Trustmi helps you meet Nacha's new ACH fraud monitoring requirements with continuous risk monitoring, account verification, and audit-ready controls.
Free Nacha Risk Assessment


















For years, companies have lost money to payment requests that looked legitimate, were approved internally, and still turned out to be fraud.
Nacha now calls this false pretenses: payments induced through deception.
Under the 2026 rule changes, organizations are expected to detect and prevent it. Failure can lead to fines, enforcement actions, and loss of ACH privileges.
For many organizations, bank account validation is the last line of defense. But false pretenses use accounts that can pass those checks.
In reality, an account validation just confirms an account is real, active, and able to receive funds—not that the payment should go there. In fact, 90% of bank accounts used in B2B payment fraud are bank-approved accounts that can pass standard validation checks.
Many fraud controls are designed to catch risk at the moment a payment is created or released. But false pretenses usually happen earlier, before any payment file exists.
Most B2B payment fraud attacks start in email, and 92% involve the impersonation of executives or vendors. By the time the ACH entry is sent, the request may already be approved in workflow and queued for payment.
AP teams often rely on verbal confirmations, email threads, and spreadsheet logs to verify payment changes and document approvals.
This manual and fragmented process makes it difficult to satisfy Nacha’s new requirement that procedures be reasonably intended to identify fraudulent entries.
Nacha’s 2026 amendments require all non-consumer Originators, Third-Party Senders, and Third-Party Service Providers to establish documented, risk-based processes for identifying ACH entries that are unauthorized or authorized under False Pretenses. Phase 1 took effect March 20, 2026 for organizations with 6 million or more ACH entries. Phase 2 expands this requirement to all remaining participants effective June 22, 2026.
The previous rules required a vague “commercially reasonable fraudulent transaction detection system” for a limited subset of debit transactions. And this was primarily WEB debits. The 2026 rules extend requirements to ACH credits. It also introduces False Pretenses as a defined fraud category that organizations must actively monitor for.
Account validation does not detect whether a payment request was genuine. False Pretenses fraud specifically targets the space between those two things. An attacker who has compromised a vendor’s email, changed their banking details, and induced an authorized payment has passed every validation check.
Trustmi works alongside existing controls including ACH blocks, filters, and bank-side validation tools. Those controls address unauthorized external debits. Trustmi also addresses the fraud that passes those controls cleanly because it travels inside the authorized payment process.
Nacha compliance under the 2026 rules is not solely a finance or IT concern. It requires coordination across accounts payable, treasury, compliance, and information security. Trustmi connects all of these functions through a single platform, giving each team the visibility they need without requiring manual coordination across systems.
"Trustmi provided transparency into our payment process to see where cyberattacks and errors were happening and full protection without changing our workflow."
"Like many businesses today, we've experienced cyber attacks on our payment process, but we didn't realize the extent to which we were at risk until we evaluated Trustmi. Now we're confident we'll be able to avoid future attacks with their platform."
"Trustmi's platform is an important tool for our team. Their Payment Flows module increases our payment cycle security, and our team has also managed to cut down the time for preparing payments reports from half a day to half an hour."
Protecting businesses globally against socially engineered fraud and errors.
Zero Compromise
Stops fraud without disrupting
legitimate payments.
Protecting businesses globally against socially engineered fraud and errors.
By Eliminating Fraud and Payment Errors
Manual Process Time Reduced