Significant changes to NACHA’s Operating Rules are coming in 2026, and they’ll raise the bar for fraud detection across the ACH network. For the first time, RDFIs will be required to monitor inbound ACH credits, while ODFIs, TPSPs, and TPSs must enhance their oversight on outbound activity and client controls.

‍

To stay compliant and resilient:

• RDFIs should prepare to identify suspicious inbound transactions using behavioral patterns and indicators of synthetic or mule account activity.
  
• ODFIs and TPSs must strengthen controls around origination, especially for high-risk scenarios like payroll redirection and first-time originators.
• TPSPs will need to implement client-level fraud detection rules and ensure scalable, role-specific monitoring without adding operational overhead?

‍

These shifts mean fraud and compliance teams must collaborate early, manual processes won’t suffice.

‍

Institutions will need real-time alerting, explainable logic, and automation to manage exceptions and reduce false positives.

‍

🔍 Not sure where to start? The upcoming changes don’t come with a template. That’s why we're hosting tailored strategy sessions to help you design a proactive roadmap, aligned with NACHA expectations and built to scale.

‍