US payment verification for ACH, RTP, and FedNow

A single connection for every US payment decision from domestic ACH validation under Nacha’s 2026 risk rules, real-time payments through RTP and FedNow, and cross-border payee verification for money moving in or out of the US. One integration covers KYP, fraud screening, and compliance across every US payment rail.

$20.9B in US payment fraud, and accelerating

RTP and FedNow settle payments in seconds, with no reversal once a payment authorizes. Authorized Push Payment (APP) fraud, projected to grow from $8.3B in 2024 to $14.9B by 2028, exploits exactly that gap, alongside $3.05B in Business Email Compromise (BEC) losses.

The stakes are rising too: Nacha’s Same Day ACH per-payment limit jumps to $10M in March 2026, giving fraudsters a much higher ceiling to calibrate attacks against. The US is following the same curve other countries have lived through with instant payments arriving first and verification infrastructure catching up years later, after the losses mount.

A single point for all your account verifications both domestically and cross-border

Domestic

One connection, every US rail

ACH

Nacha and the wider ACH network, in one integration.

See how iPiD works with Nacha’s 2026 risk rules

FedNow, RTP

Real-time rails covered the same way.

Risk scoring and trust scoring

Built into every check.

Global

Make better decisions on cross-border payments moving out of the US

The same Know Your Payee verification iPiD runs globally applies here: one check, whichever direction the money’s headed.

Why it matters

FATF16

US institutions must transmit accurate beneficiary data under FinCEN’s Travel Rule (31 CFR 1010.410(f)); payee verification keeps that data accurate before it travels.

Correspondent banking failures

Mismatched or incomplete beneficiary details are a leading cause of cross-border wires getting delayed or returned.

Fraud follows the coverage gap

As US domestic ACH tightens under Nacha’s 2026 risk rules, cross-border payments out of the US become the next target.

Sending internationally from the US?

This page covers domestic rails. For cross-border payee verification, see how iPiD works globally.

iPiD Payee Verification

FAQs

What counts as a “risk-based process” under Nacha’s 2026 rules?

Nacha’s 2026 amendments replace the old “commercially reasonable” standard with a documented, annually-reviewed risk-based process for fraud monitoring, and introduce “false pretenses” as a defined term covering vendor impersonation, fake invoices, and executive spoofing. Originators need to be able to show how they validate payment details before initiating a transfer, not just that they monitor for problems after.

When do the Nacha 2026 rules actually take effect?

Two phases: March 20, 2026 for ODFIs and large Originators/TPSPs/TPSs (those processing more than 6 million ACH entries in 2023), and June 22, 2026 (the practical date, since June 19 falls on the Juneteenth holiday) for all remaining non-consumer Originators, TPSPs, and TPSs regardless of volume.

Does iPiD cover ACH, RTP, and FedNow, or just one rail?

All three. Domestic ACH validation runs under the Nacha framework; real-time payments through RTP and FedNow are covered the same way, since the underlying payee verification doesn’t change based on which rail the payment settles on.

How is this different from FATF16 compliance?

FATF16 (the Travel Rule) governs what beneficiary information has to travel with a cross-border payment. Nacha’s 2026 rules govern domestic ACH fraud monitoring. They’re separate obligations covering separate payment types; this page’s Global validation and Domestic sections map to each one respectively, and iPiD covers both under one integration.

Why does correspondent banking matter for a US company sending money internationally?

Cross-border payments routed through correspondent banks get flagged, delayed, or returned when beneficiary details don’t match what the receiving bank has on file. Verifying the payee before sending cuts that failure rate directly, separate from any fraud-prevention benefit.

What’s risk scoring and trust scoring, and is it required?

It’s not a separate regulatory requirement; it’s built into every check iPiD runs, domestic or cross-border, to flag higher-risk payments (new vendors, reactivated dormant accounts, unusual patterns) before they’re approved, rather than treating every payment the same way.

Verify every US payment before it moves

Book a demo