Check fraud reports nearly doubled last year, and 65% of U.S. businesses have been affected by it, according to data cited by the Association for Financial Professionals. For a small business, a single fraudulent check clearing the account can mean a five-figure loss and weeks of disruption. So what is Positive Pay, and why do fraud prevention experts consistently recommend it as the single most effective defense? This guide explains how it works and how to put it in place for your business.
Checks might feel like yesterday's payment method, but they remain a prime target for criminals precisely because so many businesses still rely on them. Mail theft has fueled much of the recent surge. Thieves steal outgoing checks from mailboxes, collection boxes, and even postal carriers, then alter and cash them before the business notices anything is wrong.
The scale of the problem is significant. Financial institutions filed hundreds of thousands of suspicious activity reports related to check fraud in recent years, and businesses are disproportionately targeted because their checks tend to be larger and their accounts hold more money than consumer accounts.
Check washing is one of the most common forms of check fraud. A thief steals a legitimate check, then uses household chemicals to dissolve the ink in the payee name and amount fields while leaving the signature intact. The check is then rewritten, often for a much larger amount and payable to a different person, and deposited or cashed.
Because the signature is genuine and the check stock is real, washed checks frequently pass visual inspection. By the time the business reconciles its account and spots the altered check, the money is often long gone. This is exactly the gap Positive Pay is designed to close.
Positive Pay is a fraud prevention service offered through business banking that verifies checks and ACH payments before they clear your account. Here is the core idea: your business tells the bank exactly which checks it has issued, including the check number, amount, payee name, and date. When a check is presented for payment, the bank compares it against your list. If everything matches, the check clears normally. If anything does not match, the item is flagged and held for your review.
In practical terms, Positive Pay flips the default. Instead of fraudulent checks clearing unless someone catches them, mismatched checks are stopped unless you approve them. That single change is why treasury professionals consider it the gold standard of check fraud protection.
FSCB's Positive Pay process is straightforward and runs through digital banking:
An exception item is any check that fails to match the details you submitted. Common causes include a check number that was never issued, an amount that differs from your records, an altered payee name, or a duplicate presentation of a check that already cleared.
Not every exception is fraud. Sometimes the mismatch is a typo in your uploaded file or a legitimate check you forgot to register. That is why the review step matters: you see exactly what was presented, compare it against your records, and make the call. The 11 AM decision deadline keeps the payment system moving while giving you a real window each morning to protect your account. Building a quick exception review into your daily opening routine takes just a few minutes.
Check Positive Pay covers paper checks, matching the check number, amount, issue date, and account. ACH Positive Pay extends the same protective logic to electronic payments, which matters because ACH fraud has grown alongside check fraud as businesses shift to electronic transactions.
FSCB's ACH protection includes two additional tools worth understanding. ACH Filters let you pre-approve recurring ACH debits and credits, such as your payroll provider or utility payments, so they post automatically without daily review. Anything outside your pre-set filters appears as an exception for you to pay or return. ACH Blocks go further, allowing you to block all ACH debits, all ACH credits, or both from posting to a specific account. A payroll-only account, for example, might block all incoming ACH debits entirely.
Any business that issues checks or receives ACH activity is a candidate, but Positive Pay delivers the most value if your business:
There is also a liability dimension many owners do not realize. Banks increasingly take the position that a business offering Positive Pay and declines it may bear responsibility for fraudulent checks the service would have caught. Adopting the tool is not just an operational upgrade, it is a risk management decision. For more on protecting your business accounts, see FSCB's business fraud prevention resources.
FSCB's Positive Pay gives Missouri businesses an automated, daily defense against check fraud and unauthorized ACH activity, all managed through digital banking. It pairs naturally with FSCB's business accounts, and businesses using Commercial Checking gain access to it as part of a broader treasury management toolkit. Setup is straightforward, and your local FSCB team will walk you through uploading your first check file and configuring ACH filters that fit how your business pays and gets paid.
Fraud prevention works best before the first incident, not after. For guidance on strengthening your overall financial operations alongside it, see our financial planning tips for business owners.
Learn more about Positive Pay from FSCB or contact your nearest branch to get your accounts protected today.
No. While large companies were early adopters, small and mid-sized businesses are now frequent fraud targets precisely because criminals assume they lack protection. Any business that issues checks benefits, and the daily time commitment is minimal: a quick morning review of any exceptions, which many days will be zero.
For each check you issue, you submit the check number, dollar amount, payee name, and issue date. You can type entries in manually or upload a file through FSCB digital banking, and the upload needs to happen before the check is expected to be processed. Most accounting software can export check registers in a compatible format, making the upload part of your normal check run.
Exception items must be decided by 11 AM through online or mobile banking. Ask your FSCB banker about the default handling that applies to your account if no decision is made, and build the exception review into your morning routine so the deadline never becomes an issue. Exceptions are available as early as 6 AM, which gives you a comfortable window.
Yes, through ACH Positive Pay. It extends verification to electronic payments and includes ACH Filters, which pre-approve your known, recurring ACH activity, and ACH Blocks, which can stop all ACH debits or credits from posting to an account entirely. Together with Check Positive Pay, this covers both paper and electronic payment fraud.
Liability depends on the circumstances, including how quickly the fraud was reported and what protections were in place. Businesses that decline Positive Pay when their bank offers it may bear greater responsibility for losses the service would have prevented. This is a meaningful reason to adopt the tool proactively. For specifics about your situation, talk with your FSCB banker, and consult your attorney regarding liability questions.