Track 1: Foundations Lesson 1 of 6
~8 min read
What you'll learn
  • The current, working definition of Positive Pay
  • Why the product has shifted from "fraud feature" to "adoption product"
  • How modern PP differs from the version your FI bought 10 years ago
  • The one question that separates FIs running real PP programs from FIs that have it but don't

What Positive Pay actually is in 2026.

Start with the working definition.

Positive Pay is the system that lets your business clients pre-authorize the payments coming out of their accounts. Issued checks and ACH transactions get matched against an authorized list, and anything that doesn't match becomes an exception the business client has to decision — pay or return — before the funds move.

It's simple in concept and far harder in execution. The part that's changed in the last five years is what good execution looks like.

What's different in 2026.

The version of Positive Pay most community FIs bought a decade ago was essentially a fraud feature buried inside the core. Treasury managed it, business clients tolerated it, and it served mainly as something the FI could show an auditor.

Modern Positive Pay is built differently. It still operates as a fraud engine, but the design priority is adoption: the business client has to actually log in and use the tool for any of it to work. The shift is structural — mobile-first decisioning, file-agnostic ingestion from whatever accounting software the business uses, AI-powered Payee Match that handles handwriting variations, and a pre-built ruleset so onboarding doesn't open with 30 exceptions to triage.

FIs running modern PP are winning right now. FIs running legacy PP are stuck and usually can't figure out why their business clients won't engage.

"People think it's a big fee until they've experienced fraud. Then the fee doesn't sound so big anymore."

VP Business Services, $5B community FI · 20+ branches

The one question that matters.

There's a question that separates the two groups of FIs. Ask yourself, or ask the person at your FI who runs the program:

Of our business clients enrolled in Positive Pay, what percentage decisioned their last exception themselves?

If the answer is north of 75%, you're running a real Positive Pay program. The tool fits how your business clients actually work, which is why they're using it and paying for it.

If the answer is under 25%, your treasury team is decisioning exceptions on behalf of clients and your relationship managers are chasing cutoff calls. The program exists on paper but isn't doing its job. The fraud risk is real, but so are the fixes; the rest of this curriculum is about them.

Do this

Pull your last 30 days of Positive Pay exceptions. Calculate the percentage your business clients decisioned themselves vs. the percentage your team defaulted. Write the number down. We'll come back to it in Lesson 4 of Track 2.

Two myths to retire on the spot.

Myth 1: Positive Pay is a check product. It was in 1995, but today the majority of business payment fraud moves through ACH. Modern PP covers both lanes. A treasury team that pitches it as just "check protection" loses about 60% of the conversation at the start.

Myth 2: Positive Pay is only for the largest FIs. It's the other way around. The largest national FIs have PP because it's table stakes; the opportunity in 2026 is community FIs using it as a competitive lever to win commercial deposits from those larger institutions. Community FIs that nail PP can punch above their weight.

What's next.

Lesson 2 introduces the frame we'll use for the rest of the curriculum: modern Positive Pay is two products in one. Most legacy systems handle the first product well, but only a few handle both.

Self-check

3 quick questions

What's the one question that separates FIs running real Positive Pay programs from FIs that just have PP?
A The percentage of business clients enrolled
B The percentage of exceptions decisioned by the client, not defaulted by the FI
C The total revenue Positive Pay generates
D The number of fraud incidents prevented
Correct. This is the leading indicator of program health — and the number most FIs have never measured.
Not quite. The key metric is client self-service rate — what percentage of exceptions did the business client decision themselves vs. your team defaulting.
Which of these is true about modern Positive Pay?
A It only covers checks
B It's a feature buried inside the core
C It's both a fraud engine and an adoption product
D It's only for FIs over $5B in assets
Correct. This is the framing we'll use throughout the Academy — and it explains why most legacy implementations stall.
Not quite. Modern PP is both a fraud engine and an adoption product. That dual nature is what separates modern platforms from legacy ones.
Which payment lane is most business payment fraud moving through today?
A Cash
B Checks
C ACH
D Wires
Correct. ACH-based payroll and invoice fraud have surged. Modern PP covers both checks and ACH — but most teams still pitch it as check-only.
Not quite. While check fraud is still the top driver of dollar losses, ACH is where fraud is growing fastest. Modern PP covers both.