Positive pay is a check-fraud control used by many businesses and banks. It compares checks presented for payment with information supplied by the business about the checks it actually issued.
The business creates an issued-check record
After issuing checks, the business sends its bank a file or message containing expected details such as the account, check number and amount. Some services also compare the payee name when suitable image or data capabilities are available.
The control is only as reliable as the issued-check information. Missing files, late uploads, duplicate numbers or inaccurate payee data can create exceptions or allow a fraudulent item to resemble an authorized one.
The bank compares presented checks
When a check reaches the paying bank, the service compares its captured information with the business’s issued-check record. A match can proceed through normal processing, subject to other controls and account conditions.
A difference—such as an unexpected check number, changed amount or unmatched payee—creates an exception. The comparison helps identify suspicious items before final payment, but it does not determine by itself whether fraud occurred.
Exceptions require a decision
The business reviews exception images and details through the bank’s treasury-management channel. It must choose whether to pay or return each item before the stated deadline, and a default decision may apply if no response arrives.
Clear authority matters because a rushed or unauthorized decision can release a fraudulent check or return a legitimate one. Dual approval, alerts and documented backup roles can strengthen the process.
The control has important limits
Positive pay may not detect every counterfeit, alteration or duplicate, especially when the comparison data is incomplete or the fraud does not change a matched field. Service features, coverage and timing differ by bank and account agreement.
The business still needs secure check stock, restricted access, timely reconciliation and prompt reporting of suspicious activity. Electronic-payment controls marketed with similar names may follow different processes and should not be assumed to work exactly like check positive pay.
Reconciliation completes the control cycle
The business compares issued checks, bank decisions, paid items and accounting records. Checks that remain outstanding unusually long, appear out of sequence or post after an unexpected decision deserve investigation.
The bank and customer also need tested procedures for missed files, unavailable systems and exception deadlines. A preventive control works best when it connects with detective review and a clear response plan.
Read the primary material
Banking Explained prioritizes regulators, official publications and first-party announcements.