Is Link Payment Safe? How the ACH Network Protects Your Money
Link Payment is a real ACH transfer, which means your bank and the receiving bank both verify the account before money moves
Link Payment is a bill pay service that moves money from your bank account to a biller using the ACH network—the same system your employer uses to deposit your paycheck. The ACH network is run by Nacha, a nonprofit that sets security rules for all banks and billers on it. Your bank checks that your account exists and has enough money. The biller's bank checks that their account is real. Money does not move until both sides confirm.
This verification step is what makes ACH safer than writing a check or giving someone your card number. A check can be lost or altered. A card number can be stolen and used anywhere. An ACH transfer can only go to the specific bank account you named, and only if that account passes the receiving bank's checks.
That said, ACH transfers are not risk-free. The risk is not in the network itself—it is in what happens before the money leaves your account and what you do to protect your login credentials.
Key Takeaways
- Link Payment uses the ACH network, which requires both your bank and the biller's bank to verify accounts before any transfer happens.
- Your bank can reverse an ACH transfer within a set window if you report it as unauthorized, though the process takes time.
- The biggest risk is not the network but your own account security—if someone logs into your bank account, they can set up a Link Payment transfer to themselves.
- Link Payment is safer than mailing a check or giving your card number to a biller, because the money can only reach the account you specifically authorized.
- You should check your bank statement within a few days of setting up a Link Payment to confirm the amount and date are correct.
How ACH transfers work and why verification matters
When you set up a Link Payment, you give the biller your bank account number and routing number. The biller sends this information to their bank, which sends it to the ACH network. The ACH network routes it to your bank. Your bank checks that the account number and routing number match a real account in their system and that you authorized the transfer. If everything checks out, your bank approves it. The biller's bank does the same on their end.
This back-and-forth verification is why ACH transfers take one to three business days instead of happening instantly. The delay is a security feature, not a bug. It gives your bank time to catch problems before money leaves your account.
The ACH network itself does not store your account number. It is only used to route the transfer. Once the transfer is complete, the biller has a record of the account it came from, but the ACH network does not keep that information on file.
What happens if you report a Link Payment as unauthorized
If you see a Link Payment on your statement that you did not make, you can report it to your bank as unauthorized. Your bank has a legal window to investigate—usually 10 business days—and must tell you the outcome. If your bank agrees the transfer was unauthorized, they will reverse it and put the money back in your account.
The catch is that reversing an ACH transfer is not instant. Your bank has to contact the biller's bank, which has to investigate on their end. The whole process can take two to four weeks. During that time, the money is gone from your account. If you need that money immediately, you may have to cover the bill another way while the reversal is pending.
This is why it matters that you check your bank statement within a few days of setting up a Link Payment. The sooner you spot a problem, the sooner you can report it and start the reversal clock.
The real security risk: your login credentials and account access
The ACH network itself is secure. The real risk is someone logging into your bank account without your permission. If a person has your username and password, they can set up a Link Payment to transfer money to an account they control. The ACH network will process it normally because, from the network's perspective, the transfer came from an authorized user of your account.
This is why your bank asks security questions, sends you a code by text or email, or uses a fingerprint or face scan to confirm your identity before you can set up a new Link Payment. These steps are meant to stop someone who has stolen your password but does not have access to your phone or email.
To protect yourself: use a password manager to create a unique, long password for your bank account. Do not reuse the same password across multiple websites. If you get an email or text asking you to confirm a Link Payment you did not set up, do not click the link—call your bank directly using the number on the back of your card.
How Link Payment compares to other payment methods
A check is physical and can be lost, stolen, or altered. The person who cashes it does not have to prove they own the account it is drawn on. A credit or debit card number can be stolen and used to buy things anywhere that accepts that card. A wire transfer is instant and irreversible—if you send money to the wrong account, you usually cannot get it back.
Link Payment sits in the middle. It is slower than a wire transfer but faster than a check. It is more secure than a card number because the money can only go to one specific account. It is reversible if something goes wrong, unlike a wire. The tradeoff is that you have to give the biller your bank account number, which some people are uncomfortable with. That discomfort is understandable, but the account number alone cannot be used to withdraw money from your account—only your bank can do that, and only if the transfer is authorized by you or by someone who has access to your login credentials.
What to do before and after you set up a Link Payment
Before you set up a Link Payment, make sure you are on the biller's official website or app, not a phishing site that looks like it. Phishing sites are designed to steal your bank information. Check the URL in your browser—it should start with "https://" and match the biller's real domain name. If you are unsure, call the biller's customer service number from your bill and ask them to walk you through the process.
After you set up a Link Payment, write down the date, the amount, and the biller's name. Check your bank statement a few days later to confirm the transfer went through for the correct amount on the correct date. If the amount is wrong or the date does not match what you authorized, contact your bank right away. Do not wait.
If you set up recurring Link Payments, check your statement every month for the first three months to make sure the amount and date stay consistent. After that, spot-check every few months. Billers sometimes change the amount they charge, and you want to catch that before you end up overdrawn.
What your bank is responsible for and what you are responsible for
Your bank is responsible for verifying that your account is real and that you authorized the transfer before it leaves your account. Your bank is also responsible for investigating if you report the transfer as unauthorized and reversing it if they agree with you.
You are responsible for keeping your login credentials secure and for checking your statement to catch unauthorized transfers. You are also responsible for making sure you authorized the transfer in the first place—if you set up a Link Payment by mistake, that is not your bank's problem, and they will not reverse it.
Some banks offer additional protections, like alerts that notify you by text or email when a new payee is added to your account or when a transfer over a certain amount is made. Ask your bank what protections they offer and whether you can turn on extra alerts for Link Payments.
Frequently Asked Questions
Can someone use my bank account number to take money out without my permission?
No. A bank account number alone cannot be used to withdraw money. Only your bank can move money out of your account, and only if the transfer is authorized by you or by someone who has your login credentials. If you are worried about giving your account number to a biller, remember that your employer already has it—that is how they deposit your paycheck.
What if the biller goes out of business after I set up a Link Payment?
If the biller closes, the Link Payment will fail when your bank tries to send the money to their account. Your bank will return the money to your account and notify you. You will then need to find another way to pay the bill or contact the company that took over the biller's accounts.
Can I cancel a Link Payment after I set it up?
Yes, but timing matters. If you cancel before the transfer is processed, it will not go through. If you cancel after the transfer has already been sent to the biller's bank, you will need to report it as unauthorized and ask your bank to reverse it. Check your bank's website or app to see if you can cancel a pending transfer yourself, or call customer service.
Is Link Payment safe for paying bills to companies I have never heard of?
Link Payment is safe in the sense that the ACH network is secure and your bank will verify the transfer. But you should still be cautious about giving your bank account number to an unfamiliar company. Check whether the company is legitimate, read reviews, and make sure you are on their official website before you enter your account information.
Do I need to worry about Link Payment if I use online banking?
Link Payment is part of online banking, so the same security rules apply. Use a strong, unique password. Do not log in on public WiFi. Do not share your login credentials with anyone. If your bank offers two-factor authentication, turn it on. These steps protect all of your online banking activity, including Link Payments.