As ACH payments continue to grow across the US payments ecosystem, fraud prevention and risk management remain an important focus for financial institutions, payment providers, and network participants.
To support broader ACH network risk management efforts, Nacha introduced new fraud monitoring requirements in 2026. These requirements reinforce the importance of maintaining risk-based processes designed to identify ACH activity that may be unauthorized or conducted under false pretenses.
What is Nacha and what do they do?
Nacha is the organization that governs the ACH network in the US, which enables electronic bank-to-bank payments such as direct deposits and ACH debits. Nacha develops and manages the ACH Operating Rules that help ensure ACH payments are processed securely, consistently, and efficiently across financial institutions.
What do Nacha's fraud monitoring requirements mean?
The 2026 Nacha Operating Rules require organizations participating in the ACH Network to maintain appropriate fraud monitoring processes based on each organization’s specific risk profile, payment activity, and operational model.
Rather than prescribing a single approach, the requirements are designed to support a flexible, risk-based framework that may evolve alongside changing fraud patterns, payment volumes, and operational considerations.
Examples of monitoring activities may include:
- Reviewing unusual payment activity or transaction patterns
- Monitoring ACH return trends
- Maintaining operational and compliance escalation processes
- Periodically reviewing monitoring and risk management processes
Why this matters
ACH payments continue to be an important payment method for both consumers and businesses due to their efficiency, reliability, and cost-effectiveness. At the same time, fraud and unauthorized payment activity across the broader payments ecosystem continue to evolve.
As a result, clients and payers increasingly expect payment providers to maintain strong operational risk management practices and monitoring capabilities that support secure payment experiences.
Flywire's ACH fraud monitoring approach
Flywire maintains a risk-based ACH fraud monitoring and risk management framework designed to support applicable Nacha Operating Rules requirements, including the fraud monitoring requirements introduced in 2026.
As part of Flywire’s broader compliance and operational risk management program, Flywire maintains processes intended to support the monitoring of ACH payment activity, the review of unusual or potentially suspicious activity, and the escalation of identified risks where appropriate.
Flywire periodically reviews its ACH monitoring processes and works closely with its banking and payment partners to support applicable ACH network standards.
Looking ahead
As the ACH ecosystem continues to evolve, Flywire remains committed to supporting secure, reliable, and scalable payment experiences for clients and payers across its global payments network.
Flywire will continue to periodically review its ACH risk management and monitoring processes to help address evolving fraud trends, while supporting operational best practices and applicable Nacha Operating Rules requirements.
To learn more about the upcoming Nacha fraud monitoring rule changes, visit Nacha’s website.