Study guide
1.2 Five Key ACH Participants: Originator, ODFI, Operator, RDFI, Receiver
Nacha Accredited ACH Professional AAP
Track your progress as you read
Finished sections get a check mark.
1 Chapter 1: ACH Network Overview, Participants & Transaction Flow
1.1 ACH Network Structure, Governance & History 1.2 Five Key ACH Participants: Originator, ODFI, Operator, RDFI, Receiver 1.3 Third-Party Senders (TPS) and Third-Party Service Providers (TPSP) 1.4 End-to-End Transaction Flow, Clearing & Settlement Mechanics
2 Chapter 2: ACH File Architecture & Record Formatting
2.1 File Hierarchy: 94-Character Records, Blocking Factors & File Header (Type 1) 2.2 Company/Batch Header Record (Type 5) & Service Class Codes 2.3 Entry Detail Record (Type 6) & Addenda Records (Type 7) 2.4 Batch Control (Type 8), File Control (Type 9) & Entry Hash Calculations 2.5 Exception Record Formats: Return (Addenda 99) & Notification of Change (Addenda 98) Layouts
3 Chapter 3: Nacha Operating Rules Framework & Participant Warranties
3.1 Structure of Nacha Operating Rules, Rulemaking Process & Effective Dates 3.2 ODFI Warranties, Indemnifications & Participant Obligations 3.3 RDFI Warranties, Receipt Obligations & Statement Requirements 3.4 Nacha Return Rate Thresholds & Monitoring Requirements
4 Chapter 4: Standard Entry Class (SEC) Codes: Consumer Applications
4.1 PPD (Prearranged Payment and Deposit): Direct Deposit & Consumer Debits 4.2 WEB (Internet-Initiated Entries): Authorization, Authentication & Validation 4.3 TEL (Telephone-Initiated Entries): Inbound vs. Outbound Rules & Recording Requirements 4.4 CIE, MTE, POS & SHR: Machine and Point-of-Sale Consumer Entries 4.5 Same Day ACH: Windows, Limits ($1,000,000) & Eligibility Rules
5 Chapter 5: SEC Codes: Commercial, Check Conversion & Specialized Applications
5.1 CCD/CCD+ and CTX: Corporate Payments, Addenda & EDI / ASC X12 Formatting 5.2 Check Conversion SEC Codes: ARC, BOC & POP Rules and Notices 5.3 RCK (Re-presented Checks) & XCK (Destroyed Check Entries) 5.4 IAT (International ACH Transactions): Mandatory Addenda & OFAC Screening 5.5 Non-Monetary & Specialty Entries: Prenotifications, DNE & ENR
6 Chapter 6: Authorization Standards, Authentication & Record Retention
6.1 Fundamentals of Valid Authorization: Consumer vs. Commercial 6.2 E-SIGN Act Compliance, Electronic Signatures & Oral Authorizations 6.3 WEB Debit Account Validation Rule & Fraud Detection Systems 6.4 Authorization Retention (2 Years) & Copy Provision Rules
7 Chapter 7: Exception Processing: Returns & Return Reason Codes
7.1 Return Processing Overview: Two-Banking-Day Rule vs. Extended Return Rule 7.2 Administrative & Operational R-Codes (R01-R04, R08, R16, R17) 7.3 Unauthorized Consumer Returns: R05, R07, R10, R11 & The WSUD 7.4 Unauthorized Corporate Debits: R29, Contract Rights & the UCC Article 4A Boundary 7.5 Dishonored Returns (R61-R70) & Contested Dishonored Returns (R71-R76)
8 Chapter 8: Exception Processing: Notifications of Change (NOC) & Reversals
8.1 Notification of Change (NOC / COR): Structure & Change Codes (C01-C07) 8.2 NOC Timelines: RDFI Origination & Originator 6-Day Mandatory Action 8.3 Reversing Entries & Reversal Files: 5-Day Deadline & Erroneous Reasons 8.4 Federal Reclamation Procedures & Deceased Beneficiary Handling
9 Chapter 9: ACH Risk Management, Fraud Monitoring & Exposure Controls
9.1 ACH Risk Taxonomy: Credit, Operational, Fraud, Systemic & Compliance Risks 9.2 ODFI Originator Onboarding, Underwriting & Exposure Limits 9.3 Third-Party Sender (TPS) Due Diligence, Monitoring & Registration 9.4 Fraud Schemes: Business Email Compromise (BEC), Account Takeover & Controls 9.5 The 2026 Fraud Monitoring Rules: ODFIs, Originators, TPSPs & Third-Party Senders 9.6 RDFI ACH Credit Monitoring & the False Pretenses Definition 9.7 ACH Data Security: Article One, Sections 1.6 and 1.7 & the ACH Security Framework 9.8 Nacha's Risk Management Portal: Contact Registry, TPS & Direct Access Registration, Terminated Originator Database 9.9 ACH Risk Assessments, Regulatory Expectations & Operational Resilience
10 Chapter 10: Legal & Regulatory Framework for ACH
10.1 Regulation E (12 CFR 1005): Consumer Protections, Disclosures & Error Resolution 10.2 Uniform Commercial Code (UCC) Article 4A: Wholesale Funds Transfers & Security Procedures 10.3 BSA/AML, SAR/CTR Reporting & OFAC Sanctions Compliance in ACH 10.4 31 CFR Part 210 (The Green Book), Reg CC, Reg D & Reg J Interactions
11 Chapter 11: Nacha Rules Compliance Audit & National System of Fines
11.1 Annual ACH Rules Compliance Audit (Article One, §1.2.2): Scope & Requirements 11.2 Auditor Independence & 6-Year Audit Record Retention 11.3 National System of Fines: Complaint Process, Panel Review & Fine Classes 11.4 The Nacha Rules Effective-Date Calendar: 2026 Through 2028
12 Chapter 12: Alternative & Complementary Payment Systems
12.1 Fedwire Funds Service & CHIPS vs. ACH Network 12.2 Instant Payments: RTP and FedNow vs. Same Day ACH 12.3 Card Networks, Check 21 & Interoperability Across Payment Rails
1.2 Five Key ACH Participants: Originator, ODFI, Operator, RDFI, Receiver
Key Takeaways Explain This Topic AI
The ACH Network is structured around five foundational participants: Originator, ODFI, ACH Operator, RDFI, and Receiver.
The Originator initiates entries and bears strict obligations to obtain and maintain valid Receiver authorization for at least two years.
The ODFI makes rigorous warranties under Nacha Rules regarding authorization, timeliness, and accuracy, fully indemnifying RDFIs for warranty breaches.
ACH Operators (FedACH and The Clearing House EPN) act as central clearing facilities performing file validation, sorting, distribution, and net settlement calculation.
The RDFI must receive valid entries and post according to applicable availability rules. Nacha permits account-number reliance; UCC Article 4A-207 provides the corresponding rule for covered commercial credit payment orders.
Last updated: August 2026
1.2 Five Key ACH Participants: Originator, ODFI, Operator, RDFI, Receiver
Core Architecture: Every transaction cleared through the ACH Network relies on a strictly structured, multi-party model comprising five foundational participants. Each participant occupies a defined legal, operational, and financial position governed by the Nacha Operating Rules .
1. The Five Core Participants
The integrity of the ACH Network depends on the interplay among five key entities:
- The Originator (The initiator of the entry)
- The Originating Depository Financial Institution - ODFI (The bank originating the file)
- The ACH Operator (The central clearing facility: FedACH or EPN)
- The Receiving Depository Financial Institution - RDFI (The bank holding the receiver's account)
The Receiver (The individual or entity granting authorization) +---------------------------------------------------------------------------------------------------------+
- | THE FIVE-PARTICIPANT ACH RELATIONSHIP |
- +---------------------------------------------------------------------------------------------------------+
- | [ Originator ] === (Direct Authorization / Agreement) ===============> [ Receiver ] |
- | | ^ |
- | | (Origination Agreement) | (Account Contract) |
- | v | |
- | [ ODFI ] =====> [ ACH Operator (FedACH / EPN) ] =====> [ RDFI ] ------------+ |
- | (Transmits) (Sorts, Clears, Settles) (Posts Entry) |
- +---------------------------------------------------------------------------------------------------------+
- 2. Participant Profiles, Rights & Legal Responsibilities
- Participant 1: The Originator
The Originator is an individual, business, government agency, or institution that has obtained authorization from a Receiver to initiate an ACH credit or debit entry into the Receiver's account held at an RDFI.
Authorization Duty: Must obtain clear, unambiguous, verifiable authorization from the Receiver prior to originating any entry (oral, written, or electronic complying with E-SIGN).
Record Retention: Must retain the original or an accurate copy of the authorization for a minimum of two years from the termination or revocation of the authorization.
Copy Provision: Must provide a copy of the authorization to the ODFI (for delivery to the RDFI upon request) within ten banking days of receiving a written request.
Mandatory Cease-and-Desist: Must immediately discontinue origination upon receiving notice of revocation or upon receipt of specific return reason codes (such as R05, R07, R08, R10, R11, or R29).
Notice Requirements: Must provide advance written notice to the Receiver if the amount of a recurring debit changes (at least 10 calendar days) or if the debit schedule date changes (at least 7 calendar days), unless waived in accordance with Nacha Rules.
Participant 2: The Originating Depository Financial Institution (ODFI)
The ODFI is a Participating Depository Financial Institution (commercial bank, credit union, or savings association) that transmits ACH entries directly or through an authorized ACH Operator on behalf of Originators.
Nacha Rule Warranties (The "ODFI Warranties"): When an ODFI transmits an entry to an ACH Operator, it makes fundamental warranties to the RDFI, the Operator, and Nacha:
Warranty of Authorization: The entry is authorized by the Receiver in accordance with the Rules and applicable federal/state laws.
Warranty of Accuracy & Timeliness: The entry contains accurate routing numbers, account numbers, and transaction amounts, and has been transmitted in a timely manner.
Warranty of Enforceability: The Originator has entered into an enforceable origination agreement binding it to the Nacha Rules.
Warranty of Good Title: The ODFI has the legal right to transmit the entry.
Indemnification: The ODFI agrees to indemnify and hold harmless every RDFI, ACH Operator, and Nacha against any claim, loss, liability, or expense (including reasonable attorney fees) resulting from a breach of any ODFI warranty.
Underwriting & Risk Management: Must perform rigorous credit underwriting on all Originators, establish and enforce exposure limits (credit, debit, and Same Day limits), monitor return rates, and ensure ongoing compliance.
Participant 3: ACH Operators (FedACH & EPN)
An ACH Operator is an entity authorized by Nacha to operate a central clearing facility that processes, validates, sorts, and delivers electronic payment entries among Participating DFIs.
In the United States, there are currently two authorized ACH Operators:
FedACH: Operated by the twelve regional Federal Reserve Banks .
Electronic Payments Network (EPN): Operated by The Clearing House Payments Company L.L.C. (a private consortium of major commercial banks).
Operator Core Functions:
File Validation & Syntax Editing: Edits incoming files to verify 94-character record formatting, check digits, batch hashing, and valid routing transit numbers.
Sorting & Routing: Unbundles batch files received from ODFIs, aggregates transactions by destination RDFI routing number, and prepares delivery files.
Net Settlement Calculation: Computes total gross debit and gross credit positions to generate multilateral net settlement figures for each participating institution.
Inter-Operator Exchange (IOE): Seamlessly exchanges files between FedACH and EPN to ensure that any ODFI using FedACH can reach an RDFI using EPN (and vice versa).
Participant 4: The Receiving Depository Financial Institution (RDFI)
The RDFI is a Participating Depository Financial Institution that receives ACH entries from an ACH Operator for posting to customer accounts.
Mandatory Receipt: Must accept all valid ACH entries directed to valid routing numbers belonging to the institution.
Account Number Reliance: Nacha permits automated posting based on the account number in the Entry Detail Record. For a covered commercial credit payment order, UCC 4A-207 separately permits account-number reliance when the RDFI lacks actual knowledge of a name/number mismatch. Consumer transfers may instead be governed by the EFTA and Regulation E.
Funds Availability Requirements:
PPD Credit / Direct Deposit: Funds must be made available for cash withdrawal or use by the Receiver no later than the opening of business (or 9:00 a.m. local time) on the settlement date.
Same Day ACH: Funds must be made available in accordance with designated windows (1:30 p.m. or 5:00 p.m. RDFI local time, or end of day depending on the processing window).
Exception Processing: Responsible for initiating timely Returns (within two banking days for operational returns; up to 60 calendar days for unauthorized consumer debits) and Notifications of Change (NOCs).
Periodic Disclosures: Must disclose required ACH entry information on customer account periodic statements (Company Name, Company Entry Description, Amount, Settlement Date).
Participant 5: The Receiver
The Receiver is an individual (consumer), business entity, or government agency that has authorized an Originator to initiate an ACH credit or debit entry to their transaction account held at an RDFI.
Rights: Protected under Regulation E (for consumer accounts) and UCC 4A (for commercial accounts). Consumers have the absolute right to receive notice of debit amounts, prompt error resolution, and the ability to reclaim funds for unauthorized debits by submitting a Written Statement of Unauthorized Debit (WSUD) within 60 calendar days of the RDFI transmitting the statement.
Obligations: Must provide accurate banking details to the Originator and give proper notice if revoking or changing authorization.
3. Comprehensive Comparison Matrix: Rights, Duties & Risks
Participant Direct Contractual Partners Primary Nacha Warranties & Obligations Core Financial / Operational Risk
Originator Receiver (Authorization), ODFI (Origination Agreement) Obtain/retain valid authorization for 2 years; cease upon revocation or R07/R08/R10; provide copy in 10 banking days. Commercial dispute, non-payment, unauthorized debit reversal liability.
ODFI Originator, ACH Operator, Nacha Warrants authorization, data accuracy, timeliness, enforceability; indemnifies RDFI; enforces exposure limits. Credit risk (Originator insolvency), return liability, Nacha fines, systemic fraud loss.
ACH Operator ODFIs, RDFIs, Nacha Validate file structure; sort batches by RDFI; calculate net settlement; maintain inter-operator exchange. Operational downtime, telecommunications failure, clearing system disruption.
RDFI Receiver (Account Agreement), ACH Operator, Nacha Mandatory receipt; post by account number; ensure prompt funds availability (9:00 AM on settlement date); timely returns/NOCs. Compliance risk, late return liability, unauthorized posting disputes under Reg E.
Receiver Originator (Authorization), RDFI (Account Holder) Grant authorization; maintain sufficient funds (for debits); timely dispute unauthorized entries (60 days). Fraudulent debits, unauthorized account withdrawal, overdraft charges.