Positive pay is a bank fraud-prevention service in which a company sends its bank a file of the checks it has issued, and the bank pays only the presented checks whose number, amount and date match that file, returning any mismatch to the company for a pay or return decision.
Positive pay exists because check fraud remains the most common payment fraud in the United States. In the 2026 AFP Payments Fraud and Control Survey, 76% of organisations reported attempted or actual payments fraud in 2025, and 58% reported check fraud.
Positive pay comes in four variants:
- Check positive pay: the bank matches check number, amount and issue date against the issued file
- Payee positive pay: the bank also matches the payee name, which blocks altered beneficiaries
- Reverse positive pay: the bank sends the list of presented checks and the company reviews it itself
- ACH positive pay: the bank filters electronic debits against authorised originators and amounts
Positive pay works on a deadline. Exceptions must be decided before the bank's daily cut-off, and a default rule, pay or return, applies to undecided items. A company that sets the default to pay and does not review exceptions every day has bought the service without the protection. On the collection side, the bank service for incoming checks is the lockbox.
European companies rarely use checks at scale, but the same principle now applies to transfers. Since 9 October 2025, the Instant Payments Regulation (EU) 2024/886 requires euro-area banks to offer Verification of Payee, which checks that the beneficiary name matches the IBAN before a SEPA transfer is sent. Phacet adds the control upstream: bank data validation and the agent that can detect fake IBAN fraud flag a changed supplier account before the payment run is built.
