL position, and it is worth reading even if you are not in Texas.

Consent and State Law

Here is where the real rules are, and where you should actually be looking. State wage payment laws diverge sharply, and the law that applies is the law of the state where the employee works, not where you are incorporated.

Broadly, states fall into three groups. Some allow mandatory direct deposit with few conditions. Some allow it but require that the employee be given a genuine alternative, typically a check. And some require the employee's written consent before you can pay by direct deposit at all, which effectively makes it voluntary in that state no matter what your policy says. If you employ anyone in California, start with the California compliance guide.

New York sits at the strict end and is worth walking through, because it shows what a maximal version of these obligations looks like.

Now look at what that actually is. Notice, consent, copy, retention for six years past the end of the relationship. Not one of those is a payroll function. They are document management, and they are your problem, and a payroll provider that processes the ACH beautifully will do nothing for you here.

Two more details from the strict states that catch people. Consent obtained through intimidation, coercion, or fear of adverse action is not valid consent, which means a manager telling someone that direct deposit is how things are done here may have voided the very form they just collected. And employees can withdraw consent, with the employer typically given a short window, often no more than two pay periods, to move them back to a check. Both are worth stating explicitly in your company policy rather than leaving to a manager to improvise.

Storing the Bank Data and the Forms

You are now holding two things you did not have before: the bank account credentials of everyone who works for you, and a set of signed legal consents you may be required to produce years from now. Neither belongs where most small employers put them.

Ask yourself where the signed authorization forms actually are right now. If the honest answer is a shared drive folder, an inbox, or a physical drawer that only one person can find, you do not have a records system. You have a pile, and a pile is not something you can produce on demand for a labor agency six years after somebody left. This is what document management is actually for.

The last two rows are the ones that no payroll system tracks and that almost no small employer thinks about. Consent is not a checkbox; it is a sequence of events with dates, and the sequence is what you may one day have to demonstrate. Where this belongs is in the personnel file, held to the standards described in the guide to how long to keep employee records.

Fitting It Into Onboarding

Direct deposit setup is an onboarding task masquerading as a payroll task, and treating it as the latter is why it goes wrong.

Think about the timing. A new hire needs to provide bank details, sign an authorization, have the numbers verified, possibly wait out a prenote, and clear the payroll cutoff, all before their first pay date, which is already late because you pay in arrears. There is not much slack in that. Moving the whole collection step into digital onboarding is what buys the slack back.

The broader set of documents this sits alongside is covered in the new hire paperwork guide, and the sequencing in the onboarding checklist.

Security and Fraud

You are now holding the bank credentials of everyone who works for you, and there is a criminal industry built specifically around getting them out of you. Almost no small-business guide to direct deposit mentions this, which is remarkable given that the FBI has issued repeated warnings about it.

Payroll diversion fraud

The attack is simple and it works. Someone emails your HR or payroll contact, appearing to be an employee, asking to update their direct deposit account. The request looks routine. It gets processed. On payday, the wages go to an account controlled by the criminal, usually a prepaid card, and the money is gone before anyone notices.

Sit with the shape of that attack. Nothing about it requires breaking into your systems. It requires only that a person in your company processes a plausible email without picking up the phone. At a company of twelve people, that person is probably you, and you are probably doing it between two other things.

How to not fall for it

Per FBI guidance on business email compromise, the recommended defence is to use secondary channels or two-factor authentication to verify requests for changes in account information. If a fraudulent transfer does go out, contact the originating financial institution immediately to request a recall, and file a complaint with the IC3.

The data itself

Separately from fraud, you are holding sensitive personal financial data, and how you hold it matters.

The third row is the one to act on today. If bank details are currently in your inbox, they are in a system that was never designed to hold them, that you cannot audit, and that is the single most commonly compromised surface in any small business. The employee data protection policy is where the rules for this belong.

When Things Go Wrong

Three failure modes, in increasing order of unpleasantness.

The payment is returned

The account was closed, or the number was wrong in a way the bank could detect. The money comes back, you find out, and you reissue. Annoying, recoverable, and the employee is paid late. This is what a prenote is designed to prevent.

The money went to the wrong account

Considerably worse, because the account was valid, just not the right one. A transposed digit in an account number can land your employee's wages in a stranger's account.

Nacha rules permit an originator to request the reversal of an erroneous entry within a limited window. But a reversal is a request, not a guarantee: the funds may already have been withdrawn, and the receiving bank cannot simply seize money from a customer's account on your say-so. If the recipient does not cooperate, recovery becomes a legal matter, and meanwhile your employee has not been paid, which is its own wage law problem.

Which is the entire argument for the boring steps. The voided check and the prenote look like bureaucracy right up until the moment they are the only thing between you and this.

Deductions come out before the ACH, not after

Worth stating because employers get the order wrong. Garnishments, child support withholding, taxes, and benefit deductions are all applied to gross pay before the payment file is created. What goes into the ACH is net pay.

You do not send the full amount and reclaim the difference afterwards. That is not how any of this works, and if you have an active income withholding order for someone, the withheld amount never enters the direct deposit in the first place.

You overpaid someone

A different problem with the same shape. Correcting an overpayment through a payroll deduction is restricted by state law, often requires written employee authorization, and in some states is simply not permitted without one. An authorization form that explicitly permits reversal of an erroneous deposit puts you in a much stronger position, which is why that clause belongs in the form even though nobody reads it.

The final paycheck may be too fast for ACH

This one is a scheduling problem rather than an error, and it catches employers at the worst moment. Several states require final wages to be paid immediately on an involuntary termination, or within a day or two. Standard ACH takes one to two business days and your provider's cutoff sits ahead of that.

Do the arithmetic and you will find that in a strict state, you cannot meet the deadline with a normal direct deposit run. The answer is either an off-cycle payment with expedited funding, or a paper check handed over on the day. Which is one more reason the ability to cut a check never fully goes away, and one more thing to know before you need it rather than during the conversation.

Contractors are a different arrangement

You can and probably should pay 1099 contractors by ACH as well, but understand that it is not the same thing. They are not employees, so the wage payment laws, the consent requirements, and the EFTA employment protections that govern paying your staff do not apply in the same way. What governs it is your agreement with them.

The practical difference is that a contractor payment is a vendor payment, and it belongs in accounts payable rather than in payroll. Running contractors through your payroll system because it is convenient blurs a line you generally want to keep sharp.

The Employee Without a Bank Account

It will happen, and most small employers have no plan for it. Some people are unbanked because of cost, some because of past account problems, and some because they have chosen to be.

You cannot direct deposit into an account that does not exist, and you cannot make having one a condition of employment. So you need an answer, and there are two.

Payroll cards are a legitimate option and they solve a real problem, but they come with strings. Per CFPB guidance, an employer cannot require an employee to accept a payroll card, and employees must be given at least one other way to be paid. Several states go further, requiring that the employee be able to withdraw their full net wages at least once per pay period without any fee.

The practical upshot is that the paper check never fully goes away. You may pay 100 percent of your team by direct deposit today, and you should still know how you would cut a check next week if you had to, because at some point you will have to.

Common Mistakes

These recur, and the first two are the expensive ones.

The unifying error is treating this as purely a payments problem. Half of it is a records problem, and the records half is the half with obligations that outlive the employee, that no payroll provider handles for you, and that you will only discover you got wrong at the exact moment someone asks you to produce a document from six years ago. The rest of the recurring small-employer errors are collected in the HR rules and regulations guide.

Frequently Asked Questions