NACHA fraud monitoring rules

When you use Sage Intacct bank files to create ACH payments and upload them to your bank, you're responsible for helping prevent fraud. Recent NACHA (ACH Network) rules require businesses that send ACH payments to actively monitor for suspicious or fraudulent activity—even if the bank also performs fraud checks.

Ensure that you follow the appropriate operational practices to remain compliant.

What you should do

Make sure that you have internal processes to regularly review the following

  • ACH payment activity and reports

  • Unusual payment amounts or spikes in payment volume

  • New or changed vendor bank accounts

  • Payment approvals and user activity

Sage Intacct provides tools such as reporting, audit logs, approval workflows, and vendor bank account change tracking that support these monitoring practices.

Confirm that appropriate internal controls are in place

  • Approval workflows for ACH payments

  • Segregation of duties between payment creation and approval

  • Periodic review of vendor bank account changes

These controls help reduce fraud risk and align with NACHA monitoring expectations.

Use company entry descriptions: PAYROLL or PURCHASE

Make sure that you use the appropriate values when generating ACH files:

  • PAYROLL for payroll-related payments

  • PURCHASE for vendor or purchase-related payments

The company entry description is set on the from which payments are made.