What is positive pay?

Positive pay is a bank-provided fraud control for business accounts. For checks, a company sends details of checks it has issued, and the bank compares each check presented for payment with that record; a mismatch becomes an exception for the company to approve or return before the bank’s cutoff. Some services also apply positive-pay controls to ACH activity through pre-set rules and approved-party lists rather than a file of issued checks.

The control depends on accurate, timely payment data and prompt exception decisions. It provides an added safeguard, rather than a guarantee against payment fraud or weaknesses in a company’s own approval process.

How positive pay operates on a business account

1. Set up the service with the bank. The business confirms supported payment types, required data fields, file format, submission deadlines and treatment of unanswered exceptions. Those terms differ by institution.
2. Supply the authorisation data. In conventional check positive pay, the business transmits an issued-check file or register. Fields can include the check number, amount, issue date, account information and, under some versions, the payee name.
3. The bank compares presented items. When a check is presented for payment, the bank tests its details against the business’s authorised record. A matching item is paid under the bank’s process.
4. Review exceptions. A check that does not match the supplied record is flagged. An authorised company user reviews the item and instructs the bank to pay it or return it.
5. Meet the deadline. Banks commonly impose a daily decision deadline. If the business does not respond, the bank applies the account’s predetermined default action, which may be pay or return.

Illustrative control loop: A company issues check 1042 for $2,500 to a named supplier and includes those details in its file. If the presented item carries the same fields that its service is configured to match, it is treated as authorised. If it is presented for $25,000, the amount mismatch produces an exception. The bank’s deadline and default setting determine what happens if the company does not decide in time.

The forms of positive pay

• Standard check positive pay: The bank matches a defined set of check fields, commonly including check number and amount, and sometimes date or account details. The exact matching configuration is a bank product decision.
• Payee positive pay: This adds the payee name to the verification. It can address an altered recipient where a basic configuration does not compare payee information.
• Reverse positive pay: The business reviews a list of checks presented for payment rather than supplying a complete authorised issue file in advance. It places more of the daily review task on the customer. Labels and workflows are not uniform, so an organisation should confirm what its bank means by the term.
• ACH positive pay: ACH, or Automated Clearing House, payments are electronic payments rather than checks. The control can rely on transaction filters, payment rules and lists of approved trading partners to identify activity that does not fit the account’s established rules.

Check positive pay and ACH positive pay use different evidence

The distinction is the source of authorisation. Check positive pay asks whether a presented check matches a specific issued-check record. ACH positive pay assesses electronic ACH activity against rules established for that account, such as an approved counterparty or transaction filter.

• Check positive pay addresses exposure from checks a business writes, including counterfeit or altered items.
• ACH rules apply to electronic ACH activity, where there is no issued-check file to compare.
• Payee matching includes the recipient name in check verification, subject to the bank’s capability.
• Reverse positive pay requires the business to review presented items on the bank’s required schedule.

What can go wrong

Positive pay depends on the quality of its source data. A missing, late or inaccurate issued-check record can flag a legitimate payment and delay it. Conversely, a fraudulent check that matches the configured data may evade this particular control. Ad hoc checks may fall outside a routine file process unless they are included in the bank’s required process.

The service cannot prevent every form of fraud. It does not replace controls over payment creation and approval before a check is issued. Its value lies in an independent comparison at the bank, alongside internal access controls and reconciliation.

A pre-enrolment checklist

• Document which check fields the bank will match and whether payee verification is available.
• Confirm the issue-file format, submission frequency and cutoff time.
• Ask whether ACH positive pay is available, and identify the filters, rules or approved-party lists it uses.
• Name primary and backup exception reviewers with authority to decide pay or return.
• Confirm the default outcome for an unanswered exception and make sure reviewers understand it.
• Keep the issued-check record current and access-restricted.
• Check whether accounting, accounts-payable or payroll systems can support reliable production or submission of the required file.
• Review bank charges, including any setup, transaction or integration fees, as part of the service terms.

Positive pay can create a structured decision point before an irregular payment clears, but it also creates a recurring data-submission and exception-review obligation for the business.

Frequently asked questions

What is the difference between positive pay and reverse positive pay?

In standard positive pay, the business sends the bank an authorised record of checks it has issued, which the bank uses for matching. In reverse positive pay, the bank sends presented check information to the business for review. The latter places more responsibility on the business to review items by the bank’s deadline.

Does positive pay verify the payee name?

It can, but this depends on the service configuration. Standard positive pay may match fields such as check number, amount and date, while payee positive pay adds the recipient’s name. A business should confirm the bank’s actual matching fields before relying on the control.

How does ACH positive pay differ from check positive pay?

Check positive pay compares a presented check with an issued-check record. ACH positive pay instead uses controls such as transaction filters, payment rules and approved trading-partner lists to identify electronic ACH activity that does not fit the account’s established rules.

What happens if a business misses a positive-pay exception deadline?

The bank may apply the account’s default decision, typically pay or return, when the business does not respond by the deadline. The deadline and default action are bank-specific, so they should be confirmed during setup and built into the exception-review process.

Sources

• What is Positive Pay? | Workforce & Finance Glossary - Paylocity — www.paylocity.com
• How Positive Pay Works | City National Bank — www.cnb.com
• What Is Positive Pay? How Does Positive Pay Work? - Mitek Systems — www.miteksystems.com
• Check Fraud Is Rapidly Increasing, Positive Pay Adoption Is Not — datos-insights.com
• How Positive Pay is a Vital Tool for Preventing Payments Fraud — www.alkami.com