Direct Debit, Standing Order or CPA? The UK Payment You're Using Decides Your Protection

The Direct Debit Guarantee gives you an immediate refund on payments taken in error — yet most people chase the company instead. How direct debits, standing orders and card subscriptions differ, and which one actually protects you.

Direct Debit, Standing Order or CPA? The UK Payment You're Using Decides Your Protection

There is a small line on every direct debit confirmation that almost nobody reads, and it happens to be one of the strongest consumer protections in British banking. The Direct Debit Guarantee promises that if a payment is ever taken in error — wrong amount, wrong date, a subscription you cancelled months ago — your bank will give you an immediate, no-questions refund. Not "after an investigation". Immediately. And yet most people, when a gym or a streaming service keeps charging them, ring the company, sit on hold, and quietly accept the run-around. They are arguing for something the bank is already obliged to hand over.

The confusion runs deep because Britain quietly uses three different ways to pull money out of your account, and they protect you in completely different ways. A direct debit is not a standing order, and neither is the "continuous payment authority" that sits behind most card subscriptions. Knowing which is which is the difference between getting your money back in a day and chasing a company that has no real reason to cooperate.

Three ways money leaves your account — and only one comes with a guarantee

A direct debit is an instruction you give to a company, authorising it to collect varying amounts on varying dates — your energy bill, your council tax, your mortgage. The company controls the amount; you control the protection, because every direct debit in the UK is covered by the Direct Debit Guarantee, run through the Bacs system. A standing order is the reverse: you instruct your own bank to send a fixed amount on a fixed schedule, like £200 to a savings pot on the 1st of every month. You are in full control, which is great, but there is no special guarantee scheme — because you set it up and only you can change it.

The third method is the one that causes the most grief. A continuous payment authority, or CPA, is what you set up when you tap your debit or credit card details into a subscription form — a streaming service, a "free trial" that auto-renews, a dating app. It looks like a direct debit and behaves like one, but it runs on the card networks, not Bacs, and it carries none of the Direct Debit Guarantee's protection. This single distinction is where thousands of people get stuck every year.

Why the "free trial that won't die" is usually a CPA

If you ever signed up for something with your 16-digit card number rather than your sort code and account number, you almost certainly set up a continuous payment authority. The company can keep taking money on whatever schedule it likes until you cancel. The good news, which firms rarely advertise, is that you have the right to cancel a CPA directly with your bank — you do not need the company's permission, and you do not need to have cancelled with them first. Tell your bank to stop the payments and they must. If they take one afterwards, they have to refund it. The FCA has been explicit on this point for years, yet bank staff still occasionally tell customers to "go back to the merchant". They are wrong, and it is worth standing your ground.

How the Direct Debit Guarantee actually works in practice

The Guarantee gives you three concrete rights, and they are stronger than most people realise. First, advance notice: if the amount or date of a direct debit changes, the company must tell you in advance — normally ten working days, though many publish their own slightly different notice period within the rules. Second, an immediate refund from your bank if an error is made by the company or the bank — and "error" is read broadly. A payment taken after you cancelled, a double charge, the wrong figure: all of it qualifies. Third, the right to cancel at any time simply by telling your bank.

The refund mechanism is the part worth committing to memory. You contact your bank, not the company, and the bank refunds you straight away, then reclaims the money from the company through Bacs afterwards. The burden of proof effectively sits with the company, not you. This is the opposite of how a card dispute works, where you often have to demonstrate the charge was wrong before anything moves. With a genuine direct debit, the money comes back first and the argument, if any, happens behind the scenes between the bank and the firm.

There is a fair-use expectation behind all this, naturally. The Guarantee is for genuine errors and cancellations, not a way to claw back money for a bill you simply regret paying. Banks can and do query refund claims that look like an attempt to dodge a legitimate debt, and abusing the system can mean the company pursues you for the money through other channels. Used honestly, though, it is one of the cleanest protections you have.

The fraud question — and where your bank stops being liable

Direct debit fraud is rare precisely because of how the system is built: a fraudster needs your sort code and account number, and even then the Guarantee lets you reverse anything unauthorised. The far bigger modern risk is authorised push payment fraud, where a scammer tricks you into sending money yourself via Faster Payments. That is a different protection regime entirely — the mandatory APP reimbursement rules that came into force in October 2024 — and it does not flow through the Direct Debit Guarantee at all. Don't assume one covers the other.

A quick audit worth doing this month

Open your banking app and look at your list of direct debits and recurring card payments — most apps now show both in one place. Three things are worth checking. Are there subscriptions you forgot you had? Are any "direct debits" actually CPAs on your card, which you can kill instantly through the bank? And does the total of your committed outgoings still match what you think you're paying for? People routinely find a £9.99 here and a £14.99 there for services they stopped using a year ago.

Switching banks doesn't break your payments — usually

One worry that stops people moving accounts is the fear that their direct debits will collapse mid-cycle and bills will go unpaid. Under the Current Account Switch Service, that largely doesn't happen: the service moves all your direct debits and standing orders across to the new bank within seven working days and redirects any payments that arrive at the old account for at least three years. The piece it cannot move automatically is your continuous payment authorities — those card-based subscriptions tied to your old card number. Because they sit on the card networks rather than Bacs, you have to update each one with the new card details yourself, or they'll simply fail when the old card is closed. It's worth listing them before you switch so nothing important lapses on the day the old account shuts down.

The bottom line

Set up the things you control — savings transfers, fixed payments to family — as standing orders, because they are simple and you hold the keys. Pay your real bills by direct debit and lean on the Guarantee without hesitation if a company takes the wrong amount; phone the bank, not the firm, and the refund is yours by right. And treat every card subscription as a continuous payment authority you can switch off at the bank whenever you like, no matter what the company's cancellation page tries to tell you. The protections are already written in your favour. Most people just never use them.