Phase 2 of Nacha's fraud monitoring rules is here: What community financial institutions need to know

Phase 2 of Nacha’s Risk Management Rule amendments took effect June 22, 2026, extending fraud monitoring obligations to financial institutions not covered under Phase 1. RDFIs must now implement post-posting monitoring of ACH credits, while the rules emphasize documented risk-based processes and procedures over specific technologies, and Nacha introduced a formal definition of “false pretenses” covering scenarios like business email compromise and vendor impersonation.