Compliance Publications
ACH Audit Workbook
Electronic Format
Electronic Publication: Regulators and the ACH Rules require all financial institutions to conduct an ACH Compliance Audit annually. This user-friendly workbook will eliminate guesswork and guide you through conducting a risk-based ACH Compliance Audit by examing ACH Rules, ODFI and RDFI sound business practices, OFAC processes and other payments-related regulatory requirements. The 2025 edition includes minor enhancements to improve process flow and content quality. Instructions for use are included. Upon completion of the workbook pages, a summary report is generated to help you quickly identify and prioritize changes to reduce risk.
ACH Origination Agreement (SFE)
Electronic Format
Electronic Publication: This sample agreement, in a Word document format, includes critical terms and conditions that should be addressed in a legal agreement between a financial institution and its originators. There are numerous blanks and fields that should be completed and appropriately formatted before using this Agreement. Please remember that all contracts and agreements should be reviewed and modified where necessary by your legal counsel to be consistent with the specific needs or operations of your institution.
This publication is formatted as a Word document.
Format: Word
ACH Origination Third-Party Sender Agreement (SFE)
Electronic Format
Electronic Publication: This sample agreement, in a Word document format, includes critical terms and conditions that should be addressed in a legal agreement between a financial institution and a Third-Party Sender. There are numerous blanks and fields that should be completed and appropriately formatted before using this Agreement. Please remember that all contracts and agreements should be reviewed and modified where necessary by your legal counsel to be consistent with the specific needs or operations of your institution.
This publication is formatted as a Word document.
Format: Word
ACH Risk Assessment Workbook
Electronic Format
Electronic Publication: Designed to assist Financial Institutions, both RDFIs and ODFIs, in addressing ACH risk, this workbook covers risk obligations as defined in OCC Bulletin 2006- 39, ACH Risk Management Guidance, the FFIEC Retail Payment Systems IT Examination Handbook and current ACH Rules. Chapters include System and Controls, Credit Risk, High-Risk Activities, Compliance Risk, Third-Party Service Providers, Fraud Risk, Operational and Transaction Risk, and Information Technology Risk. Recent updates address data security, personnel practices, physical security, operational controls, credit risk related to Originator due diligence and Business Continuity planning and testing. By completing user-friendly worksheets, this workbook will identify strengths and weaknesses in your existing ACH risk management program and assist with the development of a comprehensive risk management program. Compliance officers, audit personnel and operations staff will find this to be a valuable tool.
Third-Party Sender ACH Audit Guide
Electronic Format
Electronic Publication: The Third-Party Sender ACH Risk Assessment Workbook is designed to assist Third-Party Senders of all types in addressing their ACH risk. Content of the Workbook includes risk obligations as defined in the OCC Bulletin 2006-39, ACH Risk Management Guidance, the FFIEC Retail Payments Systems' IT Examination Handbook, FFIEC Guidance to Internet Banking and the current Nacha Rules. By answering yes, no, or not applicable, this Workbook will identify strengths and weaknesses in your existing ACH risk management program. Individual chapters address System and Controls, Credit Risk, Compliance Risk, High-Risk Activities, Third-Party Service Provider Risk, Operational & Transaction Risk and Information Technology Risk. EPCOR’s Third-Party Sender ACH Risk Assessment Workbook guides you in evaluating the Third-Party Sender’s risks by asking thought-provoking questions about its current ACH policies, procedures and processes. The 2025 Third-Party Sender ACH Risk Assessment Workbook has been updated for the 2025 Nacha Rules User-friendly worksheet questions are easily answered and include room for comments, to assist in developing a comprehensive ACH risk management program for your company. Compliance officers, audit personnel and operations staff within your organization will find the Workbook a valuable tool.
Note: This product is intended for One-Time Use Only by Third-Party Senders. This publication is copyrighted and the purchase is good for one use. All digital purchases are final.
Third-Party Sender ACH Risk Assessment Workbook
Electronic Format
Electronic Publication: The Third-Party Sender ACH Risk Assessment Workbook is designed to assist Third-Party Senders of all types in addressing their ACH risk. Content of the Workbook includes risk obligations as defined in the OCC Bulletin 2006-39, ACH Risk Management Guidance, the FFIEC Retail Payments Systems' IT Examination Handbook, FFIEC Guidance to Internet Banking and the current Nacha Rules. By answering yes, no, or not applicable, this Workbook will identify strengths and weaknesses in your existing ACH risk management program. Individual chapters address System and Controls, Credit Risk, Compliance Risk, High-Risk Activities, Third-Party Service Provider Risk, Operational & Transaction Risk and Information Technology Risk. EPCOR’s Third-Party Sender ACH Risk Assessment Workbook guides you in evaluating the Third-Party Sender’s risks by asking thought-provoking questions about its current ACH policies, procedures and processes. The 2025 Third-Party Sender ACH Risk Assessment Workbook has been updated for the 2025 Nacha Rules User-friendly worksheet questions are easily answered and include room for comments, to assist in developing a comprehensive ACH risk management program for your company. Compliance officers, audit personnel and operations staff within your organization will find the Workbook a valuable tool.
Note: This product is intended for One-Time Use Only by Third-Party Senders. This publication is copyrighted and the purchase is good for one use. All digital purchases are final.
Remote Deposit Capture Risk Assessment Workbook
Electronic Format
Electronic Publication: The RDC Risk Assessment Workbook is a comprehensive, easy-to-use tool designed to assist Financial Institutions in addressing their remote deposit capture risk. The Workbook content mirrors the FFIEC Remote Deposit Capture Risk Management Guidance. The Remote Deposit Capture Risk Assessment Workbook guides you in completing the step-by-step risk assessment questions. The user-friendly Excel worksheet questions are easily answered with Yes, No, or Not Applicable and include room for comments, to assist you in developing a comprehensive RDC risk management program. Operations staff, risk managers, compliance officers as well as audit personnel will find this workbook a useful tool.
ACH Compliance Manual - 11th Edition - Various Formats
Various Formats
Hardcopy: An essential tool to ensure compliance with the Nacha Operating Rules & Guidelines, the 11th edition offers crisp insights into authorizations, processing, and more from Nacha’s subject matter experts. Stay current with recent Rule changes on Micro-Entries and Third-Party Sender shifts and authorization updates. Whether you’re new to the payments industry or a seasoned professional, this offering simplifies complexities, provides insightful compliance tips, and includes a glossary and references to other valuable resources.
via App(E-book): This Adobe-based product requires a third-party app called Flux Player to allow the content to be redeemed, downloaded to, and accessed only within the app. The content is read-only, E-book display is identical to the hard copy book. Once a Flux Player account app has been created and the content is redeemed within the Flux Player app, the content can be accessed on up to two devices using the same app account. Works on PC/Windows, Mac (OSX), Android phones and tablets, Apple IOS, and Kindle.
Note: If your organization requires special permission to download and/or install programs, please contact your IT department for assistance before purchase.
Note: All digital purchases are final.
ACH Origination Agreement Checklist for FI's
Electronic Format
Electronic Publication: This checklist may be used as a resource when drafting your ACH Origination Agreement. The topics included in the checklist are general topics that may not be consistent with the way your Financial Institution operates. This checklist may not appropriately address all the laws or regulations specific to the state where your Financial Institution is located and is not intended to constitute legal advice.
Format: Electronic Access Code
ACH Policies & Procedures Manual
Electronic Format
Electronic Publication: This manual serves as a comprehensive resource to help financial institutions develop clear, well-structured policies and procedures for participating in the ACH Network. It provides guidance to ensure compliance with industry regulations, enhance operational efficiency, and support risk management practices.
This guide contains the following attachments:
- ACH Policies & Procedures Manual
- Glossary of ACH-Related Terms
- Sample Written Statement of Unauthorized Debit (WSUD) Form
- How to Report an Alleged ACH Rules Violation with Nacha
- Sample Stop Payment Order Form
- ACH Security Framework Guidance & Checklists
- Sample ACH Policy
Format: Electronic
ACH Risk Management Handbook, 9th Edition
Hardcopy
Hardcopy: The newly updated 9th edition offers essential insights into Nacha’s strategies for identifying and mitigating risks associated with ACH payments. This publication provides comprehensive recommendations for developing an effective risk management program tailored for organizations involved in ACH transactions. Importantly, the threats to ACH payments are not unique to the ACH Network; the lessons learned can be applied to create a holistic payments risk management program. The edition includes the latest 2024 Rules focusing on credit push fraud and offers methods to address evolving fraud tactics. Additionally, real-world case studies in each chapter illustrate practical applications of the concepts discussed, helping organizations evaluate and enhance their risk management practices.
RiskPro (Online)
Electronic Format
Electronic Publication:RiskPro™ is a self-paced, computer-based training program developed to increase your knowledge of payments risk. RiskPro has been developed to promote knowledge of the risk payments systems pose to the industry. RiskPro was designed to make learning fun.
Why Should You Purchase RiskPro™?
Updated annually to reflect the latest changes in the payments landscape and the risks they pose, the program is valuable for payments professionals, risk professionals, and new employees alike. Challenge yourself and test your knowledge using RiskPro's™ game and scorekeeping features or use it to train others.
RiskPro™ Challenges your knowledge in two ways: Game Mode & Test Mode
RiskPro™ Game Mode is a fun, interactive program, which tests your skills in six competency areas:
• Payments Risk
• Fundamentals of Risk Management
• Risk Policy and Governance
• Risk Management and Controls
• Physical and Information Security
• Regulatory Environment
Organized around the game board, you can play the practice game-winning game money and get coached along the way with feedback on your answers.
In the RiskPro™ Test Mode timed test, you will complete all the questions and receive a score rating your performance in each category. The test is all multiple-choice, and you will complete a "blacken the dot" form as you answer questions, just like in a real standardized test situation.
So whether you are looking to brush up on your payment systems skills or start a foundation that you can build upon, RiskPro™ is an essential tool for your professional development.
User Access opens in early April and closes December 31, 2025.
Registration closes on August 30, 2025.
AgreementsNow! Business Online Banking Cash Management Master Service Agreement
Electronic Format
Electronic Publication: One master agreement that covers all your payments products eliminates the need for separate agreements that must be signed and filed for each service! This electronic document contains a modifiable Business Online Banking and Cash Management Service Master Agreement in Microsoft Word that captures what should be in every service agreement. You append further information using the multiple product schedules that are included in the document, but only the Master Agreement needs to be signed. Product schedules included in the document are:
- ACH Origination including authorization forms and more
- ACH Block-Filter
- Account Reconciliation including full, partial, and range
- Lockbox including retail, wholesale, and "wholetail"
- Line of Credit Sweep
- Money Market Sweep
- Positive Pay
- Remote Deposit Capture
- Wire Transfer
- Reverse Wire
The ACH, Remote Deposit Capture, and Wire Transfer agreements are also structured for stand-alone use if needed. The contents and price make this a very cost-effective package for your payments product program!
This publication is formatted as a Word document.
Format: Word
AgreementsNow! Remote Deposit Capture Agreement
Electronic Format
Electronic Publication: Updated to include expanded security language! A strong legal agreement is as critical to your RDC success as any other component of this popular service. This is a customizable Microsoft Word document that addresses the core terms and conditions between FI and the customer. The agreement covers RDC using Check 21 capabilities, and when combined with our ACH Origination Agreement, covers the use of RDC with the ACH Network.
This publication is formatted as a Word document.
Format: Word
AgreementsNow! Wire Transfer Agreement
Electronic Format
Electronic Publication: Have you recently examined the merit of your current Wire Transfer agreements, or are you planning to expand this service with your business customers or members? If so, then you'll want to have this Wire Transfer Agreement to deploy to your Wire Transfer users. This electronic document contains a modifiable Microsoft Word document that addresses today's concerns for any Financial Institution that offers this service.
This publication is formatted as a Word document.
Format: Word
AgreementsNow! Third-Party Service Provider Agreement
Electronic Format
Electronic Publication: As originators look to use third-party service providers for their ACH needs, the ODFI needs to ensure that all parties are informed and accountable for their obligations under the rules, regulations, and laws governing ACH. This product is designed to provide a comprehensive service agreement between ODFI, the originator, and the third-party service provider. The electronic document contains a customizable Microsoft Word document that includes critical terms and conditions between these parties.
This publication is formatted as a Word document.
Format: Word
ODFI Audit Checklists for Originators & Third-Party Senders
Electronic Format
Electronic Publication: This tool contains a series of ODFI Audit checklists providing an efficient tool for ODFIs to gauge their Originators/Third-Party Senders understanding and compliance with the ACH Rules. These checklists can be completed by financial institution staff or sent to the Originator and/or Third-Party to complete on its own and then return to the ODFI. Each Audit Checklist is a fillable PDF form for each type of ACH application. Complete or send the forms that are specific to the ACH services your institution originates.
ODFI Risk Management Guide
Electronic Format
Electronic Publication: The purpose of this guide is to provide an easy to comprehend understanding of the risks of the ODFI (Originating Depository Financial Institution). It is designed to assist users with identifying and mitigating ODFI risk when operating in the ACH environment.
This guide contains the following attachments:
- 20-page ODFI Risk Management Guide
- ODFI Risk Management Checklist
- ACH Origination Approval Form
- ACH Exposure Limit Change Request Form
- ACH Originator Signature Agreement
- Company ACH Transmittal Letter
- ACH Origination Activity Review Form
- ACH File Confirmation Form
- ACH Security Framework Guidance and Checklists
Format: PDF/Word
Revised Uniform Commercial Code Article 4A and the ACH System - 4th Edition
Various Formats
Hardcopy: The refreshed 4th Edition contains new statistics and evaluates the impact of the UCC 4A on security procedures, bank/corporate agreements, recommended contractual provisions, errors, unauthorized entries, and more. Includes Article 4A (law unchanged) with staff commentary. For financial institutions and corporations that handle ACH wholesale credits.
via App(E-book): This Adobe-based product requires a third-party app called Flux Player to allow the content to be redeemed, downloaded to, and accessed only within the app. The content is read-only, E-book display is identical to the hard copy book. Once a Flux Player account app has been created and the content is redeemed within the Flux Player app, the content can be accessed on up to two devices using the same app account. Works on PC/Windows, Mac (OSX), Android phones and tablets, Apple IOS, and Kindle.
Note: If your organization requires special permission to download and/or install programs, please contact your IT department for assistance before purchase.
Note: All digital purchases are final.
Stop Payment Fillable PDF Form
Electronic Format
Electronic Publication: Our comprehensive and convenient Stop Payment Request Form provides concise explanations on stop payment requests for single or recurring entries to consumer accounts; stop payment requests on paper items; and stop payment requests for entries to non-consumer accounts.
ePay's fillable PDF Stop Pay form can be completed online or emailed to the accountholder for them to fill out and send back to you. Includes a detailed companion document to facilitate your compliant handling of stop payment requests.
Third-Party Senders & the ACH Network - 4th Edition - Various Formats
Various Formats
Hardcopy: This 4th Edition update provides a review of the variations in legal requirements and processing obligations relating to the origination of ACH entries when a Third-Party Sender is involved in the origination of transactions through the ACH Network. This edition reflects the latest Nacha Operating Rules changes, offers real-world examples of Third-Party Sender relationships, and includes sound business practices, risk management topics, and a checklist of issues to be addressed by ODFIs, Originators, and Third-Party Senders in processing agreements. Third-Party Senders and ODFIs partnering with and managing these organizations will benefit from the information discussed.
via App(E-book): This Adobe-based product requires a third-party app called Flux Player to allow the content to be redeemed, downloaded to, and accessed only within the app. The content is read-only, E-book display is identical to the hard copy book. Once a Flux Player account app has been created and the content is redeemed within the Flux Player app, the content can be accessed on up to two devices using the same app account. Works on PC/Windows, Mac (OSX), Android phones and tablets, Apple IOS, and Kindle.
Note: If your organization requires special permission to download and/or install programs, please contact your IT department for assistance before purchase.
Note: All digital purchases are final.
Written Statement Fillable PDF Form
Electronic Format
Electronic Publication: The most thorough and convenient WSUD there is! RDFIs are required to obtain a completed Written Statement of Unauthorized Debit (WSUD) from a Receiver before returning a debit entry because it was unauthorized; the authorization was revoked; the item was not initiated in accordance with the terms of the authorization; or the item was improperly initiated according to requirements of the Nacha Operating Rules.
ePay's fillable PDF WSUD form contains clear and concise descriptions about why the item is being returned and what return reason code to use in each situation. The form can be completed online or emailed to the Receiver for them to fill out and send back to you. Includes a detailed companion document to ensure you are compliant for all R05, R07, R10, R11, R37, R51, and R53 returns.