Direct debit payments in New Zealand (NZ) are governed by a set of rules, including scheme requirements from Payments NZ, consumer protection legislation, and contractual obligations to both your bank and customers. Getting direct debit law right means understanding how these interact.

Below, we’ll cover direct debit rules in New Zealand, who regulates direct debit requirements, and recordkeeping best practice for New Zealand businesses that collect direct debit payments.

Key takeaways

• A valid direct debit authority (DDA) should include the account holder’s details, clear description of the debit, and verified signature before you can draw funds from a customer’s account.

• Customers can cancel their direct debit authority at any time through their bank or direct debit initiator.

• Inland Revenue’s seven-year baseline for financial records is a practical minimum for how long to retain signed authorities and transaction records.

What are direct debit rules in New Zealand?

Direct debit rules in New Zealand govern how direct debit payments work. A direct debit is when your business initiates the transaction and draws funds directly from a customer’s bank account on an agreed schedule. It differs from a credit transfer, where the customer sends you money. In New Zealand, direct debit runs through the Bulk Electronic Clearing System (BECS), which is the interbank infrastructure that processes batch payments between New Zealand financial institutions—not to be confused with the Australian BECS.

The legal requirements for direct debit in New Zealand sit across multiple layers, including bank rules, consumer protection legislation, and contractual obligations between your business, bank, and customers.

Here are some rules to keep in mind:

• Payments NZ scheme rules: New Zealand’s BECS is governed by Payments NZ, which sets the rules for participating banks. Those rules apply to any business that uses direct debit through a sponsoring bank.

• The Contract and Commercial Law Act 2017: This law governs the enforceability of the authorisation agreement between you and your customer. If your direct debit authority isn’t properly formed, it might not be valid.

• The Consumer Guarantees Act 1993: This act applies when your customers are individuals; it sets baseline protections that your billing practices can’t override.

• The Fair Trading Act 1986: Misleading conduct around what you’re debiting can expose you to liability under this law, regardless of what your direct debit authority (DDA) says.

• Your sponsoring bank’s agreement: Businesses using direct debit in New Zealand do so under agreements with banks. Each bank has its own compliance requirements and can impose conditions or restrictions.

How does direct debit authorisation work in New Zealand?

Before you can debit a customer’s account, you need a valid DDA, which is an authorisation from the account holder. There’s no single defined format, and banks might have their own specific requirements.

In most cases, a valid DDA should include:

• Account holder’s details: This includes the customer’s full name and bank account number as they appear on the account.

• Your business details: Include your business name and your name as it appears on bank statements. These don’t always match, so confirm with your bank.

• Clear description of the debit: Detail whether it’s a fixed amount, variable amount, or maximum cap.

• Frequency and timing: Description of when debits will occur and how often.

• Authority start date: This is the date from which you’re authorised to debit.

• Valid signature: Someone authorised to operate the account must sign. Joint accounts might require both signatories, depending on the account’s operating mandate.

Paper vs. electronic authorisation

Paper DDAs are still common, but electronic authorisation is now acceptable under the Contract and Commercial Law Act 2017, provided the signing process reliably identifies the person and indicates their approval. If your business collects DDAs online, the authority should be presented as distinct; don’t obscure it in a broader agreement.

Advance notice before the first debit

Make sure you give customers 10 days’ notice before you take the first debit. Not only is it required, but it’s also good for customer relationships.

Who regulates direct debit legal requirements in New Zealand?

No single regulator manages direct debit in New Zealand. Instead, oversight is distributed across several bodies.

Those include:

• Payments NZ: Sets the rules for New Zealand’s BECS. It doesn’t regulate businesses directly, but if you breach the rules persistently, your sponsoring bank can suspend or terminate your direct debit facility.

• The Commerce Commission: Enforces the Fair Trading Act. If your billing practices mislead customers, the commission has jurisdiction. Complaints can result in investigations, enforceable undertakings, or court proceedings.

• The Banking Ombudsman Scheme: Handles disputes between consumers and their banks. If a customer claims an unauthorised debit and their bank doesn’t resolve it satisfactorily, they can escalate to the ombudsman.

• Your sponsoring bank: In a practical sense, your bank is also something of a regulator. It has its own Know Your Customer (KYC), transaction monitoring, and compliance requirements. Your bank can also impose conditions on your direct debit facility or withdraw it entirely if you fall outside requirements.

What are the consumer rights and dispute rules under direct debit legal requirements in New Zealand?

Customers have strong rights when it comes to direct debit, and the dispute process is weighted in their favour. That’s worth understanding before you rely heavily on this payment method over others.

Here's what to consider:

The right to cancel

A customer can cancel their direct debit authority at any time by notifying either you or their bank. Once they’ve cancelled with their bank, the bank will refuse any further debits you attempt, even if you believe the cancellation was improper or the contract between you is still live. The DDA and the underlying contract are separate, and the bank only cares about the DDA.

Unauthorised debit claims

If a customer disputes a debit as unauthorised, their bank will often reverse it and investigate. The burden shifts to you to demonstrate the debit was authorised under a valid DDA. If you can’t produce the signed authority, you’ll lose the dispute and funds.

Variable amount notice

A DDA that authorises “up to” a certain amount doesn’t mean you can debit up to that ceiling. If you plan to debit variable amounts, you might be required to give customers advance notice of any changes before debiting.

What records should businesses keep?

Your records are important in a dispute. They help you provide an accurate history.

Consider retaining the following:

• Signed DDAs: Keep the original signed authority for each customer, including the date it was executed and channel through which it was collected (e.g., paper, online, or otherwise).

• DDA amendments: Keep records of any changes to the authority, including the date of amendment and how it was made.

• Transaction records: Amounts, dates, and references for every debit taken under each authority. These need to be retrievable by customer and date.

• Cancellation notices: Records of when customers cancelled, how they notified you, and when you acted on the cancellation.

• Advance notices for variable debits: Copies of any notices sent to customers before variable amount debits, including the date sent and amount communicated.

Regarding tax requirements, Inland Revenue’s general mandate is seven years for financial records, which is also a reasonable baseline for direct debit records. If you collect DDAs electronically, your system needs to produce a retrievable copy of what the customer actually signed; a log entry that confirms they completed the flow won’t be accepted in an audit.

Are direct debits the right fit for your New Zealand business?

Direct debit suits businesses with predictable recurring billing, ongoing customer relationships, and the administrative infrastructure to manage authorisations properly. It’s less suited to individual transactions, highly variable amounts, or businesses that haven’t built solid processes for handling cancellations and disputes.

Here's why:

• Compliance overhead: You need a sponsoring bank that’s willing to give you direct debit access, which involves its own due diligence process.

• DDA management: You need systems to collect, store, and retrieve signed authorities and processes to handle cancellations and amendments promptly and accurately.

• Dispute readiness: When a customer or their bank challenges a debit, your documentation is your defence. If you can’t produce a valid DDA, you’ll likely lose the dispute and funds.

Whether you use a payments provider such as Stripe or go directly through a bank, the authorisation requirements, consumer rights, and recordkeeping obligations are essentially the same. What changes is how much of the mechanics you’ll manage yourself.

How Stripe Payments can help

Stripe Payments provides a unified, global payments solution that helps any business – from scaling startups to global enterprises – accept payments online, in person and around the world.

Stripe Payments can help you:

• Optimise your checkout experience: Create a frictionless customer experience and save thousands of engineering hours with prebuilt payment UIs, access to 125+ payment methods and Link, a wallet built by Stripe.

• Expand to new markets faster: Reach customers worldwide and reduce the complexity and cost of multicurrency management with cross-border payment options, available in 195 countries across 135+ currencies.

• Unify payments in person and online: Build a unified commerce experience across online and in-person channels to personalise interactions, reward loyalty and grow revenue.

• Improve payments performance: Increase revenue with a range of customisable, easy-to-configure payment tools, including no-code fraud protection and advanced capabilities to improve authorisation rates.

• Move faster with a flexible, reliable platform for growth: Build on a platform designed to scale with you, with 99.999% historical uptime and industry-leading reliability.

Learn more about how Stripe Payments can power your online and in-person payments or get started today.