By Hans Shannon August 3, 2026
Most gym owners treat cards and ACH as interchangeable ways to collect dues. They are not. They run on different networks, price differently, fail differently, and carry different consent obligations — and for recurring monthly billing those differences compound across every member, every month.
How ACH and Card Payments Actually Move Money
The two rails have genuinely different architectures, and the difference explains most of what follows.
ACH is a batch network with five parties
An ACH debit is not a direct transfer between your bank and your member’s. The chain runs: Originator (your gym) → ODFI (your bank, which originates the entry) → ACH Operator → RDFI (the member’s bank) → Receiver (the member). Most gyms also sit behind a payment processor or third-party sender, adding another party.
There are two national ACH operators, not one: the Federal Reserve Banks (FedACH) and the private Electronic Payments Network operated by The Clearing House. A payment may clear entirely through EPN and never touch a Federal Reserve clearing system, though EPN still settles net positions across participants’ Federal Reserve accounts; when the two banks use different operators, the Reserve Banks settle between them.

Card payments authorize instantly but fund later
Card authorization is near-instant, which is why cards feel faster. Merchant funding is a different question. Major gateways document settlement of roughly two business days from capture before funds are available for payout, with a new merchant’s first payout commonly held one to two weeks. Standard transfers then arrive the next business day, later if the payment falls after the daily cutoff or over a weekend. Same-day funding is usually available for an additional fee.
The speed assumption is often backwards
Standard ACH settles on a following banking day. But Same Day ACH has existed since 2016 and now runs three settlement windows per banking day: submit by 10:30am ET and it settles at 1:00pm ET, by 2:45pm ET for 5:00pm settlement, by 4:45pm ET for 6:00pm settlement, subject to a $1,000,000 per-payment limit. A Same Day ACH debit can therefore reach you the same afternoon — faster than the next-business-day-to-T+2 funding typical of card processing. Whether you can use it depends on your bank and processor supporting it, and same-day origination usually costs more.
The Cost Difference Is Structural, Not a Fixed Number
Here is the part most comparison articles get wrong by inventing numbers. The important difference is not a specific percentage — it is the shape of the pricing.
Card processing is priced as a percentage of the transaction, usually plus a small fixed amount. The cost of collecting dues therefore scales with the price of your membership: a premium tier costs proportionally more to bill than a basic one.
ACH is typically priced as a flat fee per transaction, or a percentage with a low cap. The cost of collecting is close to constant regardless of the amount, so the higher your dues, the wider the gap.
That structural asymmetry is why ACH tends to win on recurring high-value memberships and matters far less on a $15 day pass. What it is worth for you depends entirely on your own rates, your average membership price, and your member count — so run it against your actual merchant statement rather than any published range. Ask your processor for your effective rate per transaction on both rails, multiply by your monthly billing volume, and you will have a real number instead of an industry average. If that exercise suggests it is time to change platforms, our comparison of payment processing solutions for modern gyms covers what to ask for.

Consent and Compliance Obligations Differ
General information about payment rules, not legal advice. State law governing gym membership contracts varies — confirm your setup with counsel.
A persistent myth holds that cards need nothing more than a number and an expiry date while ACH carries a heavy authorization burden. Both halves are wrong.
Card-on-file billing has substantial consent requirements
Visa’s operating rules (Visa Core Rules and Visa Product and Service Rules, 18 April 2026, §5.8.11.1) require express informed consent before you store a credential, to an agreement stating what is sold, the total price, your cancellation and refund policy, your contact details, the last four digits of the card, the amount or how it is calculated, the currency, how the stored card will be used, the timing and frequency of charges, and the length of any trial period — displayed separately from your general terms and retained for the life of the agreement. Recurring transactions additionally require a simple cancellation procedure, an online one where the member signed up online, and at least seven days’ notice before a trial or promotional rate ends.
ACH requires a retained authorization
ACH debits require the member’s authorization, retained and producible. This is a real obligation, but it is a difference of form rather than a difference of seriousness — both rails require documented consent you can produce months later when someone disputes.
You are not required to offer two payment methods
You may see the claim that the Electronic Fund Transfer Act or Regulation E require offering at least two electronic payment methods. No such requirement exists under federal law, and nothing in Regulation E stops a gym from accepting ACH only.
What Regulation E’s compulsory-use provision (12 CFR §1005.10(e), implementing 15 U.S.C. §1693k) actually prohibits is conditioning an extension of credit on repayment by preauthorized electronic fund transfer. So if you finance a membership — an initiation fee spread over payments, or a multi-month contract structured as a debt — you cannot make automatic ACH debit the only permitted way to repay it. Ordinary month-to-month dues collected by ACH are not an extension of credit and are unaffected. How you present those terms at signup matters commercially as well as legally — see transparent membership pricing.
State law adds obligations the networks do not
Card-network rules and the Nacha rules are not the whole compliance picture. State automatic-renewal and health-club statutes impose their own duties on recurring membership billing — commonly an online cancellation path where the member enrolled online, plus renewal reminders — and they vary by state. The FTC also enforces the Restore Online Shoppers’ Confidence Act and Section 5 of the FTC Act against cancellation friction, and sued the operators of LA Fitness on those grounds in August 2025. Meeting Visa’s requirements does not by itself put you in the clear.
How Disputes Work on Each Rail
The dispute mechanics differ enough to matter operationally, and the timeframes are widely misquoted because two separate clocks get conflated.
Under Regulation E §1005.11, a member’s notice of error must reach their bank no later than 60 days after the institution sends the periodic statement on which the error first appeared. The clock starts at the statement, not the debit — so the practical window can run well past 60 days from the charge itself. The bank then has 10 business days to investigate, or 45 days if it issues a provisional credit.
Separately — and under a different rulebook — the Nacha Operating Rules give the member’s bank until shortly after the 60th calendar day following settlement to return an unauthorized consumer debit, supported by a written statement from the member that is signed or similarly authenticated. A bank hitting that return deadline does not extinguish the member’s rights — it may still have to make the consumer whole and pursue the matter outside the return window.
Card disputes run on the card networks’ representment timetable instead, where your acquirer has 30 calendar days (Visa) or 45 (Mastercard) to respond on your behalf, and your processor will impose an earlier internal deadline. We cover that process in detail in our guide to preventing chargebacks at your gym.
The practical takeaway on both rails is the same: the evidence that resolves a dispute is the authorization record and the proof of use, and you need to be able to produce both quickly.
A Hybrid Strategy Usually Beats Picking One
The strongest setup is not choosing a rail — it is matching each rail to the transaction type it suits.
| Transaction type | Usually better on | Why |
|---|---|---|
| Recurring monthly dues | ACH | Flat-fee pricing does not scale with membership price; no card expiry churn |
| Day passes and drop-ins | Card | One-off, member convenience, no authorization to collect and store |
| Personal training packages | Card | Higher ticket, often impulse, immediate authorization |
| Retail and supplements | Card | Point-of-sale convenience |
ACH-first with card fallback
Attempt ACH for recurring dues and keep a card on file as the fallback when an ACH debit returns. This captures the pricing advantage on the bulk of your billing while keeping a second rail available. Two cautions worth building into the design:
- Retry rules are not discretionary. Reinitiating a returned ACH debit is governed by the NACHA Operating Rules, which limit how many times and in what circumstances you may retry, and processors enforce return-rate thresholds. Confirm your specific limits with your processor before configuring automatic retries — getting this wrong risks your ACH origination privileges. Our dunning workflow guide covers the retry sequence in practice.
- Disclose the fallback at signup. A card kept on file as an ACH backstop is itself a stored credential. Visa’s §5.8.11.1 requires the agreement to state how the stored card will be used and, for unscheduled use, the event that triggers a charge — here, a returned ACH debit. Charging a fallback card the member was never told about is both a rules problem and a fast route to an unauthorized-transaction dispute.
- Do not price an ACH incentive above the saving. If you offer a discount to move members onto ACH, calculate your actual per-member saving first. A discount larger than the processing difference converts a cost saving into a revenue loss on every member who takes it.
Track retention and involuntary churn by payment method once you have both running. Expired and reissued cards are a structural source of failed payments that bank accounts largely avoid — though account updater services from Visa and Mastercard mitigate part of that, and ACH has its own failure mode in insufficient-funds and closed-account returns. Measure both rather than assuming either.
Frequently Asked Questions
Can I require ACH and refuse cards for gym memberships?
Generally yes — nothing in the Electronic Fund Transfer Act or Regulation E requires you to offer two payment methods, and a gym may accept ACH only. The one real constraint is Regulation E’s compulsory-use rule (12 CFR §1005.10(e)): if you are genuinely extending credit, such as financing an initiation fee as an instalment debt, you cannot make preauthorized ACH the mandatory repayment method. Standard monthly dues are not affected.
Which rail actually gets money into my account faster?
It depends on which ACH service you use. Standard ACH settles on a following banking day, while card funding typically lands one to two business days out depending on your processor and account history. Same Day ACH settles the same banking day through one of three windows (1:00pm, 5:00pm, and 6:00pm ET), which can be faster than card funding — if your bank and processor support it, and usually at additional cost.
How long can a member dispute an ACH debit?
Under Regulation E the member generally has 60 days from the statement showing the debit — not from the debit itself — to notify their bank of an error. Separately, their bank generally has until shortly after 60 calendar days from settlement to return an unauthorized consumer debit with a signed written statement. Because the consumer clock starts at the statement, the practical exposure can extend beyond 60 days from the charge. Check specifics with your processor; this is general information, not legal advice.
Can I automatically retry a failed ACH payment?
Yes, but within limits set by the NACHA Operating Rules, which govern how a returned entry may be reinitiated, and subject to return-rate thresholds your processor monitors. The exact number of permitted attempts and the required conditions should come from your processor or ODFI rather than from a general article — the rules are specific and the consequences of exceeding them fall on your origination privileges.
Do I still need written authorization if I use a payment platform?
Yes. Your platform handles the technical compliance, but obtaining and retaining the member’s authorization is your responsibility as the originator — and it is the document that resolves an unauthorized-debit claim. The same principle applies to cards, where Visa’s rules require you to retain the consent terms for the life of the agreement and produce them to the cardholder or issuer on request.