A positive pay file is an electronic list of authorized checks that a business sends to its bank, giving the bank a reference set to check every check presented for payment against before releasing funds. The bank compares each incoming check field by field to your file, pays the ones that match, and flags anything that doesn’t as an exception for your review. It’s one of the more effective tools a business has to catch forged, altered, or unknown checks before the money moves.
What Goes in the File
Each line in the file represents one authorized check. The standard fields banks expect are:
- Check number, the primary identifier used to match a physical check to your records.
- Dollar amount, exact to the cent. A one-cent difference triggers an exception.
- Issue date, so the bank can also spot stale-dated or post-dated items.
- Account number for the disbursement account.
- Payee name, used by banks that offer Payee Positive Pay, where image recognition reads the “pay to the order of” line and compares it to your file.1Bank of America. Check Positive Pay
The comparison is character by character, so formatting differences — an extra space in a payee name, a middle initial that isn’t on the check — can generate false exceptions.
Voided Checks Belong in the File Too
If you void a check after it has already been included in a positive pay file, tell the bank. Most file formats include a void indicator, typically a single character where “V” marks a voided check and a blank field means the check is still active. Skip this and a fraudster who gets hold of that voided check number could present it, and the bank would see a legitimate match. Include voided records in your next file transmission after the void.
Formats and Common Mapping Mistakes
Your bank’s treasury department provides the technical specifications. Specs vary by institution, but the common formats are comma-separated values (CSV), fixed-width text files where each element sits in a set number of character positions, and XML.2Oracle Documentation. Positive Pay Bank File Creation for A/P Payments Most accounting software and ERP systems can export check-run data into these formats, but you have to map your internal fields to the bank’s required column positions.
That mapping step is where most implementations go wrong. Your system might store dates as YYYY-MM-DD while the bank expects MMDDYYYY. Your amount field might include a decimal point where the bank’s format uses implied decimals. One misaligned column shifts every field that follows it, and the bank will reject the entire file.
Most specifications also require a header record at the top of the file and a trailer record at the bottom. The header usually carries the bank’s routing number, your company name, and the file creation date and time.3Oracle. Understanding the Generate Positive Pay Text File Program The trailer typically includes a record count and a control total (the sum of all dollar amounts) so the bank can confirm nothing was dropped or corrupted in transmission. If either number doesn’t match the detail records, the bank rejects the file.
Test Before You Go Live
Run test files with your bank before the first real check run. Generate a positive pay file from test data, upload it through the bank’s portal, and have the bank confirm every field parsed correctly. Some banks offer a parallel-run period where you submit files alongside your existing check processing so you can compare results without live consequences. Skipping this step is how companies end up with hundreds of false exceptions on day one.
Sending the File to Your Bank
Once generated, the file has to reach the bank through a secure channel. Two methods cover most businesses:
- Manual upload. You log into the bank’s treasury portal (usually with multi-factor authentication), navigate to the positive pay module, and upload the file from your system.
- Automated transfer. Larger organizations use Secure File Transfer Protocol (SFTP), which pushes the file from your accounting system to the bank’s server on a schedule with no one clicking upload.
The file must arrive before the bank’s daily cutoff for issue file submissions, commonly in the late afternoon or early evening. If you cut checks today and don’t submit the file until tomorrow, those checks are unprotected overnight. Anything presented in that gap won’t appear in the bank’s reference data and may either clear without verification or get flagged. The bank should return a confirmation receipt after a successful upload.
Handling Flagged Checks
When a presented check doesn’t match your file (wrong amount, unknown check number, altered payee name), the bank flags it as an exception. You’ll see the item in the bank’s exception portal, usually with a digital image of the front and back of the check so you can inspect the payee line, check stock, and endorsement.1Bank of America. Check Positive Pay
For each exception, you submit a pay or return decision.4City National Bank. Business Suite User Guide – Check Positive Pay This is a same-day decision. Exception cutoffs are typically in the early afternoon, often around 1:00 or 2:00 PM local time. If you miss the deadline, the bank applies whatever default action is configured on your account, which may be to return the item or to pay it, depending on your agreement. Getting that default setting right during implementation matters more than most people realize.
One control point worth building in from the start: don’t let the same employee who initiates check payments also make pay/return decisions on exceptions. That combination lets an insider push a fraudulent check through and then approve it in the portal. Many treasury systems support dual authorization, where one user reviews the exception and a second user approves the decision.
If an exception turns out to be an actual forged or altered check, return it through the portal, then notify your bank’s fraud department directly by phone or secure message. Document the details while they’re fresh: when the check was presented, what was altered, and any information about how the check number or account data may have been compromised. Your bank may place a temporary hold or heightened monitoring on the account to catch additional attempts.
ACH Positive Pay Is a Separate Service
Standard positive pay covers paper checks. It does not cover unauthorized ACH debits, the electronic withdrawals a third party can initiate using your account and routing numbers. ACH positive pay is a separate product that addresses that risk.
The mechanics differ. Instead of uploading a list of individual authorized items, you set up rules that tell the bank which ACH transactions to allow:
- ACH filters take a whitelist approach. You authorize specific companies, transaction types, or dollar ranges to post automatically, and anything outside those parameters gets flagged.
- ACH blocks reject all incoming ACH debits by default and return them to the sender until you manually approve each one.
Within either approach, you can set dollar thresholds, such as a maximum debit amount a particular vendor can pull. Transactions above the ceiling route to you for a decision before the bank releases funds.
Reverse Positive Pay as an Alternative
Reverse positive pay flips the workflow. Instead of you sending the bank a list of checks issued, the bank sends you a daily list of every check presented against your account, and you decide whether to approve or reject each one before the bank processes payment.5ICBA. Positive Pay and Reverse Positive Pay Guide
The practical difference is who does the matching. With standard positive pay, the bank compares checks to your file and only bothers you with mismatches. With reverse positive pay, you review everything, legitimate items and suspicious ones alike. That gives you more control but takes far more daily attention. It works best for businesses that write few checks and can realistically review every presented item each morning. For companies issuing hundreds or thousands of checks, standard positive pay is more practical because you only touch the exceptions. Decision cutoffs are similar to exception cutoffs, typically early to mid afternoon.
Why Declining Positive Pay Can Cost You
Positive pay isn’t just operational hygiene. Declining it can shift fraud liability onto your business. Under the Uniform Commercial Code, a customer whose failure to exercise ordinary care substantially contributes to a forged or altered check cannot assert that forgery against a bank that paid the item in good faith.6Legal Information Institute. Uniform Commercial Code 3-406 – Negligence Contributing to Forged Signature or Alteration of Instrument Courts have read “ordinary care” to include adopting fraud-prevention tools the bank offers.
The UCC also requires customers to examine bank statements with reasonable promptness and report unauthorized payments; if you don’t, and the bank suffers a loss because of it, you bear the consequences.7Legal Information Institute. Uniform Commercial Code 4-406 – Customers Duty to Discover and Report Unauthorized Signature or Alteration Positive pay essentially automates that duty by flagging unauthorized items before they clear.
Most commercial deposit agreements now include explicit language on this point. A typical clause says that if the bank offered a fraud-detection program and you declined it, you cannot hold the bank liable for losses the program would have prevented. At least one court has enforced that directly, granting summary judgment to a bank after the customer refused positive pay and then lost money to an altered check.
What It Costs
Banks charge for positive pay as a treasury management service. Monthly fees for the base service typically fall in the range of $25 to $50, though the number varies by bank and by your overall treasury relationship. Exception items usually carry a per-item fee. Some banks also charge separately for ACH positive pay, payee name matching, and SFTP connectivity. Before signing up, ask for the complete fee schedule, including per-item exception charges, because a badly formatted file can generate a large number of false exceptions and the per-item costs add up quickly.