The same day we are notified by the customer we contact the merchant and receive information verifying the name, email address, IP address and other info for the account holder.
Many banks waste too much time trying to contact merchants, etc. trying to determine whether or not an ACH was authorized. It's a total waste of time by the banks.
You might want to review this document:
https://www.nacha.org/news/ach-operation...esponsibilitiesInstead, the ACH Network is set up to empower consumers to dispute transactions that they believe were not validly authorized, and to give effect to consumer rights under Regulation E. RDFIs must accept Written Statements of Unauthorized Debit from their consumers, must credit the consumer’s account in the amount of the unauthorized debit, and may return the debit to the ODFI that warranted the validity of the authorization in the first place.
It's a one, two, three step and the bank is out of the middle with no wasted time.