Glossary

Controls

What is positive pay?

Positive pay is a bank service in which the company sends the bank a file of issued payments so the bank can reject any item that does not match, most commonly used for checks and increasingly for ACH debits.

Also called ACH positive pay · payee positive pay · reverse positive pay

Check positive pay matches the check number, amount, and account. Payee positive pay adds the payee name, which is what catches an altered check that keeps the original amount. ACH positive pay works on the debit side by allowing only pre authorized originators to pull from an account.

Positive pay validates that a payment matches what was issued. It cannot tell that the issued payment itself was directed to a fraudulent account, which is why it does not address vendor impersonation.

Common questions

No. Positive pay confirms that a payment matches the issue file, and in a redirection attack the fraudulent account details are already in that file.

Positive pay compares items against an issue file sent by the company. Reverse positive pay puts the review burden on the company, which examines presented items each day and decides what to return.

Sources and further reading

Citing this entry? Cite as Coffr, LLC and link to https://getcoffr.com/glossary/positive-pay.

Read the longer research behind this in Blog, or browse the full glossary.

Disclosures

  1. Coffr, LLC carries insurance for its own benefit. That insurance does not cover you, your payments or your funds, and Coffr does not guarantee any payment. Coffr does not hold or transmit customer funds. See the Terms of Service.
  2. "Verified" means the identity, business and bank account checks shown passed on the date shown. A verification confirms who you're paying at that time. It doesn't guarantee that a payment will reach the intended recipient.
  3. Coffr records a cryptographic fingerprint of each verification on a public ledger run by independent organizations. Fingerprints contain no names, bank account numbers or tax IDs, and they can't be changed or deleted.
  4. Sources: ACH volume, Nacha 2025 ACH Network volume; online crime losses, FBI IC3 2025 Internet Crime Report.