Reverse positive pay is a bank fraud-prevention service that treats every check presented against your account as unverified and asks you to approve or reject each one before a daily cutoff. It flips the workflow of standard positive pay: instead of uploading a list of checks you’ve issued and letting the bank match incoming items against it, you review the full daily batch yourself and tell the bank what to pay. The service is most common among businesses that write a relatively low volume of checks and lack the accounting software to generate issuance files automatically.
How the Daily Workflow Runs
Each business day, your bank collects the checks presented for payment against your account during overnight clearing and posts them to your online banking portal as “exceptions.” You log in, review each item, and mark it “pay” or “no pay” before the bank’s cutoff. Multiple banks set that cutoff at 3:00 PM ET, though the exact time varies by institution.1Huntington Bank. Reverse Positive Pay User Guide
If you do nothing, a default rule applies. At most banks, the default is to pay every item that wasn’t decisioned.2BMO. Reverse Positive Pay Service Description That default alone makes the daily review non-negotiable.
Once you submit your decisions, the bank processes payments on approved items and initiates returns on rejected ones through the check clearing system, sending returned items back to the presenting bank with a reason code such as “unauthorized” or “payment stopped.” The portal generates a confirmation receipt you should save for your records.
How It Differs From Standard Positive Pay
The core difference is who provides the baseline data. With standard positive pay, you upload a file listing every check you’ve issued — check number, amount, date, and sometimes the payee name — and the bank only flags mismatches. You review the discrepancies, not every item.
Reverse positive pay requires no issuance file. The bank shows you everything presented, and you verify from scratch against your own records. That makes it a better fit for businesses writing fewer checks or without an ERP system capable of generating check issuance files. Organizations cutting hundreds of checks a week generally find standard positive pay more practical, because reviewing every individual item at scale becomes unmanageable.
There’s also a protection gap. Standard positive pay supports an enhanced version called payee positive pay, which matches the payee name on the presented check against what you reported. That layer catches altered or washed checks where someone changed the payee line. Reverse positive pay can’t offer automated payee matching because there’s no issuance file to match against. You can still compare payee names manually using your internal records, but the burden sits entirely with you.
What You Review Each Morning
The portal typically displays each exception with the check number, dollar amount, and MICR line data — the machine-readable string along the bottom edge of the check that encodes routing and account numbers. Most portals also provide a digital image of the front and back of the check, which lets you inspect the payee name, signature, and endorsement.
Compare each item against your internal check register. A legitimate check matches when the check number and dollar amount align with what your records show. Look closely at the payee name and the written amount on the check image, since check-washing schemes typically alter one or both. If the portal shows the back, verify that the endorsement is consistent with the intended payee.
Not every discrepancy is fraud. Duplicate check numbers from different departments, data-entry errors in your accounting software, or MICR encoding mistakes during scanning all create false positives. Keep your internal records current before the review window opens so you don’t accidentally reject a payment your accounts payable team issued the day before.
Payee Data Limitations
One gap worth knowing: the MICR line doesn’t encode the payee name. If the bank’s portal only shows MICR data and not a full check image, you won’t be able to verify who the check was made out to. Some banks include check images automatically; others charge a per-item fee for image retrieval. Before enrolling, confirm that your bank’s portal provides front-and-back images as part of standard service, because reviewing MICR data alone won’t catch the most common check fraud schemes.
What Happens If You Miss the Cutoff
This is where businesses get burned. Miss the deadline and the default rule takes over. Under most reverse positive pay agreements, the default is to pay every item.2BMO. Reverse Positive Pay Service Description A fraudulent check sails through and the money leaves your account with no review at all.
A “default return all” setting would seem safer, but it carries its own risk. Returning a check that was legitimately issued can constitute wrongful dishonor. Under the Uniform Commercial Code, a bank that dishonors a properly payable item is liable to its customer for actual damages, which can include consequential harm like a damaged business relationship or a vendor cutting off supply.3Legal Information Institute (LII). UCC 4-402 – Banks Liability to Customer for Wrongful Dishonor That liability formally sits with the bank, but your service agreement may shift some of it back to you. Either way, a rejected legitimate check creates problems regardless of who the statute names.
The protection against either default scenario is operational: assign a primary reviewer and a backup, set calendar reminders, and treat the cutoff like a deadline with money on the line, because it is.
What Your Service Agreement Shifts to You
Read the contract carefully, because this is where the real risk lives. Most reverse positive pay agreements include an indemnification clause that shields the bank from liability whenever you fail to submit a “no pay” instruction. One major bank’s agreement states plainly that it has no liability for paying a check if you didn’t designate it with a “no pay” instruction, even if the check bears a forged signature, is counterfeit, or was never validly issued.2BMO. Reverse Positive Pay Service Description That language is standard across the industry, not an outlier.
Many agreements also include a reverse indemnification: you agree to hold the bank harmless if it refuses payment based on your “no pay” instruction and the presenting party sues.2BMO. Reverse Positive Pay Service Description If you accidentally reject a legitimate check and the payee suffers damages, you absorb that exposure. The bank processed the return you asked for; the decision was yours.
There is one hard limit under UCC § 4-103: service agreements cannot disclaim the bank’s responsibility for good faith or failure to exercise ordinary care.4Cornell Law School. UCC 4-103 – Variation by Agreement Within that guardrail, though, banks can and do set tight review windows and define default actions that put the operational burden squarely on you.
One other legal point affects your timing. UCC § 4-406 requires you to review your account activity and report unauthorized signatures or alterations with reasonable promptness. If the same person forges multiple checks and you didn’t report the first within 30 days of receiving the statement, you lose the right to recover on later forgeries by that same wrongdoer.5Cornell Law School. UCC Article 4 – Bank Deposits and Collections Delaying review by a few weeks can forfeit recovery against a repeat forger.
Internal Controls
Reverse positive pay only works as a fraud defense if the people operating it are trustworthy and the process can’t be circumvented from inside. Payment systems should incorporate segregation of duties and dual controls, and risk increases significantly when these controls are poorly designed or unenforced.6Office of the Comptroller of the Currency (OCC). Payment Systems
In practice, that means no single employee should both review exceptions and submit the final payment decisions. The person who reconciles the check register against the bank’s exception file should not be the same person who clicks “pay” or “no pay.” If one employee handles both, someone with access to blank check stock could issue a fraudulent check and approve it through the portal before anyone else sees it.
Build the process so one person prepares the reconciliation and recommendation and a second person with separate login credentials submits the final decision. Rotate reviewers periodically. Keep audit logs of every decision, who made it, and when. Archive the portal’s confirmation reports and have someone outside the daily process review them at least monthly.
When Reverse Positive Pay Fits
Not every business needs this service, and some need something stronger. Reverse positive pay fits when you write a low volume of checks and your accounting system can’t generate the issuance files required for standard positive pay. It gives you a meaningful layer of fraud protection without requiring technology you don’t have.
If your check volume is high enough that reviewing every item each morning becomes impractical, standard positive pay is the better choice. The bank does the matching automatically and you only review outliers. The tradeoff is that you need software capable of exporting check data in your bank’s required format. For businesses already running a capable ERP or accounting platform, that integration is usually straightforward. Even without full automation, exporting your register to a spreadsheet and running a simple match on check number and amount against the bank’s exception file eliminates most manual work and reduces errors.
Whichever service you choose, it covers only checks. ACH debits — electronic withdrawals initiated by a third party — require a separate fraud filter, often called ACH positive pay or ACH debit block. If your account faces both check and electronic fraud risk, ask your bank about combining services; many treasury management packages bundle them together.