Methods vary in strength. Micro deposits confirm control of the account but take days. Network based validation services return account status and, in some cases, an ownership match against a name or tax identifier. Instant methods that rely on the payee authenticating into their own bank produce the strongest evidence but require payee participation.
Nacha rules require account validation for the first use of an account in a WEB debit entry, which established validation as a baseline practice rather than an enhancement.
Read the result carefully, because the three answers a validation service can give are not equivalent. Open means the account exists. Open and matched means the name presented is associated with it. No match can mean fraud, or a trading name against a registered entity, or a payroll account held by a subsidiary. Treating every no match as fraud trains the team to click through, which is the outcome to avoid.
Validation is also a moment, not a state. An account validated at onboarding says nothing about the account in next month's change request, which is why the check belongs at every bank detail change and not only at the start of the relationship.
Common questions
Only if the method returns an ownership match. Status only checks confirm the account is open, which does not tell you who controls it.
Typically one to two business days, which is why many organizations pair them with a faster network based check for time sensitive onboarding.
Before first payment and again at every change to bank details, because the change request is the event attackers actually use.
It means the name presented does not match the name associated with the account. That can indicate fraud, or a legitimate difference such as a trading name or a subsidiary, so it should stop the payment and start a check rather than be dismissed.
No. A callback verifies a person, account validation verifies the destination. The two answer different questions and the strongest processes use both.
Sources and further reading
Citing this entry? Cite as Coffr, LLC and link to https://getcoffr.com/glossary/account-validation.