1099 Login
Checks are the payment method most likely to be targeted by fraud. If your organization still issues checks, Positive Pay is one of the most effective tools available to stop a fraudulent check before it ever clears your account.
Here’s what Positive Pay is, how it works to help prevent check fraud, what it doesn’t cover, and where check printing fits into the picture.
What Is Positive Pay?
Positive Pay is a fraud-detection service offered by banks to their business customers. Instead of discovering a fraudulent check after it has already cleared your account, Positive Pay screens every check against your own records before payment is made.
How Positive Pay Works
The basic mechanics are simple: your organization sends your bank a file listing every check you’ve issued — check number, issue date, dollar amount, and (in more advanced versions) the payee name. When a check is presented for payment, the bank’s system compares it against that file.
If everything matches, the check clears normally. If something doesn’t match the bank flags it as an exception and holds payment until your organization reviews and approves or rejects it. A non-match could be a check number that was never issued, an altered dollar amount, or a payee name that doesn’t line up.
Why It Matters Today
Checks remain the single most fraud-prone payment method in business-to-business transactions. According to the 2026 AFP Payments Fraud and Control Survey, covering 2025 fraud activity, 76% of organizations experienced attempted or actual payments fraud that year, and checks drove 58% of that fraud activity — more than any other payment method.
This lines up with the bank side of the picture, too: Federal Reserve Financial Services’ 2024 Risk Management Officers Survey of over 360 financial institutions found that, among all payment types, debit cards and checks generated the most fraud and losses, with counterfeit checks, payee forgery, and check washing as primary drivers.
What makes this notable is that checks haven’t gone away. That same 2026 survey found 72% of organizations that use checks plan to keep using them, largely due to vendor requirements from industries like construction, property management, and legal services that still expect paper checks. Checks remain both heavily used and heavily targeted. That combination is why fraud exposure remains high.
The Different Types of Positive Pay
Not all Positive Pay is the same. Banks generally offer some combination of the following:
Standard (Check) Positive Pay — Matches check number, dollar amount, and account number against your issued-check file. This is the baseline version most commercial accounts have access to.
Payee Positive Pay — Adds payee name verification on top of the standard match. This closes a real gap: a fraudster can sometimes alter only the payee name on a stolen check while leaving the amount and check number untouched, which standard Positive Pay won’t catch. Payee Positive Pay requires your payee names to be entered consistently and accurately, which makes clean, standardized check data more important, not less.
Reverse Positive Pay — Instead of you sending the bank a file in advance, the bank sends you a daily list of checks presented for payment, and you’re responsible for flagging anything that doesn’t belong. It’s often less expensive, but it shifts the review burden — and the deadline pressure — onto your team.
ACH Positive Pay — Applies the same logic to electronic ACH debits, letting you pre-authorize which vendors, amounts, or transaction types are allowed to hit your account.
Most banks price these as add-on services, and combining check and ACH Positive Pay gives the most complete coverage for organizations exposed to both payment types.
The Lesser Known Legal Aspects
There’s a legal dimension to Positive Pay that’s worth understanding, separate from the fraud-prevention benefit itself.
Under UCC Section 3-406, if a business’s failure to exercise “ordinary care” substantially contributes to a forged signature or an alteration on a check, that business can be barred from holding its bank responsible for the resulting loss. If both parties were careless, the loss can be split between them. Many commercial deposit agreements now specifically reference Positive Pay: if the bank offers it and the business declines it, the agreement can shift responsibility for check fraud losses back to the business. It’s been shown that courts have upheld Positive Pay agreements with clear, unambiguous language in at least some reported cases, treating a check that wouldn’t otherwise be “properly payable” as payable because the client had agreed to the bank’s verification terms but declined the service.
Of course, this is general information and not legal advice. The specifics depend on your bank’s deposit agreement and the law of your jurisdiction. It’s worth a conversation with your bank or counsel if this applies to your organization.
What Positive Pay Doesn’t Solve
Positive Pay is effective, but it isn’t a complete fraud strategy on its own:
- It only catches discrepancies against what you told the bank. If your issued-check file itself is wrong, Positive Pay won’t flag it, because it matches your records, not your intent.
- It depends on someone reviewing exceptions quickly. An exception that isn’t reviewed and resolved within the bank’s deadline (often by a set time the next business day) may default to being paid or returned, depending on your account setup.
- It doesn’t prevent check washing or mail theft, where the underlying check itself is stolen and physically altered before it’s ever presented. The MICR line and signature stay intact, so the altered check still clears.
- Standard Positive Pay doesn’t catch payee alterations unless you’ve specifically enrolled in Payee Positive Pay.
None of this makes Positive Pay less worth having. It just means that it is one layer in a broader security context.
Where Check Printing Fits In
Positive Pay is only as reliable as the data behind it. Every check you issue has to match your Positive Pay file exactly. The check number, the amount, and the payee name all have to be generated consistently. Also, the MICR line at the bottom has to be accurate and machine-readable for the check to process correctly at all. (We’ve written separately about what MICR is and why it’s legally required on checks, if you want the full technical picture.)
Positive Pay When You’re Outsourcing Check Printing
If your organization outsources check printing and mailing, ask your provider directly how they support Positive Pay: how issued-check data flows from your systems into their print run, how discrepancies are caught before checks are even printed, and whether they can produce a Positive Pay file in your specific bank’s required format — formats vary by bank, and this is a common gap for vendors without direct experience. It’s also worth confirming how that data is protected in transit and storage — check runs involve the same sensitive account data covered by SOC 2, HIPAA, GLBA, and similar frameworks.
At Tab Service, we generate Positive Pay files across more than 200 bank formats as part of every check print run, on secure MICR check stock, so the file that reaches your bank matches what actually left our facility — every check, every time. We’ve written in more detail about when it makes sense to outsource check printing and mailing, including a full checklist for evaluating a vendor’s fraud-protection and Positive Pay capabilities.
Learn more about our services on our Check Printing and Mailing Service page.
Frequently Asked Questions
What is Positive Pay in simple terms? Positive Pay is a bank service that checks every presented check against a list of checks your business actually issued, flagging anything that doesn’t match — a wrong check number, an altered amount, an unrecognized payee — before the check is paid.
Does Positive Pay cost extra? Most banks price Positive Pay as an add-on service to a commercial checking account, separate from standard account fees. Pricing and exact features vary by bank.
What’s the difference between Positive Pay and Reverse Positive Pay? Standard Positive Pay: you send the bank your issued-check file in advance. Reverse Positive Pay: the bank sends you presented checks daily, and your team reviews them instead.
Can Positive Pay stop all check fraud? No — it’s strong against altered amounts and unauthorized check numbers, but it can’t catch errors in your own issued-check data, and it doesn’t stop check washing or mail theft, where a stolen check is altered before it ever reaches your bank.
What happens if my bank offers Positive Pay and I decline it? Under UCC Section 3-406, declining a fraud-prevention service your bank offered can affect who bears the loss if a fraudulent check clears, since many commercial deposit agreements specifically address this. This is general information, not legal advice — the details depend on your deposit agreement and jurisdiction.
Sources: Association for Financial Professionals, 2026 Payments Fraud and Control Survey (via U.S. Bank), Federal Reserve Financial Services 2024 Risk Management Officers Survey, Office of the Comptroller of the Currency, FinCEN Financial Trend Analysis on mail theft-related check fraud, Uniform Commercial Code § 3-406, Cornell Legal Information Institute.
