Some companies have three weeks to respond to accusations they have set direct debits too high.