What Is Positive Pay? A Guide to Preventing Check Fraud

If your business still writes paper checks, you have probably wondered what would actually happen if one of those checks fell into the wrong hands. Maybe an employee photographs a signed check, a vendor's office is broken into, or a check is intercepted in the mail. The bank does not know what you intended to send. Without a way to compare what you wrote to what is hitting the account, the burden of catching the discrepancy lands on whoever happens to be reviewing transactions.

That is the practical problem Positive Pay solves. It is a fraud prevention service that most U.S. business banks offer, and it has become one of the more reliable controls a finance team can put in place when paper checks are part of the workflow. Even as electronic payments grow, check fraud remains one of the most common forms of payment fraud reported in the AFP's annual Payments Fraud and Control Survey, which is why this service still gets so much attention.

Before writing a single check, you can take a step back and ask how your bank verifies payment legitimacy in the first place. Slash supports business banking with built-in transaction controls, real-time alerts, and an integrated dashboard that surfaces unusual activity across cards and accounts.¹ Twin, the AI financial agent built into the platform, can review your payment patterns, flag anomalies as they appear, and walk through historical activity so you can spot anything that looks off without combing through statements line by line.

The standard in finance

Slash goes above with better controls, better rewards, and better support for your business.

Get Started

What Is Positive Pay?

Positive Pay is a bank service that matches the details of checks you have issued against checks that are being presented for payment. The match typically covers the check number, dollar amount, account number, and (in stronger versions) the payee name. If a presented check does not match the details on the issued list, the bank flags it as an exception and waits for your authorization before paying it.

Banks began offering Positive Pay in the 1990s as check fraud rose, and it has been a standard treasury management offering ever since. What has changed is the scope of what it covers and how quickly the matching happens.

How Does Positive Pay Work?

The workflow is straightforward once it is set up, and it usually involves four steps that repeat each time you issue checks:

1. You Send the Bank an Issue File

When you cut a batch of checks, your accounting system or bank portal generates an issue file. This file lists every check you intend to honor: check number, amount, issue date, payee, and account number. Some banks accept the file via SFTP, an API, or a manual upload through your online banking dashboard.

2. The Bank Builds a Reference Database

The bank stores your issue file as the source of truth for legitimate payments. Each row represents a check that you have authorized.

3. Presented Checks Are Matched Automatically

When a check is presented for payment, the bank compares it against your issue file. The system checks at least the check number and amount, and may also verify the account, date range, and payee.

4. Mismatches Are Flagged as Exceptions

Any check that does not match an entry in the issue file becomes an exception. The bank holds the check and notifies you, often through online banking, email, or a treasury portal. You then review the exception and decide whether to pay it or return it.

If you do not respond by the cutoff—often the same business day or by mid-morning the next day—the bank applies a default action. Some banks default to paying, others to returning. Confirming the default with your bank matters because the wrong setting can either let fraudulent items through or bounce legitimate ones.

Who Typically Uses Positive Pay?

Positive Pay tends to make the most sense for businesses that issue paper or printed checks regularly. Common users include:

Companies that pay vendors by check rather than ACH
Property managers, law firms, and escrow agents that handle high-dollar disbursements
Construction firms paying subcontractors
Healthcare practices, schools, and nonprofits with large check volumes
Businesses that have already experienced a check fraud incident

Businesses that pay almost exclusively through ACH, wires, and cards have less direct need for Positive Pay, though they may still have a few legacy check disbursements that warrant coverage. While Slash does not issue checks, it supports a range of payment methods, including unlimited domestic ACH, wire, and real-time transfers with no additional per-transaction fees through Slash Pro.

The standard in finance

Slash goes above with better controls, better rewards, and better support for your business.

Get Started

What Are the Different Variants of Positive Pay?

Not all Positive Pay services are identical. Banks offer a few variants that target different scenarios, and the differences are worth understanding before you sign up:

1. Standard Positive Pay

Matches the check number, amount, and account number against the issue file. Catches forged or altered checks where the dollar amount or check number does not match what you issued.

2. Payee Positive Pay (Payee Match)

Adds payee name verification to the standard checks. The bank reads the payee name from the presented check (often using OCR) and confirms it matches what you listed in the issue file. This catches a common form of fraud: an interceptor altering only the payee name on an otherwise legitimate check. Payee Match is sometimes priced higher because of the OCR step.

3. Reverse Positive Pay

This version of positive pay works in the inverse of the standard model. The bank sends you a daily list of checks presented for payment, and you review the list and approve or reject each one; there is no upfront issue file. This option costs less and works for very small businesses, but it puts the burden of catching fraud on you rather than on the bank's matching engine. If you miss a day, fraudulent items could be paid by default.

4. Teller Positive Pay

Some banks extend matching to over-the-counter transactions, so a check cashed in person at a branch is also verified against the issue file. This can be useful when fraud risk includes someone walking into a branch with a forged or altered check.

How Does Positive Pay Compare to Other Fraud Controls?

Positive Pay is one tool in a broader fraud prevention program, and it works best when combined with other controls that cover different payment types and points in the process. That is why many businesses layer multiple safeguards across their banking and accounting systems rather than relying on a single solution. Other controls that address gaps Positive Pay does not cover include:

ACH Positive Pay: Also called ACH Block or ACH Filter, it does the same matching for ACH debits, letting only pre-authorized originators debit your account. Many banks bundle the two services.
Check Block: Prevents any check from being paid against an account, useful for accounts you have moved entirely to electronic payments.
Dual Approval: Workflows in your accounting system or banking dashboard that require two or more people to release a payment, regardless of method.
Account reconciliation: Accounting software can flag exceptions but only after the fact, since it is incapable of stopping a payment on its own.

For businesses that want a single dashboard view of these signals, Slash combines real-time transaction alerts, role-based approvals, and detailed audit trails so the typical preventive controls you would assemble across multiple tools can sit in one place. Twin can also walk you through any flagged item in plain English and help you decide whether to escalate controls or release a payment.

What Does Positive Pay Cost?

Pricing varies by bank, but a few pricing patterns are common. Banks typically charge a monthly base fee for the service, usually in the range of $25 to $50 for small business accounts, with some larger institutions charging more. There is often a per-item fee on top of that. Some banks may waive the fees for accounts that maintain a minimum balance or use other treasury services.

What Are the Limits of Positive Pay?

Positive Pay only catches a specific type of check fraud. It does not catch all of it.

It will not flag a check that you legitimately issued but that was authorized in error, since the issue file lists it as valid. It cannot catch internal fraud where the issuer is also the person uploading the issue file. It does not protect against ACH fraud unless ACH Positive Pay is also in place. And it relies on the issue file being uploaded promptly; a delayed upload can cause legitimate checks to be flagged as exceptions, slowing outbound payments in some cases.

The controls that pair well with Positive Pay include segregation of duties (the person uploading the issue file is not the same person approving payments), regular reconciliation, and limits on who can sign or print checks.

How Slash Can Help You Manage Payment Fraud Risk

Slash is built for businesses that want to move most of their payment volume off paper checks while still keeping strong controls on the ones they do issue. By shifting more activity to ACH, wire, and card payments, the share of transactions that rely on check-specific controls like Positive Pay shrinks substantially. For the checks you still write, your existing bank’s Positive Pay service can run alongside Slash, while Slash handles the rest of your supplier payments and card spend with built-in approval workflows.

Twin can also make your account reviews both easier to run and more thorough. You can ask it to surface any unusual activity from the past week, compare current spend patterns against typical baselines, or pull a list of payments above a threshold for review. Because Twin reads the same transaction stream that powers your dashboard, the analysis stays in step with what is actually moving through your accounts.

Here is what else you get with Slash:

Slash Visa® Platinum Card with customizable spending controls and unlimited virtual cards, helpful for replacing one-off check payments with safer card transactions.
High-yield treasury that earns up to 3.83% annualized yield on idle balances through money market investments from BlackRock and Morgan Stanley.⁶
Two-way accounting integrations with QuickBooks, Xero, and Sage Intacct so reconciliations against bank activity stay current.
Native cryptocurrency support for holding, sending, and receiving USDC and USDT across 8 supported blockchains.⁴
Multi-rail payments including ACH, RTP, FedNow, and international wires to 180+ countries via SWIFT.
Employee spend controls and approval workflows that reduce reliance on paper-based authorization.

Apply in less than 10 minutes today

Join the 5,000+ businesses already using Slash.

Frequently Asked Questions

Is Positive Pay required by law?

No, Positive Pay is not required by law. However, banks often cite Uniform Commercial Code (UCC) Article 4 to argue that businesses share liability for check fraud losses if they do not adopt commercially reasonable security procedures. Court rulings on this vary by jurisdiction.

What happens if I forget to upload an issue file?

Your bank will treat all presented checks as exceptions because none of them match an issue file. Depending on the default action your bank applies, the checks may either be paid (defeating the control) or returned (potentially bouncing legitimate vendor payments). Most banks let you set the default and send reminders if a file is overdue.

Can Positive Pay catch a forged signature?

Not directly. Standard Positive Pay matches numbers and amounts, not handwriting. Some banks offer signature verification as a separate service, often using image-matching software, but this is usually offered separately from Positive Pay. Payee Match comes closer because it verifies the payee name, which often changes when a check is altered.

Does Positive Pay work with electronic checks?

Yes, in most cases. The service applies to any check that clears through the U.S. check processing system, including electronic check images presented under Check 21. The matching happens on the check details rather than on the physical paper, so an electronically presented check is verified the same way as a paper one.