What Is Positive Pay and How Does It Protect Against Check Fraud?

Check fraud reports nearly doubled last year, and 65% of U.S. businesses have been affected by it, according to data cited by the Association for Financial Professionals. For a small business, a single fraudulent check clearing the account can mean a five-figure loss and weeks of disruption. So what is Positive Pay, and why do fraud prevention experts consistently recommend it as the single most effective defense? This guide explains how it works and how to put it in place for your business.

Key takeaways

Positive Pay is a bank service that verifies every check presented against a list of checks your business actually issued, flagging mismatches before they clear.
Check fraud is surging, driven largely by mail theft and check washing, where thieves chemically erase and rewrite stolen checks.
With FSCB's Positive Pay, mismatched items become exception items you review in digital banking, with a decision to pay or return due by 11 AM.
ACH Positive Pay extends the same protection to electronic payments, with filters and blocks that control what can post to your account.
Under standard banking rules, businesses that decline Positive Pay may bear liability for fraudulent checks, making the service a meaningful risk decision, not just a convenience.

Why check fraud is on the rise

Checks might feel like yesterday's payment method, but they remain a prime target for criminals precisely because so many businesses still rely on them. Mail theft has fueled much of the recent surge. Thieves steal outgoing checks from mailboxes, collection boxes, and even postal carriers, then alter and cash them before the business notices anything is wrong.

The scale of the problem is significant. Financial institutions filed hundreds of thousands of suspicious activity reports related to check fraud in recent years, and businesses are disproportionately targeted because their checks tend to be larger and their accounts hold more money than consumer accounts.

What is check washing and how does it work?

Check washing is one of the most common forms of check fraud. A thief steals a legitimate check, then uses household chemicals to dissolve the ink in the payee name and amount fields while leaving the signature intact. The check is then rewritten, often for a much larger amount and payable to a different person, and deposited or cashed.

Because the signature is genuine and the check stock is real, washed checks frequently pass visual inspection. By the time the business reconciles its account and spots the altered check, the money is often long gone. This is exactly the gap Positive Pay is designed to close.

What is Positive Pay?

Positive Pay is a fraud prevention service offered through business banking that verifies checks and ACH payments before they clear your account. Here is the core idea: your business tells the bank exactly which checks it has issued, including the check number, amount, payee name, and date. When a check is presented for payment, the bank compares it against your list. If everything matches, the check clears normally. If anything does not match, the item is flagged and held for your review.

In practical terms, Positive Pay flips the default. Instead of fraudulent checks clearing unless someone catches them, mismatched checks are stopped unless you approve them. That single change is why treasury professionals consider it the gold standard of check fraud protection.

How does Positive Pay work step by step?

FSCB's Positive Pay process is straightforward and runs through digital banking:

Submit your check information. Before a check is expected to be processed, you type in or upload a file with the check number, amount, payee name, and date through digital banking.
Automatic validation. If someone presents the check at an FSCB branch, it is checked against your uploaded information on the spot. Checks processed elsewhere are verified overnight.
Exception review. If any detail does not match, the check is flagged as an exception item. Exceptions are available for review in digital banking as early as 6 AM.
Your decision. You review each exception and decide to pay or return it by 11 AM through online or mobile banking. If the check is legitimate and the mismatch was a data entry error, you can correct the information and pay it. If it is fraud, you return it and the money never leaves your account.

What happens when a check doesn't match? Understanding exception items

An exception item is any check that fails to match the details you submitted. Common causes include a check number that was never issued, an amount that differs from your records, an altered payee name, or a duplicate presentation of a check that already cleared.

Not every exception is fraud. Sometimes the mismatch is a typo in your uploaded file or a legitimate check you forgot to register. That is why the review step matters: you see exactly what was presented, compare it against your records, and make the call. The 11 AM decision deadline keeps the payment system moving while giving you a real window each morning to protect your account. Building a quick exception review into your daily opening routine takes just a few minutes.

Positive Pay vs. ACH Positive Pay: what is the difference?

Check Positive Pay covers paper checks, matching the check number, amount, issue date, and account. ACH Positive Pay extends the same protective logic to electronic payments, which matters because ACH fraud has grown alongside check fraud as businesses shift to electronic transactions.

FSCB's ACH protection includes two additional tools worth understanding. ACH Filters let you pre-approve recurring ACH debits and credits, such as your payroll provider or utility payments, so they post automatically without daily review. Anything outside your pre-set filters appears as an exception for you to pay or return. ACH Blocks go further, allowing you to block all ACH debits, all ACH credits, or both from posting to a specific account. A payroll-only account, for example, might block all incoming ACH debits entirely.

Who should be using Positive Pay?

Any business that issues checks or receives ACH activity is a candidate, but Positive Pay delivers the most value if your business:

Mails checks regularly to vendors, contractors, or tax authorities
Issues payroll or high-dollar checks that would cause real damage if altered
Has multiple employees with access to check stock or payment systems
Has experienced fraud before or operates in an industry frequently targeted
Wants to reduce the time spent manually reviewing cleared checks during reconciliation

There is also a liability dimension many owners do not realize. Banks increasingly take the position that a business offering Positive Pay and declines it may bear responsibility for fraudulent checks the service would have caught. Adopting the tool is not just an operational upgrade, it is a risk management decision. For more on protecting your business accounts, see FSCB's business fraud prevention resources.

Protect your business with Positive Pay from FSCB

FSCB's Positive Pay gives Missouri businesses an automated, daily defense against check fraud and unauthorized ACH activity, all managed through digital banking. It pairs naturally with FSCB's business accounts, and businesses using Commercial Checking gain access to it as part of a broader treasury management toolkit. Setup is straightforward, and your local FSCB team will walk you through uploading your first check file and configuring ACH filters that fit how your business pays and gets paid.

Fraud prevention works best before the first incident, not after. For guidance on strengthening your overall financial operations alongside it, see our financial planning tips for business owners.

Learn more about Positive Pay from FSCB or contact your nearest branch to get your accounts protected today.

Frequently Asked Questions

Is Positive Pay only for large businesses?

No. While large companies were early adopters, small and mid-sized businesses are now frequent fraud targets precisely because criminals assume they lack protection. Any business that issues checks benefits, and the daily time commitment is minimal: a quick morning review of any exceptions, which many days will be zero.

What information do I need to submit for Positive Pay?

For each check you issue, you submit the check number, dollar amount, payee name, and issue date. You can type entries in manually or upload a file through FSCB digital banking, and the upload needs to happen before the check is expected to be processed. Most accounting software can export check registers in a compatible format, making the upload part of your normal check run.

What happens if I miss the deadline to review an exception item?

Exception items must be decided by 11 AM through online or mobile banking. Ask your FSCB banker about the default handling that applies to your account if no decision is made, and build the exception review into your morning routine so the deadline never becomes an issue. Exceptions are available as early as 6 AM, which gives you a comfortable window.

Does Positive Pay protect against ACH fraud as well as check fraud?

Yes, through ACH Positive Pay. It extends verification to electronic payments and includes ACH Filters, which pre-approve your known, recurring ACH activity, and ACH Blocks, which can stop all ACH debits or credits from posting to an account entirely. Together with Check Positive Pay, this covers both paper and electronic payment fraud.

Who is liable if a fraudulent check clears my business account?

Liability depends on the circumstances, including how quickly the fraud was reported and what protections were in place. Businesses that decline Positive Pay when their bank offers it may bear greater responsibility for losses the service would have prevented. This is a meaningful reason to adopt the tool proactively. For specifics about your situation, talk with your FSCB banker, and consult your attorney regarding liability questions.