# What Is Positive Pay and Should You Use It?

- Author: PreciseBankFlow (https://www.precisebankflow.com)
- Published: 2026-02-03
- Updated: 2026-02-03
- Category: Internal controls over cash
- Canonical: https://www.precisebankflow.com/blog/what-is-positive-pay

> What is positive pay: the issued-check file, exception decisions, payee positive pay, ACH positive pay, and costs against the fraud it stops.
Positive pay is a bank service that compares each check presented for payment against a list of checks the business says it issued. A check whose number, amount or payee does not match is held as an exception, and the business decides whether the bank pays or returns it before any money leaves.

## What is positive pay checking presented checks against?

Positive pay checks every presented check against the issued-check file the business sent the bank. The bank compares the account number, check number and amount, and with payee positive pay the payee name too. A presented check that matches is paid. One that does not match becomes an exception for the business to decide.

### What counts as a match

A match means the check number exists in the file, has not already been paid or voided, and carries the same amount. Some services also compare the issue date and reject checks older than a set number of days, which stops very old checks from clearing. Anything else is a mismatch:

- **No such check.** The number is not in the file. This is the classic counterfeit, printed with the company's real account and routing numbers.
- **Wrong amount.** The number is real but the amount was raised, or a clerk keyed the wrong figure into the file.
- **Already paid.** The same check is presented twice, for example once by mobile deposit and again as paper.
- **Voided.** A check the business cancelled turns up anyway.

### Why the comparison happens at the bank

The value of positive pay is timing. Without it, a business finds a forged check on the next statement or at reconciliation, after the money has gone. With it, the forged check is caught before the bank honors it. Reconciliation still matters, but it becomes the second line instead of the first.

## The issued-check file a positive pay service expects

The issued-check file is a list of every check written on the account since the last upload, sent to the bank before those checks can be presented. Each line carries the account number, check number, issue date and amount, plus the payee name for payee positive pay. Voids are sent as their own lines.

### The fields

Banks publish their own layout, often a fixed-width or comma-separated text file, and many accounting systems can export it directly. The example below shows the content, not any bank's exact format.

| Field | Example value |
| --- | --- |
| Account number | 000123456789 |
| Check number | 10482 |
| Issue date | 2026-10-14 |
| Amount | 1,275.00 |
| Payee | Harbor Office Supply LLC |
| Record type | Issue (or Void) |

### When to send it

Send the file the same day the checks are printed, before anything is mailed. A check that reaches a bank before its line reaches the positive pay system shows up as an exception, and someone has to approve it by hand. That is a nuisance once and a habit risk if it happens every week, because staff learn to approve everything.

### Voids and manual checks

A voided check needs a void line, or the check stays live in the file and could be paid if it was stolen. Handwritten checks from a desk book are the usual gap. They must go into the file too, which is one reason many businesses stop writing manual checks once positive pay is in place.

## Positive pay exception decisions: pay or return

An exception is a presented check the bank could not match, and the business must tell the bank to pay or return it by a daily cutoff. If nobody decides in time, the bank applies a default decision set when the service was opened. Choose "return" as that default, so silence never pays a forged check.

### Who decides

Exception decisions belong to someone who can confirm what was issued but cannot add checks to the file. If the same person writes checks, uploads the file and approves exceptions, the control collapses into one person. A common split is that accounts payable uploads the file and a controller or owner works the exception queue.

### A worked example

The example below is one morning's exception list for a fictional company. The amounts and payees are made up.

| Check | Presented amount | Issued amount | Reason | Decision |
| --- | ---: | ---: | --- | --- |
| 10471 | 4,850.00 | 485.00 | Amount mismatch | Return. The invoice was for 485.00; the check was altered. |
| 10479 | 212.40 | 212.40 | Issued after the last upload | Pay, after confirming the check in the register and adding it to the file. |
| 99312 | 2,900.00 | none | Number not in file | Return. The number is outside the company's range: a counterfeit. |
| 10463 | 1,100.00 | 1,100.00 (paid 10-02) | Already paid | Return. The check was cashed earlier by mobile deposit. |

Two of the four exceptions were fraud, one was a duplicate presentment and one was the company's own late upload. Fraud and housekeeping look alike in the queue until someone checks the register, which is why every line needs a real look.

### Recording the decisions

Keep the exception list, the decision and who made it. Each exception is an open question until it is closed, and the same discipline that applies to unmatched items on a reconciliation applies here; [reconciliation exception management](/blog/reconciliation-exception-management) covers how to track and age them.

## Payee positive pay and teller positive pay

Payee positive pay adds the payee name to the comparison, so a check with a real number and amount but a changed payee line is caught. Teller positive pay sends the issued-check file to the bank's tellers, so a check cashed over the counter is checked before cash is handed out.

### Why the payee matters

Check washing removes the ink from a genuine check and rewrites the payee, sometimes leaving the amount alone. Standard positive pay sees a correct number and amount and pays it. Payee matching catches it. Banks differ in how strictly they compare names, and some allow small differences such as "Inc" against "Incorporated", so ask how the matching works before relying on it.

### What it asks of you

Payee positive pay needs the payee name in the file exactly as printed on the check. If your accounting system prints a vendor's legal name but exports a short name, every check becomes an exception. Test with a small batch before turning it on for the whole account.

## ACH positive pay and electronic debit filters

ACH positive pay applies the same idea to electronic debits. The business lists the companies allowed to debit the account, often with a maximum amount each. Any other ACH debit is held as an exception for a pay or return decision, just like a check that does not match.

### Filters and blocks

Banks offer this in a few strengths. A full block stops every ACH debit, which suits an account that should only receive money. A filter allows named originators by their company ID and stops the rest. ACH positive pay adds the exception queue, so an unknown debit is presented for a decision rather than returned automatically. The trade-offs between these, and how to set one up, are in [ACH debit block](/blog/ach-debit-block).

### Keeping the list current

The authorized list needs care. A new payroll provider, tax payment or loan servicer will start debiting the account, and if it is not added first, its debit appears as an exception. That is the control working, but it also means someone must be available to decide each one before the cutoff.

## Is positive pay worth the monthly fee?

Positive pay is usually worth its fee for any account that issues paper checks in meaningful numbers, because a single forged check can cost more than years of service. For an account that writes a handful of checks a year, the case is weaker, and stopping check writing on that account may be cheaper still.

### What the service costs

Costs come from three places: the bank's monthly and per-item fees, staff time to upload files and work exceptions, and setup work to get the file export right. Ask the bank for its fee schedule. The staff time is real but small once the file comes straight out of the accounting system.

### What it protects against

Without positive pay, the business relies on finding a bad check on the statement and reporting it fast. Under [Uniform Commercial Code section 4-406](https://www.law.cornell.edu/ucc/4/4-406), adopted in some form by the states, a bank customer must examine statements with reasonable promptness, and a customer who does not report an unauthorized signature or alteration within one year after the statement is made available is barred from asserting it against the bank. Read your deposit agreement too, because it may set its own, shorter deadline. Positive pay moves detection to the day the check is presented, which takes much of that timing risk off the business.

### Questions to answer first

- How many checks does the account write each month, and to whom?
- Does the accounting system export a file the bank accepts?
- Who will work exceptions each banking day, and who covers holidays?
- Does the deposit agreement say anything about losses on checks when positive pay is declined?

## Positive pay setups that still let check fraud through

Positive pay fails when the file is incomplete, when exceptions are approved without a look, or when the service covers only some accounts. Each of these leaves a path for a forged check to clear. The service is a comparison, so it is only as good as the list it compares against and the person reading the exceptions.

### Mistakes to avoid

- **Approving the queue in bulk.** If late uploads make exceptions routine, staff click "pay all". Fix the upload timing so exceptions are rare and each one gets attention.
- **Default decision set to pay.** A missed cutoff then pays every mismatch.
- **Accounts left off.** Fraudsters target the payroll or petty account that was never enrolled.
- **Same person uploads and approves.** One person can add a fake check to the file and then approve it.
- **No payee matching on accounts with mailed checks.** Washed checks keep the original number and amount.
- **Manual checks missing from the file.** These generate exceptions that get approved from memory.

### Controls that sit beside it

Positive pay does not replace signer controls. A large check should still need two people before it is printed; [dual signature on checks](/blog/dual-signature-on-checks) explains the threshold and how to make the second signature mean something. And the monthly reconciliation still has to tie every paid check to the register.

If you want a second pass after the bank's, [PreciseBankFlow](/) reads the statement, flags gaps in the check sequence and lists duplicate or unmatched items for your review.