In payments, a mandate is the authority that a payer gives to another party to take money from, or move money out of, the payer's account. The most common example is a direct debit mandate, in which a customer authorises a company such as a utility, gym or insurer to collect payments directly from the customer's bank account when they fall due. The mandate records who may collect, from which account, under which scheme and, in some cases, how much and how often. Without a valid mandate, the collection is unauthorised and can be reversed.
The word has other meanings in banking. A bank mandate is the instruction that tells a bank who may operate a business account and how many signatures are needed, and an investment mandate defines what a fund manager may buy. This entry focuses on payment mandates, which are central to direct debit, recurring card payments, open banking and newer agent-initiated payments.
What a payment mandate contains
The exact content is set by each scheme, but most payment mandates include:
- The parties. The payer's name and account details, and the identity of the payee, often through a scheme-issued creditor or originator identifier.
- A unique reference. A mandate reference that lets the payer's bank match each collection to the authority behind it.
- The type and scope. Whether the mandate covers one payment or recurring payments, and any limits on amount or frequency.
- The payer's consent. A signature, an electronic acceptance or an authentication step, together with the date it was given.
- The payer's rights. A statement of refund rights and how to cancel, as required by the scheme.
Mandates in direct debit schemes
In the SEPA Direct Debit schemes, the mandate is usually held by the creditor rather than the bank. Each collection carries the unique mandate reference and the creditor identifier, and the debtor's bank does not check the mandate in advance under the Core scheme. Consumers have an unconditional right to a refund for eight weeks after a collection, and up to 13 months if the collection was unauthorised. A mandate lapses if no collection is made for 36 months. The Business-to-Business scheme has no refund right but requires the debtor's bank to verify the mandate.
In the United Kingdom, the Bacs Direct Debit scheme uses a Direct Debit Instruction, which is lodged electronically with the payer's bank, and payers are protected by the Direct Debit Guarantee. In the United States, an ACH authorization plays the same role for debits under the Nacha Operating Rules, and in India the electronic mandate supports recurring collections through national systems, including recurring payments set up through UPI.
Mandates beyond direct debit
The idea of a mandate has spread to other payment types:
- Recurring card payments. When a cardholder agrees to a subscription, the stored agreement acts as a mandate for later merchant-initiated transactions.
- Open banking. A variable recurring payment mandate lets a provider initiate account-to-account payments within agreed limits, set up once with strong authentication.
- Agent payments. An agentic mandate records what an AI agent may buy or pay on a user's behalf, and within which limits.
Managing and proving mandates
Collectors must be able to produce the mandate if a payer disputes a collection. If they cannot, the payer's bank usually returns the funds and the collector bears the loss, which is why mandate management systems store mandates, track amendments and record cancellations. Under many schemes, the payer's bank can return a collection without question within a set period, and the collector may also be liable under an indemnity, as described under direct debit indemnity.
Changes such as a new account number or a new collection amount may require a fresh mandate or advance notice to the payer, depending on the scheme rules. Some schemes also let the payer's bank switch mandates automatically when a customer moves their account to another bank.
Risks and abuses
Mandates can be abused in several ways. Fraudsters may set up direct debits on other people's accounts using stolen details, merchants may collect after a customer has cancelled, and some subscription businesses make cancellation deliberately hard. Payer protections such as refund rights, advance notice of collections and the right to cancel at the bank exist to limit these harms. For collectors, the main risks are returns, chargebacks and the cost of handling disputes when the mandate trail is incomplete.