Upcoming ACH Rule change
June 22, 2026 – Required Fraud Detection Processes & Procedures
Originators must maintain documented, risk-based processes & procedures to help identify and respond to potential ACH fraud, especially when new payees are added or existing payment instructions are changed.
Why is NACHA implementing these changes?
Fraud involving electronic payments continues to rise. These rules aim to:
- Improve organizational readiness to identify & mitigate fraud
- Reduce losses associated with Business Email Compromise (BEC), payment redirection scams, & other types of fraud schemes
What counts as a “risk-based process or procedure”?
NACHA does not prescribe exact steps. Instead, Originators should tailor controls to their business. Examples include:
- Verifying changes to payment instructions through independent confirmation
- Using dual control for ACH initiation and approval
- Reviewing accounts daily for unusual activity
- Authenticating first-time payments or new vendors (e.g., using prenotes)
Does this rule mean we must prevent all fraud?
No. The rule requires reasonable efforts to detect potential fraud. It does not obligate businesses to prevent every fraudulent event—only to take prudent steps to spot suspicious activity before submitting payments.
What types of fraud should we be watching for?
Common schemes include, but aren’t limited to:
- Business Email Compromise (BEC) – Attackers impersonate vendors, executives, or employees to redirect payments
- Vendor/Payroll redirection scams – Fraudsters request changes to bank account information
- Account takeover attempts – Criminals attempt to access online banking credentials to initiate transactions
How often must we review our procedures?
Procedures must be reviewed at least annually to ensure they remain effective in addressing evolving fraud risks.
What is the safest way to verify payment requests?
Grand Savings Bank strongly recommends:
- Phone verification using known, previously verified contact information
- Avoid relying solely on email requests, especially those involving urgency, secrecy, or changes to payment info
Who can I contact with questions?
The Grand Business team is here to support you. Please contact us with questions about ACH origination, fraud prevention, or implementing these new requirements.