NACHA Changes ACH Credit-Push Payments Rules To Fight Scams & Fraud

Placing More Responsibility on the Financial Services Sector to Police Scams & Fraud

Authors:
•  SCARS Editorial Team – Society of Citizens Against Relationship Scams Inc.
•  NACHA

About This Article

Nacha members have endorsed rules to combat fraud, including business email compromise (BEC), leveraging credit-push payments. These rules mandate ACH payment monitoring for all network participants (excluding consumers), marking a pivotal shift.

Despite not altering liability, recipient financial institutions (RDFIs) gain a monitoring role for the first time. With BEC scams, vendor impersonation, and payroll fraud causing significant losses, the need for action is urgent.

The rules enhance fraud detection across the payment process, empowering financial institutions to act swiftly upon detection. Prompted by Nacha’s “Risk Management Framework for Credit-Push Fraud,” these rules promise broader applicability beyond ACH payments.

NACHA Changes ACH Credit-Push Payments Rules To Fight Scams & Fraud - 2024

NACHA Changes the Rules for Banking that make use of Credit-Push ACH Payments

New Rules

The approval of new rules by Nacha members marks a significant milestone in the ongoing battle against fraud, particularly for both consumer and business victims in the U.S. With the prevalence of scams like business email compromise (BEC) on the rise, these rules are designed to bolster the defenses of the ACH Payments Network against fraudulent activities that involve credit-push payments. By establishing a baseline of ACH payments monitoring for all parties involved in the network, except consumers, these rules represent a proactive approach to mitigating fraud risks.

The impact of fraud, especially BEC scams, cannot be understated. With billions of dollars lost annually due to such schemes, financial institutions and businesses alike must take decisive action to combat this threat. The newly approved rules empower receiving financial institutions (RDFIs) with a defined role in monitoring the ACH payments they receive, enabling them to detect and respond to fraudulent transactions more effectively. This collaborative effort, driven by Nacha’s commitment to self-governance, reflects a collective determination to safeguard the integrity of the payment system and protect both businesses and consumers from financial harm.

According to NACHA

Nacha members have approved a set of rules intended to reduce the incidence of frauds, such as business email compromise (BEC), that make use of credit-push payments. The new rules establish a base-level of ACH payments monitoring on all parties in the ACH Network (except consumers). While the new rules do not shift the liability for ACH payments, for the first time receiving financial institutions (RDFIs) will have a defined role in monitoring the ACH payments they receive.

“All participants in the ACH Payments Network have a part to play in reducing the incidence of fraud, and recovering when fraud has occurred,” said Jane Larimer, Nacha President and CEO. “I applaud Nacha’s members for taking this important step of self-governance.”

BEC (Business Email Compromise,) vendor impersonation and payroll impersonation are some examples of fraud that result in payments being “pushed” from a payer’s account to the account of a fraudster. The FBI’s Internet Crime Complaint Center’s 2023 annual report found there were 21,489 BEC complaints in 2023 totaling $2.9 billion in reported losses, making it the second-costliest type of cybercrime. According to the Association of Financial Professionals, “Business Email Compromise (BEC) scams are still highly prevalent and are the root cause of payment fraud at a majority of organizations.”

The new rules follow the flow of a credit-push payment to promote the detection of fraud from the point of origination through the point of receipt at an account at the RDFI. When fraud is detected, the rules empower the originating financial institution (ODFI) to request the return of the payment for any reason; the RDFI to delay funds availability (within the limits of Regulation CC) to examine the payment more closely; and the RDFI to return a suspicious transaction on its own initiative without waiting for a request or a customer claim. An additional rule facilitates transaction monitoring by RDFIs by applying a standard transaction description for ACH credits used for payroll payments.

The impetus for the newly approved Rules came in late 2022 when Nacha released its strategy “Risk Management Framework for the Era of Credit-Push Fraud.” The strategy expanded the focus of fraud detection and prevention to include frauds that use credit-push payments, including ACH credits. While the new rules apply to ACH payments, their principles and techniques are more broadly applicable to all types of credit-push payments.

About Nacha

Nacha governs the thriving ACH Payments Network in the United State, the payment system that drives safe, smart, and fast Direct Deposits and Direct Payments with the capability to reach all U.S. bank and credit union accounts. There were 31.5 billion ACH Network payments made in 2023, valued at $80.1 trillion. Through problem-solving and consensus-building among diverse payment industry stakeholders, Nacha advances innovation and interoperability in the payments system. Nacha develops rules and standards, provides industry solutions, and delivers education, accreditation, and advisory services.

SCARS Resources:

PLEASE NOTE: Psychology Clarification

The following specific modalities within the practice of psychology are restricted to psychologists appropriately trained in the use of such modalities:

  • Diagnosis: The diagnosis of mental, emotional, or brain disorders and related behaviors.
  • Psychoanalysis: Psychoanalysis is a type of therapy that focuses on helping individuals to understand and resolve unconscious conflicts.
  • Hypnosis: Hypnosis is a state of trance in which individuals are more susceptible to suggestion. It can be used to treat a variety of conditions, including anxiety, depression, and pain.
  • Biofeedback: Biofeedback is a type of therapy that teaches individuals to control their bodily functions, such as heart rate and blood pressure. It can be used to treat a variety of conditions, including stress, anxiety, and pain.
  • Behavioral analysis: Behavioral analysis is a type of therapy that focuses on changing individuals’ behaviors. It is often used to treat conditions such as autism and ADHD.
    Neuropsychology: Neuropsychology is a type of psychology that focuses on the relationship between the brain and behavior. It is often used to assess and treat cognitive impairments caused by brain injuries or diseases.

SCARS and the members of the SCARS Team do not engage in any of the above modalities in relationship to scam victims. SCARS is not a mental healthcare provider and recognizes the importance of professionalism and separation between its work and that of the licensed practice of psychology.

SCARS is an educational provider of generalized self-help information that individuals can use for their own benefit to achieve their own goals related to emotional trauma. SCARS recommends that all scam victims see professional counselors or therapists to help them determine the suitability of any specific information or practices that may help them.

SCARS cannot diagnose or treat any individuals, nor can it state the effectiveness of any educational information that it may provide, regardless of its experience in interacting with traumatized scam victims over time. All information that SCARS provides is purely for general educational purposes to help scam victims become aware of and better understand the topics and to be able to dialog with their counselors or therapists.

It is important that all readers understand these distinctions and that they apply the information that SCARS may publish at their own risk, and should do so only after consulting a licensed psychologist or mental healthcare provider.

Opinions

The opinions of the author are not necessarily those of the Society of Citizens Against Rleationship Scams Inc. The author is solely responsible for the content of their work. SCARS is protected under the Communications Decency Act (CDA) section 230 from liability.

Disclaimer:

SCARS IS A DIGITAL PUBLISHER AND DOES NOT OFFER HEALTH OR MEDICAL ADVICE, LEGAL ADVICE, FINANCIAL ADVICE, OR SERVICES THAT SCARS IS NOT LICENSED OR REGISTERED TO PERFORM.

IF YOU’RE FACING A MEDICAL EMERGENCY, CALL YOUR LOCAL EMERGENCY SERVICES IMMEDIATELY, OR VISIT THE NEAREST EMERGENCY ROOM OR URGENT CARE CENTER. YOU SHOULD CONSULT YOUR HEALTHCARE PROVIDER BEFORE FOLLOWING ANY MEDICALLY RELATED INFORMATION PRESENTED ON OUR PAGES.

ALWAYS CONSULT A LICENSED ATTORNEY FOR ANY ADVICE REGARDING LEGAL MATTERS.

A LICENSED FINANCIAL OR TAX PROFESSIONAL SHOULD BE CONSULTED BEFORE ACTING ON ANY INFORMATION RELATING TO YOUR PERSONAL FINANCES OR TAX RELATED ISSUES AND INFORMATION.

SCARS IS NOT A PRIVATE INVESTIGATOR – WE DO NOT PROVIDE INVESTIGATIVE SERVICES FOR INDIVIDUALS OR BUSINESSES. ANY INVESTIGATIONS THAT SCARS MAY PERFORM IS NOT A SERVICE PROVIDED TO THIRD-PARTIES. INFORMATION REPORTED TO SCARS MAY BE FORWARDED TO LAW ENFORCEMENT AS SCARS SEE FIT AND APPROPRIATE.

This content and other material contained on the website, apps, newsletter, and products (“Content”), is general in nature and for informational purposes only and does not constitute medical, legal, or financial advice; the Content is not intended to be a substitute for licensed or regulated professional advice. Always consult your doctor or other qualified healthcare provider, lawyer, financial, or tax professional with any questions you may have regarding the educational information contained herein. SCARS makes no guarantees about the efficacy of information described on or in SCARS’ Content. The information contained is subject to change and is not intended to cover all possible situations or effects. SCARS does not recommend or endorse any specific professional or care provider, product, service, or other information that may be mentioned in SCARS’ websites, apps, and Content unless explicitly identified as such.

The disclaimers herein are provided on this page for ease of reference. These disclaimers supplement and are a part of SCARS’ website’s Terms of Use

Legal Notices: 

All original content is Copyright © 1991 – 2023 Society of Citizens Against Relationship Scams Inc. (Registered D.B.A SCARS) All Rights Reserved Worldwide & Webwide. Third-party copyrights acknowledge.

U.S. State of Florida Registration Nonprofit (Not for Profit) #N20000011978 [SCARS DBA Registered #G20000137918] – Learn more at www.AgainstScams.org

SCARS, SCARS|INTERNATIONAL, SCARS, SCARS|SUPPORT, SCARS, RSN, Romance Scams Now, SCARS|INTERNATION, SCARS|WORLDWIDE, SCARS|GLOBAL, SCARS, Society of Citizens Against Relationship Scams, Society of Citizens Against Romance Scams, SCARS|ANYSCAM, Project Anyscam, Anyscam, SCARS|GOFCH, GOFCH, SCARS|CHINA, SCARS|CDN, SCARS|UK, SCARS|LATINOAMERICA, SCARS|MEMBER, SCARS|VOLUNTEER, SCARS Cybercriminal Data Network, Cobalt Alert, Scam Victims Support Group, SCARS ANGELS, SCARS RANGERS, SCARS MARSHALLS, SCARS PARTNERS, are all trademarks of Society of Citizens Against Relationship Scams Inc., All Rights Reserved Worldwide

Contact the legal department for the Society of Citizens Against Relationship Scams Incorporated by email at legal@AgainstScams.org