X12 282 — Direct Debit Authorization
The 282 transmits a direct debit authorization from a debtor to a creditor (insurer, utility, subscription) for an ACH recurring mandate.
Purpose
The 282 documents the debtor's signed authorization allowing the creditor to automatically debit their bank account at a defined frequency. It carries debtor identity, routing+account number, creditor, frequency, maximum or variable amount.
It serves as the authority of record for future debits via NACHA ACH (US). Acknowledged by 997. The debits themselves circulate via NACHA files, not via X12.
Envelope structure
The 282 travels within the three X12 envelope levels (ISA/IEA,
GS/GE with functional group DD, and ST/SE).
Didactic example in release 004010:
ISA*00* *00* *ZZ*LIFECARRIER *ZZ*BANKPARTNER *260515*1600*U*00401*000000282*0*P*>~
GS*DD*LIFECARRIER*BANKPARTNER*20260515*1600*1*X*004010~
ST*282*0001~
BGN*00*DDA-2026-0099*20260515~
NM1*PE*1*SMITH*JOHN*A***34*SSN-LAST4-5678~
N1*BY*ACME LIFE INSURANCE*24*EIN-CARRIER~
REF*ZZ*ROUTING-NUMBER-021000021~
REF*ZZ*ACCOUNT-LAST4-9876~
AMT*N1*150.00~
DTM*090*20260601~
MSG*FREQUENCY-MONTHLY~
SE*10*0001~
GE*1*1~
IEA*1*000000282~ Common segments
- Header —
ST,BGN. - Debtor —
NM1*PE(Payee — beneficial holder of the account being debited). - Creditor —
N1*BY(Buyer / creditor). - Account —
REF*ZZ(routing number),REF*ZZ(account last 4 — full number must be encrypted separately). - Mandate —
AMT*N1(amount or cap),DTM*090(start date),MSG(frequency). - Summary —
SE.
Common pitfalls
- Account number in clear: a full account number in
REFviolates NACHA and PCI-adjacent rules; always truncate or use a token. - Revocation: a mandate revocation must be reversible via a 282 cancel — without cancel, debits continue until manual backout.
- Bank routing validation: an invalid ABA routing number breaks the debit on first attempt — validate against the Fedwire ABA registry before issuing.
Related transactions
Documentation
The code 282 and the name Direct Debit Authorization are public and listed on x12.org/products/transaction-sets. The complete structure of loops, qualifiers and code lists is distributed by DISA via the proprietary Implementation Guides (TR3). ediverse.io covers only public concepts, the envelope and didactic examples.