Rules & Guidelines
ACH Services Nacha Operating Rules2026 Rule Changes
JUNE 19, 2026
Fraud Monitoring
All ACH originators must establish and implement risk-based processes and procedures reasonably intended to identify ACH Entries initiated due to fraud. This helps by providing additional opportunities to detect and prevent fraud.
MARCH 20, 2026
Company Entry Descriptions
ACH Originators must use the following Company Entry Descriptions certain types of transactions:
- Payroll: Establish a new standard description of PAYROLL for PPD Credits for payment of wages, salaries, and other similar types of compensation.
- Purchase: Establish a new standard description of PURCHASE for e-commerce purchases.
Fraud Monitoring
Any ACH originators with annual ACH origination volume of 6 million or greater in 2023 must establish and implement risk-based processes and procedures reasonably intended to identify ACH Entries initiated due to fraud. This helps by providing additional opportunities to detect and prevent fraud.
2024 Rule Changes
JUNE 21, 2024
General Rule Definitions for WEB entries
WEB SEC code must be used for all person-to-person (non-business) transactions.
Data Security Requirements
Clarifies that, once a covered ACH originator meets the transaction volume requirement to render account numbers unreadable remains in effect, regardless of future volume.
Use of Prenotification Entries
Prenotes can be used anytime an ACH originator thinks it is necessary to verify the account prior to processing the live dollar amount.
2023 Rule Changes
MARCH 17, 2023
Micro-Entries (Phase 2)
This Rule will define and standardize practices and formatting of Mirco-Entries, which are used by some ACH Originators as a method of account validation. This phase of the Rule requires Originators of Mirco-Entries to use commercially reasonable fraud detection, including the monitoring of Mirco-Entry forward and return volumes.
2022 Rule Changes
SEPTEMBER 30, 2022
Third-Party Sender Roles and Responsibilities
This Rule clarifies the roles and responsibilities of Third-Party Senders (TPS) in the ACH Network by
- Addressing the existing practice of Nested Third-Party Sender relationships, and
- Making explicit and clarifying the requirement that a TPS conduct a Risk Assessment.
SEPTEMBER 16, 2022
Micro-Entries (Phase 1)
This Rule will define and standardize practices and formatting of Micro-Entries, which are used by some ACH Originators as a method of account validation.
JUNE 30, 2022
Supplementing Data Security Requirements
This rule supplements previous ACH Security Framework data protection requirements by explicitly requiring large, non-FI Originators, Third-Party Service Providers (TPSPs) and Third-Party Senders (TPSs) to protect deposit account information by rendering it unreadable when it is stored electronically.
MARCH 18, 2022
Increasing the Same Day ACH Dollar Limit
This rule will continue to expand the capabilities of Same Day ACH. Increasing the Same Day ACH dollar limit to $1 million per payment is expected to improve Same Day ACH use cases, and contribute to additional adoption.
