PUSH, PULL, OR PAUSE: THE SMART WAY TO TRANSFER MONEY

“Before you invest [or transfer], investigate.”  — William A. Ward

“Rule No 1 is never lose money. Rule No 2 is never forget Rule No 1.”  — Warren Buffett

“Whilst usability is key for payments, security is a necessary condition for people to use them.”  — Peng Ning (VP Engineering, Samsung)

I don’t know if you’ve noticed, but writing checks is almost a thing of the past. Most people write very few, if any, checks anymore. The digital transfer of money has become quicker and easier with the advent of multiple options for cash transfers, such as ACH, debit cards, Zelle, and Venmo. But, are electronic money transfers safer?

Are some methods of electronic funds transfer better than others, and what’s the safest approach?

Let’s start by discussing “push” versus “pull” transactions.

Push Transfer (You Send the Money) Definition: A push transfer happens when you instruct your bank or account to send money out to another account.

Common examples: *Sending money via ZelleVenmo, or Cash App. *Initiating an ACH transfer from your bank to another bank. *Wiring money. *Paying a bill manually from your bank’s bill-pay system

Key characteristics: *You control the timing. *Generally safer from fraud (you must authorize it). *Usually faster to leave your account. *Often irreversible once sent.

Simple analogy: You push money out the door.

Pull Transfer (Someone Takes the Money) Definition: A pull transfer happens when another party is authorized to withdraw money from your account.

Common examples: *Automatic bill pay (utilities, insurance, mortgage). *Subscriptions (streaming services, gym memberships). *Linking accounts where the receiving bank initiates the transfer. *Writing a check. *Setting up autopay with a credit card or loan.

Key characteristics: *The recipient controls the timing. *Requires prior authorization. *Can be recurring. *More potential for overdraft if timing surprises you.

Simple analogy: They pull money from your account when it’s due.

Here’s a quick side-by-side comparison:

FeaturePushPull
Who initiatesYouRecipient
ControlSender controls timingReceiver controls timing
Typical useSending moneyPaying bills automatically
Risk of surprise withdrawalLowHigher
Fraud protectionGenerally strongerDepends on authorization rules

Rule of thumb: -If you click “Send” → it’s a push. -If you gave permission and money gets taken → it’s a pull

Push vs Pull transactions matter because Push transactions are generally considered safer. With Push transactions, the account holder initiates the funds transfer.  With Pull transactions, the account holder authorizes a third party to withdraw funds from the account, usually regularly. Allowing other parties to remove funds from accounts also increases the likelihood of fraudulent transactions.

That being said, most people, including me, use Pull transactions regularly. Here are some common and less common examples of Pull transactions:

Common vs Less Common Pull Transactions Very common: *Autopay bills. *Debit card purchases. *Subscriptions. *Mortgage drafts.

Less common but important: *Check payments. *Investment account funding. *Tax payment plans.

It’s important to understand the differences between pull and push transactions. Pull transactions make life easier. They can also make our lives less secure.

A close friend recently had a bank account hacked.  Thieves initially made several withdrawals of just a few cents. When these small withdrawals went unnoticed they initiated the withdrawal (pull) of larger amounts. The withdrawals were initiated at the beginning of a new bank statement cycle. Using this strategy, the fraud could continue undetected for almost a month. 

Once the problem activity was detected, my friend had to go through the process of bank notification, account closure, reestablishment of a new account, and the notification and reestablishment of auto-pay accounts.

This activity occurred due to pull transactions. Thieves hacked an existing account or created a fraudulent account. This fraudulent activity created multiple headaches for my friend.

How are pull transactions listed on bank statements?

Pull transactions listed on bank statements are usually preceded by some term. These terms designate them as pull transactions. These are some of the most commonly used terms: 

Look for these words: *Debit. *Auto. *Recurring. *POS. *Check. *Withdrawal

If you see those — it’s almost always a pull transaction.

What can you do If You’re Reviewing Your Own Statement?

Here’s a simple method many people use:

1. Scan for repeating amounts (monthly payments) 2. Look for ACH DEBIT entries 3. Check anything labeled AUTO / RECURRING 4. Confirm you recognize the company

That’s good and fine. But what does someone do to resolve problems if transactions are questionable or fraudulent? 

What are the ways to dispute and resolve the situation?

The dispute process follows a general direction with minor differences based on the desired action. The involved bank is notified immediately, and action is initiated promptly. Don’t delay!!

SituationAction
Future payment you want to preventStop payment
Unauthorized or incorrect withdrawal already happenedDispute / reverse
Recurring charge you want to end permanentlyRevoke authorization

1) How to Stop a Future Pull Transaction (Stop Payment) To stop a pull transaction before it happens, contact your bank and request a stop payment on an ACH debit. You must provide the company name, amount (if known), and the date of expected withdrawal. This must usually be done at least one business day before the payment date. There is normally a cost, between $0-$35, depending on the bank.

2) How to Dispute a Pull Transaction (After It Happens) A pull transaction should be disputed when you didn’t authorize the charge, the wrong amount was used, or a charge continues after it is canceled.

Type of ProblemTime to Report
Unauthorized ACH withdrawalUp to 60 days
Billing error or wrong amountTypically 60 days
FraudReport immediately

When disputing a transaction, you should notify your bank and state: “I want to dispute an unauthorized ACH debit.” An account holder may also need to sign a short affidavit or confirmation for your request. The bank usually issues a temporary credit, investigates the dispute, and will often return funds within 1 to 10 business days.

3) How to Permanently Stop Recurring Pull Transactions (Revoke Authorization) To revoke authorization means you want the company to stop drafting your account going forward. Contact the company and cancel the authorization. You should then notify your bank as an additional safeguard. Keep a copy of the email or letter as a confirmation of your request. You can legally revoke authorization even if the contract says otherwise.

Special Situations If the merchant keeps charging after cancellation, you can dispute each charge, place a permanent ACH block on that company, or close the account if necessary (rare). Act immediately if fraud is suspected, or if you see: • Unknown company name • Multiple small test withdrawals • Charges from a company you never used Banks typically treat this as high priority.

Fast Decision Guide:

Use this simple rule:

• Payment hasn’t happened yet → Stop payment

• Payment already happened → Dispute

• Recurring charge you want ended → Revoke authorization

The Biggest Risk: Sending Money to the Wrong Person or a Scammer

With push payments, you authorize the transfer, so banks often treat it as valid even if you were tricked.

Common scenarios:

• Imposter scams (“grandchild,” contractor, IRS, etc.)

• Phishing emails or fake invoices

• Sending money to the wrong account number

• Investment or romance scams

• Urgent requests to “send immediately”

These issues are especially associated with instant payment services like:

• Zelle

• FedNow Service

• RTP network

Key point:

Once a push payment is sent — particularly an instant one — it may be very difficult or impossible to reverse.

Main Security Problems With Push Transactions

1) Irreversibility (Limited Recovery Options)

• Wire transfers and instant payments often cannot be reversed

• Recovery depends on the recipient voluntarily returning funds

• Timing is critical — delays reduce chances of recovery

Highest risk types:

1. Wire transfer

2. Instant payment

3. Same-day ACH push

2) Social Engineering and Fraud Pressure

Scammers try to create urgency so you send money quickly.

Common red flags:

• “Act now” or “urgent” payment requests

• Requests to bypass normal payment methods

• Requests to send funds to a new account

• Instructions to keep the transaction secret

3) Typographical Errors (Wrong Account or Recipient)

This is a surprisingly common operational risk.

Examples:

• Mistyped routing or account number

• Selecting the wrong contact

• Sending funds to a closed or incorrect account

Unlike pull transactions, there is no automatic validation beyond basic account matching.

4) Account Takeover Risk

If a criminal gains access to your online banking, they can initiate push transfers.

How it happens:

• Stolen passwords

• Phishing links

• Malware

• SIM swap attacks

Once inside, they can rapidly move funds out.

5) Business Email Compromise (BEC)

A major risk in business and real estate transactions.

Example:

You receive an email that appears to be from:

• A contractor

• A title company

• A vendor

The email instructs you to send payment to a “new” account.

Risk TypePushPull
Unauthorized withdrawalLowHigher
Scam riskHigherLower
ReversibilityLowerHigher
Control of timingHigherLower
Fraud detection timeImmediateMay be delayed

Practical Safety Rules (High Value) 1. Never send money based on urgency alone 2. Verify payment instructions using a known phone number 3. Double-check recipient details before sending 4. Use push payments only with trusted parties 5. Avoid wires or instant transfers for unexpected requests

Highest-Risk Push Situations

Be especially cautious when: • Sending a wire transfer • Paying a new vendor or contractor • Responding to a sudden payment request • Transferring funds to an unfamiliar account • Moving large sums quickly

Losses from fraudulent push transactions are less likely to be reimbursed than losses from unauthorized pull transactions, especially if you authorized the payment yourself (even if you were tricked).

Here’s how reimbursement typically works.

SituationReimbursement Likely?
Someone hacked your account and sent money without permissionUsually YES
You were tricked into sending money (scam)Often NO or partial
Bank made an errorYES
You sent money to the wrong personUncertain

Situations Where Banks Usually Reimburse

You are more likely to be reimbursed if: • Your account was hacked • Someone sent money without your authorization • There was a system or bank error • You reported the fraud quickly • You exercised reasonable care (no sharing passwords, etc.)

Situations Where Reimbursement Is Less Likely

These are the most common denial scenarios: • You voluntarily sent money to a scammer • You ignored warnings from the bank or app • The payment was confirmed multiple times • Too much time passed before reporting

This category is often called Authorized Push Payment (APP) fraud.

Push payments are safest operationally but weakest legally if you’re scammed.

That’s the tradeoff.

Final Thoughts 

These considerations are becoming ever more important as digital transactions become more prevalent.

Before you hit “Send”, verify the entity receiving the money.

Controlling the flow of money is safer operationally, but weaker legally.

Financial institutions provide a pathway for resolution in case of fraud, but it is not automatic, nor is it guaranteed in all cases.

If you’d like to be a part of a free online retirement community, join us on Facebook:

https://www.facebook.com/groups/399117455706255/?ref=share

Leave a Reply

Your email address will not be published. Required fields are marked *