Booster Club ACH Authorization Form: A Secure Payment Approval Workflow

This guide is for informational purposes only and does not constitute legal, accounting, or compliance advice. NACHA operating rules are subject to periodic revision. Consult a licensed CPA, attorney, or your acquiring bank for guidance specific to your organization’s payment channels and jurisdiction.

The programs that invest in recognizing donors and athletes deserve financial controls that protect every dollar contributed—a complete ACH authorization workflow is one of those foundational controls

What Is an ACH Authorization Form?

An ACH authorization form is a written document—signed by an authorized representative of the originating account holder—that grants a specified party the right to initiate ACH credit or debit entries against a designated bank account. Under NACHA rules, originators (the parties pulling funds) must obtain and retain an authorization before initiating any ACH debit. The authorization must be “readily identifiable as an authorization” and must contain specific terms that inform the account holder exactly what they are approving.

For booster clubs, ACH transactions typically arise in three situations:

• Recurring membership dues collected from families via automatic monthly or annual pulls
• Vendor and service provider payments such as tournament registration fees, printing vendors, or software subscriptions billed directly to the club account
• Donor pledge fulfillments where a supporter authorizes the club to pull installment payments on a multi-year gift commitment

Each of these scenarios requires a separate, signed authorization that names the payee, the amount or amount range, the frequency, and the account being debited. A single catch-all authorization does not satisfy NACHA requirements for different payees or materially different payment terms.

School programs that build structured recognition programs apply the same documentation discipline to their financial operations—every authorization on file is a record of accountable stewardship.

Why Booster Clubs Need a Written ACH Authorization Workflow

Volunteer-led organizations face a specific risk profile that makes ACH authorization controls especially important. Treasurer turnover is frequent, board oversight is part-time, and the paper trail for financial decisions is often incomplete. An unauthorized ACH debit—whether from a vendor error, a lapsed authorization, or a change in payment terms—can overdraw a club account, trigger bank fees, and create audit findings that damage the club’s standing with the school district.

A documented authorization workflow addresses three governance gaps at once:

1. Authorization completeness — Every ACH arrangement has a signed form on file before the first transaction clears.

2. Approval accountability — No single officer can independently authorize an ACH arrangement; a second reviewer confirms the terms before the form is filed.

3. Revocation traceability — When a vendor relationship ends or a donor pauses pledges, there is a documented process for notifying the bank and filing the revocation confirmation.

These controls align directly with the dual-control principles described in a booster club dual signature policy and complement the broader framework in a booster club internal controls checklist.

The Eight Required Fields in a Compliant ACH Authorization Form

NACHA does not prescribe a specific form layout, but it does require that certain information appear in any authorization. The following fields satisfy NACHA’s minimum requirements and are designed for the practical realities of a booster club environment.

BOOSTER CLUB ACH AUTHORIZATION FORM
[Club Name] — [School Name]

SECTION A: AUTHORIZING PARTY (ACCOUNT HOLDER)
Club Legal Name: ___________________________________________
EIN / Tax ID: ___________________________________________
Bank Name: ___________________________________________
Routing Number: ___________________________________________
Account Number: ___________________________________________
Account Type:  [ ] Checking   [ ] Savings
Authorized Signatory Name: ___________________________________________
Title / Officer Role: ___________________________________________
Signatory Signature: ___________________________________________
Date: ___________________________________________

SECTION B: PAYEE / ORIGINATOR
Payee / Originator Name: ___________________________________________
Payee Contact Name: ___________________________________________
Payee Phone: ___________________________________________
Payee Email: ___________________________________________

SECTION C: TRANSACTION TERMS
Authorization Type:  [ ] One-Time   [ ] Recurring
Payment Amount:  [ ] Fixed: $____________  [ ] Variable (not to exceed $____________)
Payment Frequency:  [ ] Monthly   [ ] Quarterly   [ ] Annual   [ ] Other: ____________
First Scheduled Payment Date: ___________________________________________
Final Payment Date or Number of Payments: ___________________________________________
Purpose / Description: ___________________________________________

SECTION D: REVOCATION TERMS
This authorization will remain in effect until the Club provides written notice of
revocation to [Payee Name] at least [3 / 7 / 10—select one] business days before
the next scheduled payment date. Revocation must be confirmed in writing by both
parties and a copy filed in the Club's financial records.

SECTION E: BOARD APPROVAL
First Approver Name: ___________________________________________
First Approver Title: ___________________________________________
First Approver Signature: ___________________________________________
Date: ___________________________________________

Second Approver Name: ___________________________________________
Second Approver Title: ___________________________________________
Second Approver Signature: ___________________________________________
Date: ___________________________________________

FILED BY: ___________________________________________  DATE: ___________________________________________

Notes on each section:

• Section A establishes that the club—not an individual officer acting personally—is the account holder authorizing the transaction. The EIN field distinguishes the club from any individual’s personal account.
• Section B names the originator so the bank can identify unauthorized pullers if a disputed debit appears.
• Section C specifies whether the authorization is one-time or recurring and caps variable-amount transactions so the payee cannot pull an unexpected sum.
• Section D locks in the revocation notice period. NACHA requires that account holders can revoke a recurring authorization with “reasonable notice”—three to ten business days is the standard range most banks recognize.
• Section E enforces dual approval before any authorization is filed, consistent with the financial controls in a booster club invoice approval workflow.

Seven-Step ACH Payment Authorization Workflow

A form alone is not a workflow. The steps below describe how a booster club moves from identifying a new ACH payment need to filing the completed authorization and monitoring the account for correct execution.

Step 1: Identify the Payment Need

The treasurer or relevant committee chair documents the payment need in writing—including the payee, the amount, the frequency, and the budget line it comes from. This documentation goes to the board or finance committee before any authorization form is prepared.

Step 2: Confirm Budget Availability

The treasurer verifies that the proposed payment is within the approved budget. For amounts exceeding the club’s single-transaction approval threshold (commonly $500 to $2,500 depending on club bylaws), the full board must approve the expenditure before an ACH authorization is executed. Refer to your booster club purchasing policy for applicable thresholds.

Step 3: Obtain Payee Information

Contact the payee to collect the information required for Section B of the form. Confirm the exact legal name of the originator that will appear on ACH transactions—this name must match what appears on bank statements to simplify reconciliation.

Step 4: Complete and Sign the Authorization Form

The treasurer completes Sections A through D and signs as the first authorized signatory. Do not file or transmit the form until a second officer has reviewed and signed Section E. Pre-signed forms with blank payee fields are not compliant authorizations.

Step 5: Obtain Second Approver Signature

A second board officer—typically the president or a designated finance committee member—reviews the completed form, confirms the terms match the board-approved expenditure, and signs Section E. The two-signature requirement ensures no single officer can unilaterally authorize a recurring debit against club funds.

Step 6: File the Signed Authorization

File the completed original in a secure physical or encrypted digital folder labeled “ACH Authorizations — Active.” Provide a copy to the payee. If the authorization was transmitted electronically, retain a copy of the transmission confirmation. Record the authorization in the ACH authorization log (see below).

Step 7: Monitor and Reconcile

On each bank reconciliation cycle, compare actual ACH debits to the authorization log. Any debit that does not match a filed authorization—by payee name, amount, or frequency—should be flagged as a potential unauthorized transaction and reported to the bank within the dispute window (typically 60 days for business accounts, though your account agreement governs). Keeping a current booster club bank reconciliation checklist makes this comparison systematic rather than ad hoc.

Every recognition display that honors student-athletes is funded through the financial controls a booster club maintains—ACH authorization workflows are part of that infrastructure

ACH Authorization Log Template

Maintaining a simple log of all active authorizations gives the treasurer and auditors a single reference point during reconciliation and the annual audit.

Use sequential numbering that restarts each fiscal year. When an authorization is revoked, move the record to an “ACH Authorizations — Revoked” folder and update the Status column. The log becomes an exhibit in the annual audit and supports the findings in a booster club audit checklist.

Revoking an ACH Authorization

Revocation is not automatic when a vendor contract ends or a donor pauses a pledge. The club must take affirmative steps to stop future debits.

Revocation procedure:

1. Prepare a written revocation notice that identifies the authorization by number, payee name, account, and original authorization date.
2. Send the revocation to the payee at least the number of business days specified in Section D before the next scheduled payment.
3. Simultaneously notify the club’s bank in writing that the authorization has been revoked and request that the bank block future debits from that originator if the payee does not stop the transactions.
4. Obtain written confirmation from the payee acknowledging the revocation.
5. Move the authorization form and revocation correspondence to the “ACH Authorizations — Revoked” folder.
6. Update the ACH authorization log to reflect the revocation date and status.

If a debit posts after the revocation was properly delivered, the bank can initiate a return using NACHA return code R07 (authorization revoked by customer). The revocation notice and the payee’s written acknowledgment are the documentation the bank needs to process the return.

Connecting ACH Controls to Donor Stewardship

For booster clubs that collect pledge installments from major donors, the ACH authorization form is also a stewardship document. It signals to the donor that the club handles their payment information with the same care it gives to recognizing their contribution. All-state athletes and other honored community members build relationships with programs over years and decades—and those relationships depend on the trust that comes from sound financial practices.

When a donor authorizes recurring pledge pulls, include a brief acknowledgment in the authorization cover letter that explains what the form does, when debits will occur, and how to request changes or revoke the authorization. Transparency at the authorization stage reduces donor service calls and builds the confidence that sustains long-term giving.

Alumni engagement at the university level consistently shows that donors who feel informed about how their gifts are managed give at higher rates in subsequent campaigns. The same dynamic holds at the booster club level: when families and supporters see that the club operates with formal financial procedures, they are more likely to participate in annual fundraising events and multi-year pledge programs.

Strong financial controls support the athletic programs and recognition displays that connect communities to school sports—ACH authorization workflows are one piece of that foundation

Common ACH Authorization Mistakes Booster Clubs Make

Understanding where authorization workflows break down helps treasurers build more durable procedures.

Mistake 1: Using a personal bank account for club transactions. ACH authorizations must reference the club’s organizational account. Personal accounts used for club purposes create liability exposure and make the authorization unenforceable against the organization.

Mistake 2: Verbal authorizations. NACHA requires that authorizations for recurring ACH debits be written. A verbal agreement, an email exchange, or a purchase order is not a substitute for a signed authorization form.

Mistake 3: Filing an incomplete form. Missing fields—particularly the revocation notice period or the payment amount cap—create ambiguity that favors the payee in a dispute.

Mistake 4: Single-officer authorization. Allowing one person to authorize, execute, and reconcile ACH transactions eliminates the segregation of duties that prevents both fraud and honest errors.

Mistake 5: Not logging authorizations. Without an authorization log, incoming reconcilers and auditors cannot tell which ACH debits were approved and which were not—turning routine reconciliation into an investigation.

Mistake 6: Forgetting to revoke when relationships end. Vendor contracts expire; recurring donor authorizations can outlast intended pledge periods. A homecoming event or end-of-year board transition is a practical trigger for reviewing all active authorizations and confirming that each one is still current.

Frequently Asked Questions

Does NACHA require a specific ACH authorization form? No. NACHA specifies required content elements—identification of the originator, description of the transaction, account information, and revocation terms—but does not mandate a particular form layout. The template above satisfies the content requirements and is designed for booster club operations.

How long must a booster club retain ACH authorization forms? Retain completed authorizations for at least two years from the date the authorization is terminated or revoked. Your acquiring bank or state nonprofit regulations may require a longer retention period. Store revoked authorizations in a separate folder so they remain retrievable without cluttering the active authorization file.

Can the club authorize ACH debits for variable amounts? Yes, provided the authorization specifies the maximum amount that can be pulled in any single transaction. Authorizations with no amount cap expose the club to overdrafts if a payee submits an unexpected debit amount.

What is the difference between an ACH debit and an ACH credit authorization? An ACH debit authorization permits a third party to pull funds from the club’s account. An ACH credit authorization permits the club or a processor to push funds into a designated account—for example, when distributing proceeds from a fundraiser to a school department. Both require signed authorizations, but the risk profile for debit authorizations is higher because the club is the account being charged.

What should the club do if an unauthorized ACH debit appears on the account? Contact the bank immediately—before the next business day if possible—and request a return using the appropriate NACHA return code. Provide the bank with documentation showing no signed authorization exists for that originator or amount. Preserve all account statements, authorization logs, and correspondence as evidence. Review the incident in the next board meeting and update internal controls if the gap that allowed the unauthorized debit is not already addressed.

Can alumni engagement events trigger ACH authorization requirements? Yes, if participants pay event fees via bank debit or if the club sets up recurring payment plans for multi-year event sponsorships. Community-wide alumni events that collect recurring fees should have a signed ACH authorization on file for each participating account, just as dues and pledge programs do.