Be Ready for Nacha's 2026 Fraud-Monitoring Requirements

New fraud-monitoring expectations begin March 20, 2026. Learn what's changing and how to prepare with confidence.

2026 Nacha Rule Changes: What You Need to Know

Beginning in 2026, Nacha is introducing new requirements that will impact how businesses originate ACH transactions. These updates are designed to strengthen fraud prevention, enhance transaction transparency, and improve overall network security. This page outlines what’s changing, who is affected, and how your business can prepare.

What Is Nacha?

Nacha—the National Automated Clearing House Association—oversees and administers the ACH Network in the United States.
The ACH Network supports millions of electronic payments every day, including payroll, vendor payments, direct deposits, and more.

Why These Changes Matter

New Nacha rules taking effect in 2026 will require most ACH-originating businesses to enhance fraud monitoring practices.
If your business processes electronic payments of any kind, these changes likely apply to you.

Your Responsibilities as an ACH Originator

As an Originator, you are responsible for:

  • Knowing and complying with current Nacha Rules
  • Staying informed about upcoming rule changes
  • Maintaining internal controls that meet Nacha’s requirements

What's Changing in 2026

1. Enhanced Fraud Monitoring
Beginning in 2026, Originators must implement risk-based practices to detect and prevent unauthorized or unusual outgoing ACH entries.
This includes:

  • More proactive monitoring of ACH activity
  • Validating transactions that seem inconsistent or unexpected
  • Ensuring your business has controls aligned with Nacha’s expanded security expectations

2. New Company Entry Description Requirements
Nacha will require standardized Company Entry Descriptions for certain ACH transactions. The first seven characters of the description must contain the required term.

For example:

Transaction Type Correct Example Incorrect Example Why
Payroll (PPD Credits) PAYROLL-WK WEEKPAY Must begin with PAYROLL
Payroll (PPD Credits) PAYROLL01 EMPPAY Description must clearly identify payroll
E-Commerce Purchase PURCHASE1 ONLINEPAY Must begin with PURCHASE
E-Commerce Purchase PURCHASEA WEBORDER Required descriptor not present

Key Requirements

 The first 7 characters must contain PAYROLL or PURCHASE and be capitalized.

 The Company Entry Description field allows up to 10 characters.

Compliance Dates to Know

Phase 1 — March 20, 2026
Businesses that originate ACH transactions are required to have the standardized Company Entry Descriptions for certain ACH transactions in place.

Phase 2 — June 19, 2026
Businesses that originate ACH transactions are required to have fraud monitoring in place.

    Preparing Your Business

    Taking steps now will make compliance easier and reduce disruption. Preparation helps ensure:

    • Stronger internal controls
    • Reduced exposure to fraudulent activity
    • A smoother transition as the March and June deadlines approach
    • Better protection for your clients and your business

    Additional Resources 

    Review additional information from NACHA here.