August 18, 2026
Operations

NACHA Fraud Monitoring Rules Are Here: Is Your Credit Union Ready?

Compliance updates aren't always the most exciting item on your to-do list, but this one is worth the attention: at its core, it's about protecting your members from costly fraud. As you may already be aware, the National Automated Clearing House Association’s (NACHA's) new fraud monitoring rules are now fully implemented. Every credit union, regardless of ACH volume, is expected to have risk-based processes in place to identify potentially fraudulent ACH activity.

For training and compliance teams, that means the requirement isn't just a system upgrade; it's a people upgrade. Staff who review, approve, or investigate ACH activity need to understand what the rules require and how to use the tools built to support them.

A New Tool for Your Team

Sharetec has been working ahead of this change and is excited to introduce the new ACH Monitoring report, now available in both Velocity and GUI, found under Suspect Reporting within the Reports menu in the Customer Portal. Building the report was only step one; the real payoff comes when frontline and back-office staff know how to read it, act on it, and document their review as part of your credit union's annual risk assessment.

To help with that, Sharetec hosted an ACH Monitoring Report Power Hour for all credit unions on July 16, 2026, walking through the report's fields, common red flags, and how it fits into a risk-based monitoring workflow.

About the Rules

Phase 1 of NACHA's fraud monitoring requirements took effect March 20, 2026, applying to institutions that exceed certain ACH volume thresholds. Phase 2 became effective June 19, 2026, extending the requirements to all financial institutions regardless of ACH volume.

Under these rules, all Receiving Depository Financial Institutions (RDFIs), a category that includes credit unions, must have risk-based processes in place to catch incoming ACH credit entries that may be unauthorized. That also covers entries that are technically "authorized," but only because a member was deceived into approving them, through business email compromise, vendor impersonation, or payroll redirection scams. Originating institutions have similar obligations on their side, and every one of these processes must be reviewed at least annually.

That annual review requirement is exactly where training earns its keep: a process is only as strong as the staff applying it, and examiners will expect to see evidence that your team was trained in it. Get this right, and it's not just a line on an exam checklist; it's your members' money and trust that you're protecting.

Coming Soon: On-Demand Video Training

Live sessions like Sharetec’s Power Hour don't always fit every schedule, and new staff need a way to get up to speed after the fact. That is why Sharetec is currently working to provide on-demand video training for the ACH Monitoring report, so members of your credit union team can walk through the tool at their own pace, revisit it during annual reviews, and onboard new employees without waiting for the next live event. Details will be shared with Sharetec credit unions as soon as they are available.

In the meantime, if your team has questions about the ACH Monitoring report or how to incorporate it into your risk-based review process, don't hesitate to reach out. Contact your Client Account Executive, who will connect you with the Sharetec Enablement Team.

‍

Want to discuss?

If your have a challenge at your credit union, the Sharetec team has likely already solved something similar before. Let's chat!

Request a Demo
©2026 Sharetec Systems Inc., All Rights Reserved.
Privacy Policy