You can use your checking account to pay for online purchases in three main ways: debit card, ACH transfer, or bank transfer at checkout
The easiest method is your debit card, which pulls money directly from your checking account. Most online stores accept Visa, Mastercard, or Discover debit cards at checkout — you enter the card number, expiration date, and CVV (the three-digit code on the back), just like a credit card. The money leaves your account within one to three business days.
Some stores also let you link your checking account directly through ACH (Automated Clearing House), a bank-to-bank transfer system. This is common at grocery delivery services, utility companies, and subscription services. You provide your routing number and account number instead of a card number. ACH transfers are slower — typically three to five business days — but some people prefer them because they feel more secure.
A third option is bank transfer at checkout, where you're redirected to your bank's website to authorize the payment directly. This method is less common in the U.S. but growing, especially for larger purchases.
Key Takeaways
- Debit cards linked to your checking account work at nearly every online store and process within one to three business days.
- ACH transfers pull money directly from your account but take three to five business days and are mainly used by subscription and utility services.
- Always check that the website has a secure connection (look for "https://" and a padlock icon) before entering your account information.
- Your bank's fraud protection covers unauthorized debit card charges, but ACH transfers have different rules — contact your bank to understand your coverage.
How debit cards work for online shopping
Your debit card is the fastest and most widely accepted way to spend from your checking account online. At checkout, you enter the 16-digit card number on the front, the expiration date, and the CVV on the back. The store processes the charge immediately, but the money may not leave your account for one to three business days — this delay is normal and doesn't mean the charge failed.
Check your account balance before you buy, because the money will come out even if your balance drops below zero afterward. If it does, your bank may charge an overdraft fee. Some banks let you turn off overdraft protection so purchases simply decline if you don't have enough funds.
Debit card fraud is covered by federal law: if someone uses your card number without permission, you're liable for no more than $50 if you report it within two business days, and $0 if you report it within 60 days. Report fraud to your bank immediately by phone or through your online banking portal.
Using ACH transfers and bank account linking
ACH transfers let you authorize a company to pull money directly from your checking account. You'll provide your routing number (a nine-digit code that identifies your bank) and your account number (usually 10 to 12 digits). You can find both on the bottom left of a check, or log into your online banking to view them.
ACH is common for recurring charges like streaming services, gym memberships, and insurance payments. The transfer takes three to five business days, so don't expect the money to leave immediately. If you cancel a subscription, contact the company to stop the ACH authorization — canceling your card won't stop an ACH payment.
ACH fraud protection is weaker than debit card protection. If someone sets up an unauthorized ACH transfer from your account, you have 60 days to report it to your bank, but your bank has up to 10 business days to investigate. During that time, the money may stay frozen. Contact your bank right away if you see an ACH charge you didn't authorize.
Checking security before you enter your information
Before you type your account or card number into any website, verify that the connection is secure. Look at the address bar: it should start with "https://" (not just "http://"), and there should be a small padlock icon next to the web address. These signals mean the website encrypts your information as it travels to the company's servers.
Never enter your account information on a public Wi-Fi network — use your home network or your phone's data connection instead. Public Wi-Fi is easier for thieves to intercept. If you're on the go and need to buy something, wait until you're on a secure network, or use your phone's cellular data.
Be cautious of emails or text messages that ask you to click a link and enter your banking details. Legitimate companies rarely ask for this information by email. If you're unsure, go directly to the company's website by typing the address into your browser, rather than clicking a link in an email.
What happens if a charge is wrong or unauthorized
If you see a charge you don't recognize, contact your bank within 60 days. For debit card charges, your bank must investigate and return your money within two business days if the charge was fraudulent. For ACH transfers, your bank has up to 10 business days to investigate, though they may credit your account temporarily while they look into it.
If you authorized a charge but the item never arrived or was damaged, that's a dispute with the merchant, not your bank. Contact the store's customer service first and ask for a refund. If the store won't refund you, you can ask your bank to dispute the charge, but this takes longer than fraud claims — usually 30 to 60 days.
Keep records of your online purchases: save confirmation emails, screenshots of the order, and receipts. If you need to dispute a charge, you'll need proof of what you ordered and when.
Protecting your checking account from repeated charges
If you sign up for a free trial and forget to cancel before the trial ends, the company will charge your account. Read the terms carefully before you enter your payment information — look for the cancellation deadline and how to cancel. Many companies make canceling harder than signing up, so write down the cancellation instructions before you complete the purchase.
For subscriptions, set a phone reminder a few days before the trial ends. Log in to your account and cancel before the charge hits. If you're charged after you canceled, contact the company's customer service with proof that you canceled (a screenshot or email confirmation). Most will refund the charge if you ask within 30 days.
You can also revoke ACH authorization at any time by contacting your bank or the company directly. Tell your bank you want to stop the authorization, and they'll block future payments. This is faster than trying to cancel through the company's website.
Comparing debit cards, ACH, and other payment methods
| Payment Method | Processing Time | Where It Works | Fraud Protection |
|---|---|---|---|
| Debit Card | 1–3 business days | Nearly all online stores | $0 liability if reported within 60 days |
| ACH Transfer | 3–5 business days | Subscriptions, utilities, some retailers | Up to 10 days to investigate; weaker protection |
| Bank Transfer at Checkout | 1–3 business days | Growing but still uncommon in U.S. | Varies by bank and retailer |
Debit cards are the fastest and most protected option for most online shopping. ACH is better if you're making recurring payments and don't mind waiting longer. Bank transfer at checkout is safest because you authorize the payment directly through your bank's website, but few U.S. stores offer it yet.
Frequently Asked Questions
Can someone steal my checking account number if I use it to shop online?
Yes, but only if the website is not secure or if your computer has malware. Always check for "https://" and a padlock icon before entering your account number. If your account number is stolen, your bank's fraud protection covers unauthorized ACH transfers if you report them within 60 days. For debit card fraud, protection is stronger — you're liable for $0 if you report within 60 days.
Is it safer to use a debit card or link my bank account directly?
Debit cards have stronger fraud protection under federal law. If your debit card number is stolen, you're liable for no more than $50 if you report it within two business days. ACH transfers have weaker protection and take longer to investigate. For one-time purchases, use your debit card. For recurring charges you trust, ACH is fine.
What's the difference between my debit card and my account number?
Your debit card is a physical card with its own 16-digit number, expiration date, and CVV. Your account number is the number on your checks and in your online banking portal. Both pull from the same checking account, but debit card charges are processed faster and have better fraud protection than ACH transfers using your account number.
Why is my debit card charge still pending after three days?
Pending charges usually clear within one to three business days. Weekends and bank holidays don't count as business days. If a charge is still pending after five business days, contact your bank — it may be stuck. Don't assume the charge failed just because it's pending; the money is already reserved in your account.
Can I stop a payment after I've entered my information at checkout?
For debit card charges, contact your bank immediately — they may be able to stop it if it hasn't processed yet. For ACH transfers, you have more time because they take three to five days, so call your bank or the company right away. Once a charge has posted to your account, you'll need to request a refund from the merchant instead.