Positive pay is the most effective defense against check fraud and unauthorized ACH debits for California businesses. Tri Counties Bank delivers check positive pay, ACH positive pay, and optional payee name verification through the Trico Business Express exception dashboard. Every presented item is matched against your authorization rules before it posts — mismatches surface in the exception queue for pay or return decisions.
Business check fraud and unauthorized ACH debits remain two of the most common treasury fraud vectors. The FBI and FDIC consumer alerts track rising check fraud through mail theft, check washing, and stolen routing-and-account combinations. Positive pay pushes the fraud detection point back from reactive return-of-posted-items to proactive block-before-post — the difference between recovering funds and never losing them.
Enroll in Positive Pay Treasury Services
Check positive pay takes the issued check file you upload and compares every presented check against that file before the bank posts it. Mismatches surface in the exception queue for review.
Your accounting or payables system generates a list of every check you issued in a given period — check number, amount, issue date, and optionally the payee name. That file uploads to Trico Business Express manually through the portal, automatically via SFTP, or through the treasury API. When a check presents against your account, the bank matches the check on number and amount (and date and payee name where configured) against the issued file. Matches post automatically. Mismatches — wrong amount, unknown check number, no issue record, or duplicate presentment of a check already paid — route to the exception queue.
Common fraud patterns that check positive pay catches: counterfeit checks with fabricated check numbers, stolen blank checks completed by a fraudster, altered checks where the fraudster increased the amount, and duplicate presentments of previously paid checks (check kiting). The FDIC consumer alerts document rising check fraud from mail theft and check washing through postal routes.
Basic check positive pay catches altered amounts and counterfeit check numbers but not altered payee names. A fraudster who steals your check from the mail, washes the payee name with acetone, and rewrites a new payee with the original amount will slip past basic positive pay because the check number and amount still match your issued file. Payee name verification closes that gap. The bank reads the payee name from the presented check image using OCR, compares it character-for-character against the payee name recorded in your issued file, and flags mismatches.
Payee name verification is an optional upgrade on positive pay. Companies that mail paper checks — particularly for rent, tax payments, or to vendors who insist on paper — benefit most from the payee verification layer. The OCC bulletins on check fraud highlight payee alteration as a leading fraud typology that basic positive pay alone does not address.
ACH positive pay addresses a different fraud vector from check positive pay. Where check positive pay protects against fraudulent checks, ACH positive pay protects against unauthorized ACH debits pulled from your account.
Your account has a set of legitimate ACH debit originators — the utility companies that bill you monthly, the insurance carriers you pay by ACH, the tax authorities that withdraw quarterly estimates, the vendor you signed up with for ACH payment. You load that list into Trico Business Express as the authorized originator whitelist. Each originator carries a per-debit dollar limit reflecting your normal billing range. ACH debits from originators on the whitelist, within the configured dollar limit, post automatically. ACH debits from any originator not on the list, or exceeding the configured limit, route to the exception queue for pay/return decision.
The key fraud pattern ACH positive pay defeats: a fraudster who obtains your routing and account numbers — from a discarded check, a compromised vendor portal, or a data breach — and originates unauthorized ACH debits against your account. Without ACH positive pay those debits post automatically and the 2-business-day business return window forces you to catch them in a narrow timeframe. With ACH positive pay they never post in the first place.
The exception dashboard is the nerve center of positive pay operations. Designated approvers log in each morning and review the overnight queue. Check exceptions display the check image alongside the issued file record — authorized users zoom in on the signature, amount, and payee to confirm whether the item is legitimate or fraudulent. ACH exceptions display the originator name, dollar amount, and SEC code — authorized users confirm whether the originator is expected and whether the amount matches a known billing range.
Each exception receives a pay or return decision by 11:00 AM PT. Items marked pay post to the account. Items marked return route back to the presenting bank as unauthorized. Items not reviewed by the deadline default to your preset action — most companies configure the default to return for maximum protection, under the principle that a wrongly-returned legitimate item can be re-presented, whereas a wrongly-paid fraudulent item creates a recovery fight. Email and SMS alerts on every new exception keep approvers from missing the deadline.
Tri Counties Bank offers tiered positive pay coverage matched to your check volume, ACH exposure, and fraud risk tolerance.
| Positive Pay Type | Coverage | Matching Fields | Best For |
|---|---|---|---|
| Basic Check Positive Pay | Outbound checks | Check number, amount | Companies with moderate check volume |
| Check + Date Match | Outbound checks | Check number, amount, issue date | Tighter control on stale-date checks |
| Payee Name Verification | Outbound checks | Check number, amount, date, payee name (OCR) | High-value paper check programs |
| Reverse Positive Pay | Outbound checks | All presented items route to exception queue | Low-volume issuers reviewing every item |
| ACH Positive Pay (Block) | Inbound ACH debits | Full ACH debit block | No expected ACH debit activity |
| ACH Positive Pay (Filter) | Inbound ACH debits | Authorized originator whitelist + limits | Regulated ACH debit activity |
| ACH Debit Block + Alerts | Inbound ACH debits | Block all + alert on attempts | Maximum fraud defense posture |
| Teller Positive Pay | Branch cashed checks | Validates check at teller window before paying | Branch fraud defense |
Positive pay enrollment includes issued check file template, ERP integration support, and designated-approver training. See the Federal Reserve payment system overview for ACH risk management context. Fee schedule and SLA disclosed on enrollment.
The strength of positive pay depends on the exception review discipline. Trico Business Express delivers the workflow tools that keep that discipline efficient.
Every new exception triggers email and SMS alerts to the designated approver list — typically the controller, treasurer, and their backups. Alerts arrive within minutes of the exception being queued. For large organizations the exception dashboard supports filter views so approvers triage quickly: exceptions by account, by amount threshold, by originator, or by age. A single-click pay or return decision records the approver identity and timestamp. Approvers working from mobile can review exceptions and make decisions through the Trico Business Express mobile app with biometric authentication.
Every pay/return decision enters the positive pay audit log with user, timestamp, and rationale. The audit log supports FDIC-examination-style reviews, internal audit requests, and insurance carrier documentation following a fraud event. Integration with cash management reports ties fraud events to the accounts where they occurred, supporting process improvement review. Under Uniform Commercial Code Article 4, positive pay participation shifts loss allocation for unauthorized items toward the party who failed to follow the procedure — making enrollment documentation, timely decision-making, and audit logs meaningful in post-fraud recovery. Wire transfer controls and ACH origination dual authorization pair with positive pay to form the complete treasury fraud defense stack.
Check positive pay, ACH positive pay, and optional payee name verification protect California businesses from the dominant fraud vectors in treasury operations. Reach the Tri Counties Bank treasury services team at +1-800-922-8742 for enrollment, issued file template setup, or ERP integration support.
TCBK Login Guide Contact Treasury ServicesAnswers about check positive pay, ACH positive pay, payee name verification, exception deadlines, and file automation.
Your issued check file (number, amount, date, optional payee) uploads to Trico Business Express. Presented checks match against the file before posting. Mismatches route to the exception queue for pay/return decision.
ACH positive pay uses an authorized-originator whitelist with per-originator dollar limits to block unauthorized ACH debits. See ACH payments for origination side. Check positive pay targets fraudulent outbound checks; ACH positive pay targets unauthorized inbound debits.
OCR-based reading of the payee name on presented check images, compared to the payee you recorded. Catches check-washing alterations that basic positive pay misses. OCC bulletins highlight payee alteration as a leading fraud typology.
11:00 AM PT on the day the exception appears. Items not decided default to your preset action — most companies configure default return for maximum protection. Email and SMS alerts notify designated approvers. See account management to configure approvers.
Yes. Supported sources: QuickBooks, Sage, NetSuite, Microsoft Dynamics, custom ERP. Upload methods: manual portal upload, SFTP automation, treasury API. Formats: fixed-width text, CSV, XML. Call +1-800-922-8742 for integration support.