opinion

Validate Them — Current Bank Account Validation Methods

NACHA recently published a survey to explore the various methods they believe to be common methods of bank account validation for transactions running through their network. They provided some definitions and methods as reiterated below:

An Account Validation Service is a service wherein a business or financial institution can validate the accuracy of various elements of the account information received from a consumer or business, and the ability of that account to receive electronic payments.

It is truly impressive that the network is finally realizing that the current methods are insufficient and to simply penalize merchants based on a bad system is not truly solving the problem.

There are five primary models currently used to validate account information:

Micro-deposit or Trial-deposit Method: The account number and the routing and transit number are validated by sending micro-deposits to the account. These credits are for random amounts, usually between two cents and one dollar, and the customer confirms that they have received the deposit and verifies the amount. In some cases, a microdeposit and withdrawal verification process is used to confirm that funds can be both deposited and withdrawn from the account.

Instant Account Validation Method: The customer provides his online banking login credentials and the organization seeking to validate the account information uses these credentials to log into the account and validate the customer’s ownership of the bank account.

Check Verification Services: Using a service’s database, and/or other proprietary solutions, businesses have the ability to validate the accuracy of the account information of a check being presented.

ACH Prenotification Entry or Prenote: A Prenotification Entry is defined in the NACHA Operating Rules as a non-monetary Entry initiated by an Originator (any individual, corporation or other entity that initiates entries into the Automated Clearing House Network)to a Receiving Depository Financial Institution (RDFI) prior to the initiation of the first credit or debit entry to a Receiver’s account with the RDFI. A Prenotification notifies the RDFI that the Originator intends to initiate one or more credit or debit Entries to a Receiver’s account with that RDFI in accordance with the Receiver’s authorization.

Debit Card Authorization Method: A debit card “authorization only” request is sent using the card number provided by the consumer to confirm that the Demand Deposit Accounts account number provided by the consumer is attached to the card.

It is truly impressive that the network is finally realizing that the current methods are insufficient and to simply penalize merchants based on a bad system is not truly solving the problem. By addressing this issue and ultimately improving the validation process, the network may in fact see an uptake in volume as those who have left the network, or never used it based on this flaw, return to the network.

Micro deposits are truly a great tool to validate the bank account information. This method will ensure with the information entered that there is an account in existence. What it lacks is that banks do not check the name on that transaction so even with proper account information a consumer at your site could be using a stolen account number from any number of sources of account numbers. Further, you will not know this transaction is good for at least two days based on the batch nature of the network. This will delay a merchant sending the debit transaction for the purchase by 2-7 days depending on their comfort with the return rates.

Instant account validation is another great option, provided you can get consumers to supply you with their bank login credentials. This method, in real time, will sign into their account, and can provide the merchant with name, funds, and account number validation. The critical elements consist of the consumer being a current online banking consumer, they are willing to share their login with a merchant on the internet and their bank doesn’t change the design of their site making the engines that login, fail. With multifactor authentication and updates to sites, this method requires constant maintenance. Another weakness of this method is that even if you do this, there is no guarantee that the consumer won’t chargeback the transaction since this is not a service offered by the networks. It is great at eliminating many of the invalid transactions that you would have experienced through regular channels so, from a validation perspective, it is very good.

Check verification services use proprietary databases. They might have 55-60 percent of the active bank accounts in the U.S. in their database but the validation is real time and will eliminate some of your potential invalid transactions. Once again, this is not a service offered by the NACHA network, and as a result, offers no assurances from NACHA or the banks themselves. I would rate this an OK method of validation.

Prenotifications are NACHA’s method of account validation. In theory they are great. In practice they are too impractical. The reasons that renotifications do not work is that the banks often ignore the transactions coming into them and as a result the merchant never gets a response that the account was bad. Further, the NACHA rules require that if the merchant sends a Prenotification, then the merchant can not send the sale transaction for a minimum of six days. In many environments, but especially online services, this waiting period will result in a much too long delay for a consumer to get what he/she is at the moment wanting to purchase. To make this method valuable to the merchants who need it, it needs to be real time with no restriction on sending the sale transaction following a prenotification.

Debit card authorization is a method that would allow for the validation of the account. Once again this is a method that is not provided by NACHA and requires that the consumer enter their debit card number and their bank account number. If they are going to enter their debit card number, then it is likely that they would simply use that as the payment method. To make this ideal, if the consumer could simply enter their debit card information, the validation occurs on the debit network in real time and then the transaction can flow through the ACH network using the debit card number. I can see this as a valid method but this would require many changes in the ACH network.

It is truly fantastic that NACHA is evaluating this current issue. The steps they make toward solving this issue will certainly be better than what is available today through the NACHA network.

Melody L is chief operating officer for L3 Payments.

Related:  

Copyright © 2026 Adnet Media. All Rights Reserved. XBIZ is a trademark of Adnet Media.
Reproduction in whole or in part in any form or medium without express written permission is prohibited.

More Articles

profile

Vendo CEO Mitch Platt Reflects on 20 Years of Lessons and Evolution

More than 20 years ago, three entrepreneurs in Barcelona began gathering over beers to pitch, dissect and routinely destroy one another's business ideas. The ritual was simple: One person arrived with a concept, while the other two tried to expose every weakness. Any proposal that survived earned another look. Most did not.

Jackie Backman ·
opinion

How to Avoid the Hidden Risks of AI-Generated Legal Documents

Artificial intelligence can write a contract in seconds, but that does not mean it can write the contract your business actually needs. Across the adult industry, operators, creators and producers are increasingly using generative AI to prepare model releases, performer agreements, privacy policies, takedown notices, employment documents and responses to regulators. The appeal is obvious: Legal work is expensive, AI is fast and the resulting document often looks impressively professional. That polished appearance is exactly what makes the practice dangerous.

Corey Silverstein ·
opinion

How Rolling Reserves Affect Cash Flow and Merchant Stability

You log in to your payment processor’s dashboard, discover they are withholding 10% of your sales, and immediately assume something has gone wrong. In reality, everything is working exactly as intended.

Jonathan Corona ·
opinion

What Federal Age Verification Could Mean for Adult Websites

Our industry has grappled with a patchwork of confusing and burdensome state age verification laws for the past couple of years. But that landscape could change quickly after the House passed the Kids Internet and Digital Safety (KIDS) Act (H.R. 7757) by a vote of 267-117, marking a significant federal step into this space.

Lawrence G. Walters ·
opinion

The Website Footer Requirements Every Adult Merchant Should Know

Since I started in this business 25 years ago, I've watched website footers evolve from a simple collection of links designed to help with SEO into important tools for meeting compliance and regulatory requirements, improving the customer experience and reducing chargebacks.

Cathy Beardsley ·
opinion

Why E-Payment Diversification Matters for Merchant Stability

Match payment methods to your customers. Look at where your customers are located, how they prefer to pay and which products they purchase. A business with significant European traffic may benefit from SEPA or Pay by Bank, while a subscription-based business may prioritize ACH or cryptocurrency. Add the payment methods your customers are most likely to use, as not every option is available.

Jonathan Corona ·
trends

AI at Work: The Tools and Practices Powering Creativity, Commerce and Compliance

For years, artificial intelligence felt like the plot of a science-fiction movie. Pop culture gave us Skynet from “The Terminator,” the replicants of “Blade Runner” and countless visions of machines replacing human creativity altogether. AI was cast as either humanity's next great breakthrough or the beginning of a dystopian future.

Jackie Backman ·
opinion

Key Questions Online Merchants Should Know About PCI Compliance

Choosing a payment provider involves more than comparing features and pricing. It's also about trusting that your customers' payment information is being handled securely. Every August, Segpay is recertified as a Level 1 PCI-compliant service provider, a milestone the company has achieved for the past 20 years. Having helped write Segpay's original PCI policy documents more than two decades ago, I've seen firsthand how PCI compliance has evolved.

Cathy Beardsley ·
profile

New Moon Network's Savannah Sly on Turning Lived Experience Into Advocacy

Savannah Sly is the first to admit she didn't always understand sex work. At 18, she was an art student in Boston, working part-time at a box office and, as she puts it, "broke as a joke." While looking for ways to make ends meet, she often found herself browsing Craigslist's adult ads, intrigued by the women advertising their services.

Jackie Backman ·
opinion

How to Safeguard Your Website Against CIPA Claims

There is a new wave of lawsuits targeting online businesses, including adult websites. These suits involve the California Invasion of Privacy Act (CIPA), and they are becoming increasingly prevalent. In fact, three different clients of my law firm were recently served or threatened with CIPA lawsuits — all in the same week.

Nick Zargarpour ·
Show More