Although written for banks, this guidance may be useful. This bulletin provides guidance on managing the risks of automated clearing house (ACH) activity. Financial institutions may be exposed to a variety of risks when originating, receiving, or processing ACH transactions, or outsourcing these activities to a third party. This bulletin outlines the key components of an effective ACH risk management program. Each institution should use this guidance to develop an ACH risk management program that reflects the nature and complexity of the institution’s activities.
This bulletin supplements guidance on ACH activities contained in the FFIEC IT Examination Handbook on Retail Payment Systems, dated March 2004, and National Automated Clearinghouse Operating Rules. It replaces OCC Bulletin 2002-2 (ACH Transactions Involving the Internet).