NACHA's New ACH Fraud Monitoring Rules: What Businesses Need to Know

Key Takeaways

• NACHA’s new ACH fraud rules take effect in 2026
• Businesses must monitor ACH activity for suspicious transactions
• Preparing now can help reduce fraud risk and ensure compliance

What’s Changing

If your business sends ACH payments, new expectations are coming.

Beginning in 2026, NACHA will require ACH Originators to maintain risk-based fraud monitoring processes to detect and respond to suspicious activity.

Where Fraud Happens Most

Fraudsters often target:

• New vendors or receivers
• Payment or account changes
• Payroll and ACH files

Common schemes include business email compromise, vendor payment redirection, and payroll diversion.

How to Prepare

Start with these key safeguards:

✔ Verify payment changes using trusted contact information
✔ Require dual approval for ACH transactions
✔ Monitor ACH activity regularly
✔ Train employees to recognize fraud attempts

Even simple controls can prevent costly fraud.

Why It Matters

Preparing now helps your business:

• Stay compliant with NACHA requirements
• Reduce fraud risk
• Protect operations and vendor relationships

Quick FAQs

Who do these rules apply to?
Businesses that originate ACH payments.

When do they take effect?
Starting June 20, 2026, with a phased rollout.

What’s required?
Risk-based fraud monitoring processes to detect suspicious activity.

We’re Here to Help

Heartland Bank is here to help you review your ACH processes, strengthen controls, and stay ahead of fraud.

LEARN MORE | Business Fraud Prevention Resource Center