New Nacha Risk Management Rules Now in Effect
New ACH Fraud Monitoring Requirements Now in Effect
As of March 20, 2026, new Nacha Rules focused on fraud monitoring and risk management have officially taken effect, signaling a broader industry shift in how ACH risk is addressed.
These updates reflect the growing impact of fraud schemes that push funds out of accounts, rather than pull them in. In response, responsibility for identifying suspicious activity is expanding across more participants in the ACH Network.
What this means for your institution:
Organizations are now expected to have risk-based monitoring processes in place to help detect potentially fraudulent ACH activity.
- Initial requirements apply to ODFIs and higher-volume participants
- RDFIs are now expected to actively monitor incoming credit transactions
- Expanded requirements will take effect in June 2026 and apply more broadly
This change reinforces that fraud detection is no longer limited to one side of the transaction. Both sending and receiving institutions are expected to play a role.
Nacha also stresses that these processes should be reviewed and updated regularly, as fraud tactics continue to evolve.
Now is a good time to revisit your current approach and ensure your procedures align with these new expectations.
If you have any questions about this update, please contact us at education@paymentsfirst.org