Accredited ACH Professional (AAP) — Questions and Answers
Question 1: What is the primary purpose of Same Day ACH?
- To replace wire transfer services
- To provide faster processing for both ACH credits and debits (Correct answer)
- To eliminate the need for overnight batch processing
- To process international payments
Correct answer: To provide faster processing for both ACH credits and debits
The primary purpose of Same Day ACH is to provide faster processing for both ACH credits and debits. It allows for the settlement of transactions on the same business day they are originated, significantly reducing the traditional multi-day processing time. This enhancement offers greater speed and flexibility for businesses and consumers, enabling quicker access to funds and more timely payments.
Question 2: What is the primary obligation of an RDFI when it receives an ACH debit entry?
- Obtain the Receiver's approval before posting
- Hold the entry for 5 business days before posting
- Forward the entry to NACHA for approval
- Post the entry to the Receiver's account unless a valid return reason exists (Correct answer)
Correct answer: Post the entry to the Receiver's account unless a valid return reason exists
The RDFI must post ACH entries to the Receiver's account unless it has a valid return reason under the NACHA Operating Rules.
Question 3: The maximum NACHA fine for a willful rules violation is:
- Up to $500,000 per incident (Correct answer)
- $100 per individual entry in violation
- $1,000 per batch transmitted in violation
- $50,000 as a flat fee per audit finding
Correct answer: Up to $500,000 per incident
NACHA can impose fines up to $500,000 per incident for willful violations of the Operating Rules, with lesser amounts for less severe violations.
Question 4: NACHA membership is required for which entities?
- All Third-Party Senders
- ODFIs and RDFIs (depository financial institutions participating in the ACH network) (Correct answer)
- All Originators of ACH entries
- Federal Reserve Banks only
Correct answer: ODFIs and RDFIs (depository financial institutions participating in the ACH network)
NACHA membership is required for depository financial institutions that participate directly in the ACH network as ODFIs or RDFIs.
Question 5: NOC change code C01 indicates:
- Incorrect DFI account number (Correct answer)
- Incorrect individual name
- Incorrect transaction code
- Incorrect routing/transit number
Correct answer: Incorrect DFI account number
C01 is the change code used in a Notification of Change to indicate that the DFI account number in the entry is incorrect and needs to be updated.
Question 6: When an ODFI receives a return entry from an ACH Operator, it must pass the return to the Originator within:
- 60 banking days of receipt
- 2 banking days of receiving the return (Correct answer)
- Same banking day of receipt
- 5 calendar days of receipt
Correct answer: 2 banking days of receiving the return
The ODFI must pass return entries to the Originator within 2 banking days of receiving them from the ACH Operator.
Question 7: How frequently must ODFIs complete an ACH audit as required by NACHA?
- Quarterly (every three months)
- Annually (at least once per calendar year) (Correct answer)
- Every two years at minimum
- Monthly (at least once per month)
Correct answer: Annually (at least once per calendar year)
NACHA Operating Rules require ODFIs to complete an ACH audit at least once per calendar year to assess compliance with the rules.
Question 8: What does the 'Entry/Addenda Count' field in an ACH Batch Control Record include?
- Both Entry Detail Records and Addenda Records combined (Correct answer)
- Only Entry Detail Records in the batch
- Entry Detail Records minus any prenote entries
- Only Addenda Records in the batch
Correct answer: Both Entry Detail Records and Addenda Records combined
The Entry/Addenda Count field is the sum of all Entry Detail Records and all Addenda Records within the batch, used to verify that no records were dropped or added.
Question 9: Which field in the ACH File Header Record identifies the entity that created or originated the ACH file?
- File Creation Date
- Immediate Origin Name (Correct answer)
- File ID Modifier
- Immediate Destination Name
Correct answer: Immediate Origin Name
The Immediate Origin Name field (23 characters) in the File Header Record identifies the originating entity — either the ODFI or the company that created the ACH file.
Question 10: For which of the following return codes is a Written Statement of Unauthorized Debit not required?
- R-51
- R-07
- R-10
- R-38 (Correct answer)
Correct answer: R-38
For the return code R-38 (Stop Payment on Source Document), a Written Statement of Unauthorized Debit (WSUD) is not required. A WSUD is typically needed for unauthorized transactions where the consumer claims they did not authorize the debit. However, for an R-38, the consumer has already initiated a stop payment, which serves as sufficient notification to the financial institution.
Question 11: Before originating entries for a new Originator, an ODFI is required by NACHA rules to:
- File a report with FinCEN about the new relationship
- Conduct a risk assessment and due diligence review of the Originator (Correct answer)
- Notify the RDFI in advance of the first entry
- Obtain pre-approval from NACHA
Correct answer: Conduct a risk assessment and due diligence review of the Originator
NACHA rules require ODFIs to perform due diligence and a risk assessment of new Originators before transmitting entries on their behalf.
Question 12: Which of the following is NOT a required element of a valid PPD debit authorization?
- The Originator's name
- The Originator's profit margin or fee disclosure (Correct answer)
- The Receiver's name
- The payment schedule or frequency of debits
Correct answer: The Originator's profit margin or fee disclosure
While profit margin disclosures may be required by other laws, they are not a required element of a NACHA-compliant PPD debit authorization.
Question 13: The 'Total Debit Entry Dollar Amount' field in an ACH File Control Record includes which entries?
- Debit entries minus any returns or reversals in the file
- All debit entries across every batch in the file (Correct answer)
- Only same-day ACH debit entries
- Only consumer debit entries (PPD, WEB)
Correct answer: All debit entries across every batch in the file
The File Control Record's Total Debit Entry Dollar Amount is the grand total of all debit Entry Detail Records from every batch in the file, used for file-level balancing.
Question 14: According to Reg E, a financial institution must provide notification to a consumer within ___ day(s) of preauthorized transfer.
- 45 calendar days
- 1 business day
- 2 business days (Correct answer)
- 10 calendar days
Correct answer: 2 business days
According to Regulation E, financial institutions must provide notification to a consumer within two business days of a preauthorized transfer. This rule ensures consumers are promptly informed about transactions affecting their accounts. This notification helps consumers monitor their finances and identify any unauthorized activity quickly.
Question 15: The second step in the risk management process is analyzing loss exposures. Which one of the following is true regarding this step? Choose one answer.
- Loss exposures that could interfere with the achievement of the organization's goals are identified in this step.
- A major strength of loss exposure analysis is that the process is generally inexpensive.
- A weakness of loss exposure analysis is that it is useful only for those types of losses that an organization has suffered in the past.
- Loss exposures are analyzed based on loss frequency, loss severity, total dollar losses, and timing in this step. (Correct answer)
Correct answer: Loss exposures are analyzed based on loss frequency, loss severity, total dollar losses, and timing in this step.
The second step in the risk management process, analyzing loss exposures, involves a detailed quantitative and qualitative assessment of identified risks. This analysis specifically focuses on four critical dimensions: loss frequency (how often a loss is expected), loss severity (the potential financial impact of each loss), total dollar losses (the aggregate financial burden), and timing (when losses are likely to occur). This comprehensive evaluation helps in understanding the true impact of potential risks.
Question 16: What dollar amount must a 'Prenote' ACH entry always contain?
- $1.00
- Any amount under $1.00
- $0.01
- $0.00 (Correct answer)
Correct answer: $0.00
Prenote entries always carry a dollar amount of zero; they are zero-dollar test transactions used to validate receiver account information before live entries are sent.
Question 17: Which of the following best describes an ACH "batch"?
- A set of ACH entries scheduled for future processing
- A collection of return items from various RDFIs
- A single transaction processed by the ACH Operator
- A group of ACH transactions submitted together for processing (Correct answer)
Correct answer: A group of ACH transactions submitted together for processing
In the ACH Network, a "batch" refers to a collection of individual ACH entries (transactions) that are grouped together by an Originator or ODFI and submitted as a single file for processing. This batching mechanism allows for the efficient processing of multiple transactions simultaneously, such as a company's payroll direct deposits or a utility company's bill payments, rather than sending each entry individually.
Question 18: A dishonored return is when:
- An ODFI returns a return entry because it does not comply with NACHA rules (Correct answer)
- An ACH Operator cancels a batch before settlement
- A Receiver formally rejects a credit entry
- NACHA rejects a batch for format errors
Correct answer: An ODFI returns a return entry because it does not comply with NACHA rules
A dishonored return is transmitted by an ODFI when it receives a return entry that it believes was improper or untimely under NACHA Operating Rules.
Question 19: What is the return timeframe for an RDFI to return an unauthorized consumer debit entry using return code R10?
- 2 banking days from the settlement date
- 90 calendar days from the settlement date
- 5 banking days from the settlement date
- 60 calendar days from the settlement date of the original entry (Correct answer)
Correct answer: 60 calendar days from the settlement date of the original entry
R10 (Customer Advises Not Authorized) has a 60 calendar-day extended return window, reflecting consumer protection rights for unauthorized debits.
Question 20: The File Control Record in a NACHA ACH file uses which record type code?
- 7
- 9 (Correct answer)
- 8
- 0
Correct answer: 9
Record type code '9' identifies the File Control Record, which always appears as the last meaningful record in an ACH file and contains file-level totals.
Question 21: How is a Third-Party Sender (TPS) defined under NACHA Operating Rules?
- A direct customer of an ODFI with its own origination agreement
- A federal reserve bank that clears ACH entries
- An ACH network operator that settles transactions
- A company that transmits ACH entries on behalf of Originators through an ODFI (Correct answer)
Correct answer: A company that transmits ACH entries on behalf of Originators through an ODFI
A Third-Party Sender is an intermediary that transmits ACH entries to an ODFI on behalf of Originators, often providing processing services for multiple clients.
Question 22: In a NACHA ACH file, what is the 'blocking factor' and what value does it have?
- The minimum transaction dollar amount; value is $0.01
- The number of records per block; value is 10 (Correct answer)
- The maximum number of batches allowed; value is 999
- The encryption level of the file; value is 128-bit
Correct answer: The number of records per block; value is 10
The blocking factor is 10, meaning ACH files must be padded with '9' records so the total record count is a multiple of 10 (one block = 10 records Ă— 94 characters = 940 bytes).
Question 23: Which record type code identifies an ACH Addenda Record?
- 5
- 7 (Correct answer)
- 8
- 6
Correct answer: 7
Record type code '7' identifies Addenda Records, which provide supplemental payment-related information attached to an Entry Detail Record.
Question 24: Which party in the ACH network bears ultimate responsibility for the actions of a Third-Party Sender?
- The Receiver's bank
- The ODFI (Correct answer)
- The ACH Operator
- NACHA
Correct answer: The ODFI
The ODFI is ultimately responsible for the actions of its Third-Party Senders and must ensure their compliance with NACHA Operating Rules.
Question 25: Which SEC code covers ACH debit entries to consumer accounts where authorization is obtained at the point of sale via a debit card transaction?
- BOC (Back Office Conversion)
- POP (Point-of-Purchase)
- POS (Point-of-Sale) (Correct answer)
- WEB (Internet-Initiated Debit)
Correct answer: POS (Point-of-Sale)
POS (Point-of-Sale) is the SEC code for consumer debit transactions initiated at the point of sale using a debit card or similar access device.
Question 26: Return code R08 means:
- Insufficient funds with a simultaneous stop payment order
- Account has been frozen by the RDFI
- Payment stopped—the Receiver has requested a stop payment on the entry (Correct answer)
- Authorization has been revoked by the consumer
Correct answer: Payment stopped—the Receiver has requested a stop payment on the entry
R08 (Payment Stopped) is returned when the Receiver has placed a stop payment order with the RDFI specifically covering the ACH debit entry.
Question 27: A Notification of Change (NOC) is sent by an RDFI when:
- Account information has changed but the entry was still successfully posted (Correct answer)
- A Receiver formally disputes a transaction with the RDFI
- An Originator requests account verification before sending entries
- An entry is returned for insufficient funds
Correct answer: Account information has changed but the entry was still successfully posted
An NOC is sent when the RDFI posts an entry successfully but detects that certain account information (e.g., account number or routing number) needs to be corrected for future entries.
Question 28: Prenotification (prenote) entries sent before live dollar ACH entries allow an Originator to:
- Notify the RDFI of an upcoming high-value transaction for review
- Reserve settlement funds at the RDFI in advance
- Pre-authorize a payment that will be debited on a specific future date
- Test the validity of a Receiver's account information before sending live transactions (Correct answer)
Correct answer: Test the validity of a Receiver's account information before sending live transactions
A prenote is a zero-dollar test entry that validates account and routing numbers before the Originator begins sending live dollar entries to that account.
Question 29: What is the purpose of the 'File ID Modifier' field in the ACH File Header Record?
- To encrypt the ACH file for secure transmission
- To indicate whether the file is processed by FedACH or EPN
- To specify whether the file contains debits, credits, or both
- To distinguish multiple files sent by the same originator on the same date (Correct answer)
Correct answer: To distinguish multiple files sent by the same originator on the same date
The File ID Modifier (a single alphanumeric character, A–Z or 0–9) distinguishes multiple ACH files created by the same originator on the same business day, preventing duplicate file confusion.
Question 30: For POP entries, what must an Originator provide to the consumer at the point of purchase?
- A written authorization for all future debit entries
- A copy of the NACHA Operating Rules for consumer reference
- The merchant's ODFI name and ACH company ID
- A receipt and clear notice that the check will be converted to an ACH debit entry (Correct answer)
Correct answer: A receipt and clear notice that the check will be converted to an ACH debit entry
For POP entries, the Originator must provide the consumer with a receipt and prominent notice that their check will be converted to an ACH debit and is not their original check.
Question 31: CTX entries differ from CCD entries primarily because CTX:
- Is limited to credit entries only
- Is used only for consumer deposit accounts
- Supports up to 9,999 addenda records for corporate trade exchange data (Correct answer)
- Requires same-day settlement by rule
Correct answer: Supports up to 9,999 addenda records for corporate trade exchange data
CTX (Corporate Trade Exchange) supports up to 9,999 addenda records, allowing detailed remittance information to accompany business-to-business payments.
Question 32: For WEB debit entries, what additional security requirement is imposed on Originators?
- Real-time fraud monitoring certification by a third party
- Mandatory two-factor authentication for all WEB transactions
- Monthly reporting of WEB volume to NACHA
- An annual audit to validate the security of transmission and storage of Receiver banking information (Correct answer)
Correct answer: An annual audit to validate the security of transmission and storage of Receiver banking information
NACHA rules require Originators of WEB entries to conduct an annual audit of their data security practices for transmitting and storing Receiver banking information.
Question 33: What is the record type code for the File Header Record in a NACHA-formatted ACH file?
- 5
- 1 (Correct answer)
- 9
- 2
Correct answer: 1
The File Header Record always uses record type code '1' and appears exactly once at the very beginning of every ACH file.
Question 34: OFAC compliance in ACH processing requires financial institutions to:
- File a SAR with FinCEN for every IAT entry received
- Obtain OFAC pre-approval for every IAT entry originated
- Screen transactions against the SDN list and block or reject prohibited transactions (Correct answer)
- Report all international ACH transactions to OFAC before processing
Correct answer: Screen transactions against the SDN list and block or reject prohibited transactions
Financial institutions must screen ACH transaction parties against OFAC's Specially Designated Nationals (SDN) list and block or reject any transactions involving prohibited parties.
Question 35: In ACH operations, what is the primary purpose of the prenotification (prenote) process?
- To initiate a Same Day ACH transaction
- To verify the accuracy of account information before sending live entries (Correct answer)
- To ensure the transaction will not be returned
- To notify the RDFI of an upcoming large transaction
Correct answer: To verify the accuracy of account information before sending live entries
The prenotification (prenote) process in ACH operations is a zero-dollar entry sent by the Originating Depository Financial Institution (ODFI) to the Receiving Depository Financial Institution (RDFI). Its primary purpose is to verify the accuracy of the account number and routing number for a future live entry. This crucial step helps prevent returns due to incorrect account information, thereby improving the efficiency and reliability of subsequent ACH transactions.
Question 36: Which record type code identifies the Company/Batch Header Record in an ACH file?
- 3
- 5 (Correct answer)
- 6
- 8
Correct answer: 5
Record type code '5' identifies the Company/Batch Header Record, which opens each new batch within an ACH file.
Question 37: An electronic authorization for WEB entries is valid if it:
- Is confirmed via SMS text message to the consumer's mobile number
- Meets PCI-DSS Level 1 certification standards
- Is logically associated with the consumer's account information and can be reproduced in paper form (Correct answer)
- Includes a digital certificate issued by a NACHA-approved certificate authority
Correct answer: Is logically associated with the consumer's account information and can be reproduced in paper form
NACHA requires that electronic authorizations for WEB entries be logically associated with the account information and capable of being reproduced in a readable paper format.
Question 38: What term describes the company or individual that initiates ACH credit or debit entries with authorization from a Receiver?
- ACH Operator
- Originator (Correct answer)
- Third-Party Processor
- RDFI
Correct answer: Originator
The Originator is the entity that initiates ACH entries, having obtained proper authorization from the Receiver to do so.
Question 39: For CCD entries (business-to-business ACH), what type of authorization is required?
- Verbal authorization is sufficient for business accounts
- A written agreement between the trading partners, though the format is flexible (Correct answer)
- A NACHA-approved authorization form specific to CCD
- A consumer-style written authorization with signature
Correct answer: A written agreement between the trading partners, though the format is flexible
CCD entries require a written agreement between the Originator and Receiver, but NACHA does not prescribe a specific format for business-to-business authorizations.
Question 40: In ACH operations, what does "settlement" refer to?
- The process of reconciling accounts within a financial institution
- The posting of account balances on customer statements
- The movement of funds between banks to complete an ACH transaction (Correct answer)
- The process of clearing checks
Correct answer: The movement of funds between banks to complete an ACH transaction
In ACH operations, 'settlement' refers to the final movement of funds between financial institutions to complete an ACH transaction. It is the process by which the actual money is exchanged between the banks involved, typically occurring through the Federal Reserve or a private clearing house. Settlement confirms that the funds have been successfully transferred and are available in the receiving account.
Question 41: The ACH Rules state that items returned for R01 and R09 can only be reinitiated two times for all of the following SEC codes except:
- ARC
- POP
- RCK (Correct answer)
- PPD
Correct answer: RCK
The Nacha Operating Rules state that items returned for R01 (Insufficient Funds) and R09 (Uncollected Funds) can only be reinitiated two times for most SEC codes, but RCK (Re-presented Check Entry) is an exception. RCK entries have specific reinitiation rules that differ from other SEC codes, allowing for a different re-presentment process for checks converted to ACH.
Question 42: In an ACH Trace Number, what do the first 8 digits represent?
- The ODFI's routing transit number (without the check digit) (Correct answer)
- The batch sequence number assigned by the ODFI
- The RDFI's routing transit number
- The transaction date in YYYYMMDD format
Correct answer: The ODFI's routing transit number (without the check digit)
The first 8 digits of the 15-digit ACH Trace Number are the ODFI's 8-digit routing transit number (the 9-digit RTN minus its check digit), uniquely identifying the originating institution.
Question 43: What is the standard return timeframe for unauthorized ACH debit entries according to the Nacha Operating Rules?
- 2 business days from the receipt of the entry
- 5 business days from the date of notification
- 60 calendar days from the settlement date (Correct answer)
- 24 hours from the time the entry was processed
Correct answer: 60 calendar days from the settlement date
According to the Nacha Operating Rules, consumers are granted a specific timeframe to dispute unauthorized ACH debit entries. For transactions involving consumer accounts, the standard return timeframe is 60 calendar days from the settlement date of the unauthorized debit. This rule provides consumers with adequate time to review their bank statements and report any debits they did not authorize, ensuring consumer protection.
Question 44: Risk management program goals are typically divided into two categories: pre-loss goals and post-loss goals. Which one of the following describes one of these categories of goals? Choose one answer.
- Pre-loss goals include profitability, earnings stability, and loss prevention.
- Pre-loss goals are risk management goals that allow the organization to prepare for future losses.
- Post-loss goals include immediate restoration of operations, tolerable uncertainty, and loss mitigation.
- Post-loss goals broadly describe the degree of recovery that an organization will strive to reach following a loss. (Correct answer)
Correct answer: Post-loss goals broadly describe the degree of recovery that an organization will strive to reach following a loss.
Risk management goals are typically categorized into pre-loss and post-loss objectives. Post-loss goals specifically define the desired state of an organization after a loss event has occurred. These goals aim to guide the recovery process, ensuring the organization can survive, maintain operations, and achieve a certain level of stability and normalcy following an adverse incident.
Question 45: What is the length of the 'Individual Name' field in an ACH PPD Entry Detail Record?
- 15 characters
- 30 characters
- 35 characters
- 22 characters (Correct answer)
Correct answer: 22 characters
The Individual Name field in an Entry Detail Record is 22 characters long and identifies the name of the receiver (individual or company) for the transaction.
Question 46: When a non-participating DFI's customer receives an ACH entry, which entity typically acts as the RDFI?
- The Federal Reserve Bank directly
- A correspondent or gateway institution that processes on behalf of the non-participating DFI (Correct answer)
- NACHA as the network administrator
- The non-participating DFI itself
Correct answer: A correspondent or gateway institution that processes on behalf of the non-participating DFI
Non-participating DFIs do not have direct ACH network access, so a correspondent or gateway institution acts as the RDFI and passes the entry through.
Question 47: An ODFI's warranty to the ACH network when transmitting entries includes:
- That the RDFI will post entries within one hour of receipt
- That entries are guaranteed to be fraud-free
- That entries comply with NACHA Operating Rules and that the Originator has obtained proper authorization (Correct answer)
- That all entries will settle on the same day
Correct answer: That entries comply with NACHA Operating Rules and that the Originator has obtained proper authorization
By transmitting entries, the ODFI warrants that they comply with NACHA Operating Rules and that proper Receiver authorizations have been obtained.
Question 48: What record type code identifies the Company/Batch Control Record in an ACH file?
- 8 (Correct answer)
- 9
- 6
- 7
Correct answer: 8
Record type code '8' identifies the Company/Batch Control Record, which closes each batch and contains batch-level totals and counts.
Question 49: A consumer may revoke ACH debit authorization by:
- Disputing the charge through their credit card issuer
- Calling their RDFI only—the RDFI then notifies the Originator
- Notifying the Originator in the manner specified in the authorization agreement (Correct answer)
- Filing a formal complaint with NACHA's consumer protection division
Correct answer: Notifying the Originator in the manner specified in the authorization agreement
To revoke an ACH debit authorization, the consumer must notify the Originator in the method described in the authorization agreement itself.
Question 50: The administrative return rate threshold (R02, R03, R04) that triggers NACHA review of an Originator is:
- 1% of ACH debit entries originated
- 0.5% of ACH debit entries originated
- 3% of ACH debit entries originated (Correct answer)
- 15% of ACH debit entries originated
Correct answer: 3% of ACH debit entries originated
An administrative return rate exceeding 3% triggers NACHA review, indicating the Originator's account database has significant data quality issues.
Question 51: When an Originator changes a Receiver's recurring debit amount from the amount previously disclosed, notice must be provided at least:
- No advance notice is required if within 10% of prior amount
- On the same day as the debit occurs
- 30 days before the new amount is debited
- 7 calendar days before the scheduled debit (Correct answer)
Correct answer: 7 calendar days before the scheduled debit
NACHA rules require Originators to notify consumers at least 7 calendar days in advance when the debit amount will vary from the amount stated in the authorization.
Question 52: The CCD SEC code is used for:
- Corporate credit or debit transactions between business accounts (Correct answer)
- Point-of-purchase check conversion entries
- International ACH entries involving foreign banks
- Consumer telephone-initiated debit entries
Correct answer: Corporate credit or debit transactions between business accounts
CCD (Corporate Credit or Debit) is used for business-to-business ACH transactions, such as vendor payments or concentration of funds.
Question 53: What does the 'Originator Status Code' field in the ACH Batch Header Record identify?
- The Federal Reserve district of the ODFI
- Whether the ODFI is a bank or a credit union
- Whether the file contains consumer or corporate transactions
- Whether the originator is a government entity or other originator (Correct answer)
Correct answer: Whether the originator is a government entity or other originator
The Originator Status Code is a one-character field that distinguishes government originators ('2') from non-government originators ('1'), affecting certain regulatory and processing rules.
Question 54: Which return code is used when the RDFI cannot identify or locate the account referenced in the entry?
- R01 (Insufficient Funds)
- R03 (No Account/Unable to Locate Account) (Correct answer)
- R02 (Account Closed)
- R04 (Invalid Account Number Structure)
Correct answer: R03 (No Account/Unable to Locate Account)
R03 (No Account/Unable to Locate Account) is used when the account number cannot be matched to any existing account at the RDFI.
Question 55: When an ODFI uses a Third-Party Sender, the ODFI must ensure the TPS complies with:
- The Federal Reserve Act
- NACHA Operating Rules (Correct answer)
- IRS regulations exclusively
- Only the state banking laws of its domicile
Correct answer: NACHA Operating Rules
The ODFI retains responsibility for its TPS relationships and must ensure all TPS activity complies with the NACHA Operating Rules.
Question 56: What is the primary role of an Originating Depository Financial Institution (ODFI) in the ACH network?
- Settles funds directly with consumers
- Receives ACH entries from Originators and forwards them to an ACH Operator (Correct answer)
- Audits ACH transactions for NACHA compliance
- Only processes returned entries from RDFIs
Correct answer: Receives ACH entries from Originators and forwards them to an ACH Operator
The ODFI acts as the entry point into the ACH network, accepting entries from Originators and transmitting them to an ACH Operator for processing.
Question 57: For most standard return reasons, an RDFI must return an ACH entry within how many banking days of the settlement date?
- 5 banking days
- 2 banking days (Correct answer)
- Same business day
- 60 calendar days
Correct answer: 2 banking days
The standard return timeframe under NACHA rules is 2 banking days from the settlement date of the original entry.
Question 58: A reversing entry must be transmitted within how many banking days after the original entry's settlement date?
- 5 banking days (Correct answer)
- 2 banking days
- 60 calendar days
- Same banking day
Correct answer: 5 banking days
Under NACHA rules, a reversing entry must be sent within 5 banking days of the original entry's settlement date.
Question 59: Under Regulation E, a financial institution's error resolution process must be completed within:
- 60 calendar days as the maximum allowed period
- 2 business days in all cases
- 5 business days regardless of circumstances
- 10 business days (or 45 calendar days if provisional credit is extended to the consumer) (Correct answer)
Correct answer: 10 business days (or 45 calendar days if provisional credit is extended to the consumer)
Regulation E requires institutions to investigate and resolve error claims within 10 business days, or up to 45 calendar days if they provisionally credit the disputed amount while investigating.
Question 60: What are the two primary types of transactions processed through the ACH Network?
- Check and electronic transfers
- Credit and debit transactions (Correct answer)
- Direct deposits and cash withdrawals
- Wire transfers and credit card payments
Correct answer: Credit and debit transactions
The two primary types of transactions processed through the ACH Network are credit and debit transactions. Credit transactions involve pushing funds from one account to another, such as direct deposits of payroll. Debit transactions involve pulling funds from an account, like automatic bill payments. These two categories encompass the vast majority of ACH activity.
Question 61: An Originator's agreement with its ODFI must include:
- The Originator's agreement to comply with the NACHA Operating Rules (Correct answer)
- Monthly transaction volume caps approved by NACHA
- A complete list of all Receivers to be debited
- Written approval from the ACH Operator for each entry type
Correct answer: The Originator's agreement to comply with the NACHA Operating Rules
NACHA rules require that ODFIs include a provision in their Originator agreements binding the Originator to comply with the NACHA Operating Rules.
Question 62: RCK entries are used to re-present:
- Returned consumer checks (NSF) as ACH debit entries (Correct answer)
- Corporate wire rejections as ACH credits
- Rejected ACH batches for reprocessing
- International check conversions for clearance
Correct answer: Returned consumer checks (NSF) as ACH debit entries
RCK (Re-presented Check Entry) allows Originators to re-present a check that was returned for insufficient or uncollected funds as an ACH debit entry.
Question 63: What record type code is assigned to an ACH Entry Detail Record (e.g., for PPD or CCD entries)?
- 6 (Correct answer)
- 7
- 8
- 5
Correct answer: 6
Record type code '6' identifies Entry Detail Records, which carry individual transaction data for standard SEC codes like PPD and CCD.
Question 64: What is the main responsibility of the Originating Depository Financial Institution (ODFI) in ACH transactions?
- To ensure all transactions are settled by the Federal Reserve
- To determine the settlement date for the transaction
- To ensure compliance with ACH rules and properly transmit entries to the ACH Operator (Correct answer)
- To verify the authenticity of the Receiver's account
Correct answer: To ensure compliance with ACH rules and properly transmit entries to the ACH Operator
The Originating Depository Financial Institution (ODFI) plays a critical role in ACH transactions, bearing significant responsibilities. Its main responsibility is to ensure that all ACH entries it originates fully comply with the Nacha Operating Rules and any applicable laws. The ODFI must also properly transmit these compliant entries to the ACH Operator for processing, acting as the gateway for Originators into the ACH Network.
Question 65: International ACH Transactions (IAT) require the Originator to include in mandatory addenda:
- Only the Receiver's IBAN number in place of the routing number
- Details about the foreign financial institution and cross-border payment information (Correct answer)
- A SWIFT code substituted for the RDFI routing number
- Dual-currency authorization signed by both parties
Correct answer: Details about the foreign financial institution and cross-border payment information
IAT entries require multiple mandatory addenda records containing detailed information about the originating and receiving financial institutions and cross-border payment details.
Question 66: Which addenda record type is required for IAT entries?
- Only the standard NACHA 7-character addenda format
- No addenda records—the main entry contains all required data
- Multiple mandatory addenda records including remittance, foreign correspondent bank, and beneficiary information (Correct answer)
- A single optional addenda record only
Correct answer: Multiple mandatory addenda records including remittance, foreign correspondent bank, and beneficiary information
IAT entries require multiple mandatory addenda records that carry detailed information about the foreign financial institution, originator, receiver, and remittance data.
Question 67: Same-Day ACH rules require ODFIs to submit same-day entries to the ACH Operator by:
- Any time before 5:00 PM local bank time
- Midnight of the processing day regardless of time zone
- Specific same-day processing windows (e.g., 10:30 AM ET and 2:45 PM ET) (Correct answer)
- Before 9:00 AM ET for guaranteed same-day settlement
Correct answer: Specific same-day processing windows (e.g., 10:30 AM ET and 2:45 PM ET)
Same-Day ACH has defined submission windows (such as 10:30 AM ET and 2:45 PM ET) that ODFIs must meet for entries to receive same-day settlement.
Question 68: Which two entities serve as ACH Operators in the United States?
- JPMorgan Chase and Wells Fargo
- NACHA and FinCEN
- FedACH and EPN (operated by The Clearing House) (Correct answer)
- OCC and FDIC
Correct answer: FedACH and EPN (operated by The Clearing House)
The two ACH Operators are FedACH (operated by the Federal Reserve Banks) and EPN (Electronic Payments Network, operated by The Clearing House).
Question 69: Which entity establishes the rules and operating standards governing the ACH network?
- NACHA – The Electronic Payments Association (Correct answer)
- The Federal Reserve Board
- The Federal Deposit Insurance Corporation (FDIC)
- The Office of the Comptroller of the Currency (OCC)
Correct answer: NACHA – The Electronic Payments Association
NACHA – The Electronic Payments Association is the self-regulatory organization that writes and enforces the NACHA Operating Rules for the ACH network.
Question 70: When an RDFI requests proof of authorization for a PPD debit entry on behalf of a disputing consumer, the ODFI must respond within:
- 2 banking days of the request
- Same banking day of the request
- 10 banking days of the request (Correct answer)
- 30 calendar days of the request
Correct answer: 10 banking days of the request
NACHA rules require the ODFI (and thus the Originator) to provide proof of authorization to the RDFI within 10 banking days of a written request.
Question 71: For TEL entries, an Originator may initiate a one-time ACH debit only if:
- The consumer has a prior written agreement on file
- The call was recorded regardless of who initiated it
- Any inbound or outbound call is made with the consumer
- There is an existing relationship with the consumer OR the consumer initiated the call (Correct answer)
Correct answer: There is an existing relationship with the consumer OR the consumer initiated the call
TEL requires either an existing relationship between the Originator and consumer, or the consumer must have initiated the telephone call to the Originator.
Question 72: What is a Notification of Change (NOC) in the ACH Network, and how should it be handled?
- A message sent by the RDFI to the ODFI to correct or update information; the Originator must make changes within 6 banking days or before the next payment cycle. (Correct answer)
- An alert that a transaction failed; the ODFI must investigate and retransmit the entry within 24 hours.
- A warning that funds have been reversed; it must be processed immediately.
- A request for additional payment information; it must be acknowledged by the RDFI within 2 business days.
Correct answer: A message sent by the RDFI to the ODFI to correct or update information; the Originator must make changes within 6 banking days or before the next payment cycle.
A Notification of Change (NOC) is an electronic message sent by the Receiving Depository Financial Institution (RDFI) to the Originating Depository Financial Institution (ODFI) to correct or update incorrect or outdated information for a Receiver's account. Upon receiving an NOC, the Originator is mandated by Nacha Rules to make the necessary changes to their records within six banking days or before the next scheduled entry, whichever is later, to ensure future entries are processed accurately.
Question 73: Which federal regulation provides protections for consumers using electronic funds transfers (EFTs), including ACH transactions?
- Regulation Z
- Regulation D
- Regulation E (Correct answer)
- Regulation CC
Correct answer: Regulation E
Regulation E, also known as the Electronic Fund Transfer Act, is the federal regulation that provides comprehensive protections for consumers using electronic funds transfers (EFTs), including ACH transactions. It establishes rules for disclosures, error resolution, and liability limits for unauthorized transactions. This regulation is crucial for safeguarding consumer rights in the electronic payment system.
Question 74: Which SEC code is used for prearranged payments and deposits between a company and consumer accounts?
- CCD (Corporate Credit or Debit)
- CTX (Corporate Trade Exchange)
- WEB (Internet-Initiated Debit)
- PPD (Prearranged Payment and Deposit) (Correct answer)
Correct answer: PPD (Prearranged Payment and Deposit)
PPD is the Standard Entry Class code for ACH credits and debits to consumer accounts where a written authorization has been established in advance.
Question 75: A contested dishonored return must be sent by the RDFI within:
- 2 banking days of receiving the dishonored return
- 60 calendar days of the original entry settlement
- 1 banking day of receiving the dishonored return (Correct answer)
- 5 business days of receiving the dishonored return
Correct answer: 1 banking day of receiving the dishonored return
If an RDFI contests a dishonored return, it must transmit the contested dishonored return within 1 banking day of receiving the dishonored return.
Question 76: What is the Addenda Type Code used for an IAT Return?
- 19
- 25
- 98
- 99 (Correct answer)
Correct answer: 99
For an International ACH Transaction (IAT) Return, the Addenda Type Code used is 99. This specific code is designated within the ACH file format to identify an IAT return, ensuring proper handling and routing of international payment returns. It helps distinguish IAT returns from other types of ACH returns.
Question 77: ARC entries convert:
- Consumer checks received via U.S. mail or a dropbox to ACH debit entries (Correct answer)
- Business checks to ACH credit entries
- Returned checks to ACH credit entries
- Wire transfer instructions to ACH entries
Correct answer: Consumer checks received via U.S. mail or a dropbox to ACH debit entries
ARC (Accounts Receivable Conversion) is used to convert consumer checks mailed or dropped off as payment into ACH debit entries processed in back-office operations.
Question 78: Under Nacha Operating Rules, how long does an Originating Depository Financial Institution (ODFI) have to transmit a returned ACH debit entry to the Receiving Depository Financial Institution (RDFI)?
- 5 business days
- 60 calendar days
- 2 business days
- 1 business day (Correct answer)
Correct answer: 1 business day
Under Nacha Operating Rules, an Originating Depository Financial Institution (ODFI) has one business day to transmit a returned ACH debit entry to the Receiving Depository Financial Institution (RDFI). This strict timeframe ensures that returned funds are processed promptly and efficiently within the ACH Network. Adhering to this deadline is crucial for maintaining the integrity and speed of ACH transactions.
Question 79: In an ACH Entry Detail Record, the 'Transaction Code' field (2 digits) specifies which of the following?
- The account type (checking/savings) and debit or credit direction (Correct answer)
- The priority processing level of the transaction
- The originating bank's Federal Reserve district
- The SEC code for the transaction
Correct answer: The account type (checking/savings) and debit or credit direction
The Transaction Code identifies both the account type (checking or savings) and the direction (debit or credit), for example '22' for a checking credit and '27' for a checking debit.
Question 80: When will an ODFI receive returns with an R18 code from the ACH Operator?
- When credit have been released to the operator two days prior to their settlement date
- When debits have been released to the operator two days prior to their effective date. (Correct answer)
- When credits have been released to the operator two days prior to their effective date.
- When debits have been released to the operator two days prior to their settlement date.
Correct answer: When debits have been released to the operator two days prior to their effective date.
An ODFI (Originating Depository Financial Institution) will receive returns with an R18 code when debits have been released to the ACH Operator two days prior to their effective date. This code, 'Improper Effective Entry Date,' indicates that the effective date on the debit entry is too far in the future, violating ACH Rules for timely processing. The ACH Operator will return such entries to the ODFI.
Question 81: Which SEC code is used for point-of-purchase check conversion transactions at a merchant location?
- RCK (Re-presented Check)
- ARC (Accounts Receivable Conversion)
- POP (Point-of-Purchase) (Correct answer)
- BOC (Back Office Conversion)
Correct answer: POP (Point-of-Purchase)
POP is used when a consumer's check is converted to an ACH debit entry at the point of purchase with the consumer present.
Question 82: A consumer's written authorization for a recurring ACH debit must include which essential element?
- The Receiver's signature or electronic equivalent authorizing the debit (Correct answer)
- The Originator's bank routing number on the authorization form
- NACHA certification number for the Originator
- The ACH Operator's approval code for the transaction
Correct answer: The Receiver's signature or electronic equivalent authorizing the debit
An authorization for recurring ACH debits must be signed or agreed to by the consumer (Receiver) using a written signature or its electronic equivalent.
Question 83: BSA/AML requirements that apply to ACH transactions include:
- Filing a CTR for every ACH transaction exceeding $10,000
- Reporting all ACH entries to FinCEN on a daily basis
- Monitoring for suspicious activity and filing SARs when warranted (Correct answer)
- Obtaining NACHA approval for all high-value ACH entries
Correct answer: Monitoring for suspicious activity and filing SARs when warranted
Financial institutions must monitor ACH transactions for suspicious activity patterns and file Suspicious Activity Reports (SARs) with FinCEN when warranted under BSA requirements.
Question 84: How many characters are in each record of a standard NACHA-formatted ACH file?
- 94 (Correct answer)
- 120
- 80
- 128
Correct answer: 94
All ACH records — regardless of type — are exactly 94 characters in length, as required by the NACHA Operating Rules file format specification.
Question 85: When must an ODFI suspend an Originator's ACH origination privileges?
- After any single returned entry regardless of return code
- Only when NACHA formally orders the ODFI to do so
- When the ODFI's aggregate return rate exceeds 1%
- When the ODFI determines the Originator has materially breached the origination agreement or NACHA rules (Correct answer)
Correct answer: When the ODFI determines the Originator has materially breached the origination agreement or NACHA rules
An ODFI must suspend an Originator that has materially breached the ACH origination agreement or the NACHA Operating Rules to protect the network and limit the ODFI's liability.
Question 86: After identifying and analyzing loss exposures and evaluating and selecting the appropriate risk management techniques, the next step in the risk management process is to Choose one answer.
- Implement the selected techniques. (Correct answer)
- Revise the risk management program.
- Monitor the results.
- Decide on risk financing techniques.
Correct answer: Implement the selected techniques.
The risk management process follows a logical sequence to effectively address potential losses. After identifying and analyzing loss exposures, and subsequently evaluating and selecting the most appropriate risk management techniques (both control and financing), the next crucial step is to put these chosen strategies into action. This implementation phase involves executing the selected techniques, such as purchasing insurance, installing safety measures, or establishing contingency plans, before their effectiveness can be monitored.
Question 87: Stop payment requests from consumers regarding ACH debits must be honored by the RDFI if received:
- In time to allow a reasonable opportunity to act before the scheduled debit (Correct answer)
- Only if submitted in writing to the RDFI branch
- 30 days in advance of the debit date
- At least 3 banking days before the scheduled debit
Correct answer: In time to allow a reasonable opportunity to act before the scheduled debit
Under Regulation E and NACHA rules, the RDFI must honor a stop payment request if it is received in time for the institution to have a reasonable opportunity to act on it.
Question 88: When an Originator receives a Notification of Change, they must make the required corrections:
- On the same day the NOC is received
- Within 30 calendar days of the NOC
- Within 6 banking days of the NOC settlement date or before initiating the next entry, whichever is later (Correct answer)
- Within 2 banking days of receipt
Correct answer: Within 6 banking days of the NOC settlement date or before initiating the next entry, whichever is later
NACHA rules require Originators to update their records based on NOC data within 6 banking days of the NOC's settlement date or before the next entry to that account.
Question 89: Return code R07 indicates:
- Payment stopped by the Receiver
- Authorization revoked by the Receiver (Correct answer)
- Insufficient funds in the account
- Account has been closed
Correct answer: Authorization revoked by the Receiver
R07 (Authorization Revoked by Consumer) is used when a consumer has revoked a previously granted authorization for recurring debits.
Question 90: Return code R01 indicates:
- No account or unable to locate the account
- Account has been closed
- Insufficient funds in the Receiver's account (Correct answer)
- Payment stopped by the Receiver
Correct answer: Insufficient funds in the Receiver's account
R01 (Insufficient Funds) means the Receiver's account did not have enough available funds to cover the debit entry at the time of posting.
Question 91: What distinguishes a Third-Party Processor from a Third-Party Sender under NACHA rules?
- Third-Party Processors handle only returned entries
- Third-Party Processors are NACHA members; Third-Party Senders are not
- They are interchangeable terms under NACHA rules
- A TPS transmits entries directly to an ODFI; a Third-Party Processor provides processing services but does not transmit entries as a sending point (Correct answer)
Correct answer: A TPS transmits entries directly to an ODFI; a Third-Party Processor provides processing services but does not transmit entries as a sending point
A Third-Party Sender transmits entries to an ODFI and is in the direct chain of transmission, while a Third-Party Processor provides back-office services without being the sending point to the ODFI.
Question 92: WEB entries are defined as:
- Credit entries initiated through online banking
- ACH debit entries to consumer accounts authorized via the internet (Correct answer)
- Wire transfers processed through a web portal
- Business-to-business ACH entries submitted via a web interface
Correct answer: ACH debit entries to consumer accounts authorized via the internet
WEB is the SEC code for one-time or recurring ACH debit entries to consumer accounts where authorization is obtained via the internet.
Question 93: What fills the unused record positions at the end of an ACH file to satisfy the blocking factor requirement?
- Space characters (0x20)
- Null bytes (0x00)
- Records filled entirely with the digit '9' (Correct answer)
- Records filled entirely with the digit '0'
Correct answer: Records filled entirely with the digit '9'
Padding records consisting entirely of the digit '9' are appended to the end of an ACH file so the total record count is a multiple of 10 (the blocking factor).
Question 94: Which party initiates a reversing entry in the ACH network?
- The ACH Operator upon error detection
- The Originator through its ODFI (Correct answer)
- NACHA as the network administrator
- The RDFI on behalf of the Receiver
Correct answer: The Originator through its ODFI
Only the Originator, through its ODFI, may initiate a reversing entry to correct an erroneous entry that was already transmitted.
Question 95: How long must an Originator retain authorization records for ACH entries?
- Until the Receiver's account is permanently closed
- 7 years from the date the authorization was originally signed
- 5 years from the date of the last transaction under the authorization
- 2 years from the termination or revocation of the authorization (Correct answer)
Correct answer: 2 years from the termination or revocation of the authorization
NACHA rules require Originators to retain the original or copy of each authorization for 2 years after the authorization is terminated or revoked.
Question 96: Which one of the following risk control techniques will reduce loss severity and make losses more predictable, without increasing loss frequency? Choose one answer.
- Duplication (Correct answer)
- Separation
- Loss prevention
- Diversification
Correct answer: Duplication
Duplication is a risk control technique that involves creating backup copies of critical assets, data, or operations and storing them in a separate location. This strategy primarily reduces loss severity because if the primary asset is damaged or destroyed, the duplicate can be quickly utilized to restore functionality. It also makes losses more predictable by ensuring continuity, without necessarily influencing the frequency of the initial loss event.
Question 97: The SHR (Shared Network Entry) SEC code is used for:
- Point-of-sale debit transactions processed through a shared electronic network (Correct answer)
- Shared banking services between affiliated institutions
- Multi-bank wire transfers settled via ACH
- International shared-currency transactions
Correct answer: Point-of-sale debit transactions processed through a shared electronic network
SHR is used for point-of-sale debit transactions initiated through a shared electronic network (such as Interlink or STAR) processed via ACH.
Question 98: The MTE SEC code is used for:
- Merchant terminal electronic payments
- Machine transfer entries (ATM transactions) processed through the ACH network (Correct answer)
- Multi-transaction batch entries
- Mobile telephone-initiated entries
Correct answer: Machine transfer entries (ATM transactions) processed through the ACH network
MTE (Machine Transfer Entry) is the SEC code for ATM transactions that are processed through the ACH network.
Question 99: The TEL SEC code applies to:
- International telephone payment instructions
- Business telephone-initiated ACH entries
- ACH credit entries initiated by a company via telephone
- ACH debit entries to consumer accounts authorized via telephone (Correct answer)
Correct answer: ACH debit entries to consumer accounts authorized via telephone
TEL is the SEC code for single-entry or recurring ACH debit entries to consumer accounts where authorization is obtained by telephone.
Question 100: For PPD debit entries, the written authorization obtained by an Originator must be:
- Any signed document from the Receiver, regardless of content
- Authorization provided exclusively through an online portal
- Clear, readily understandable, and contain the payment amount, schedule, and Receiver's account information (Correct answer)
- Verbal authorization recorded and retained on file
Correct answer: Clear, readily understandable, and contain the payment amount, schedule, and Receiver's account information
NACHA rules require that PPD debit authorizations be clear, readily understandable, and include key terms such as the payment amount, frequency, and start date.
Question 101: For ARC entries, the notice posted by the Originator at the point of check collection must be:
- Posted only on the Originator's public website
- Clear and conspicuous, informing consumers that their check will be converted to an ACH debit (Correct answer)
- Sent via email to the consumer prior to the collection date
- Printed directly on the back of every check accepted
Correct answer: Clear and conspicuous, informing consumers that their check will be converted to an ACH debit
For ARC, NACHA requires a clear and conspicuous notice at the collection point (e.g., billing statement or return envelope) that checks may be converted to ACH debits.
Question 102: The overall debit return rate threshold that triggers NACHA review of an Originator is:
- 3% of debit entries originated
- 15% of debit entries originated (Correct answer)
- 0.5% of debit entries originated
- 25% of debit entries originated
Correct answer: 15% of debit entries originated
An overall debit return rate exceeding 15% triggers NACHA review of the Originator's practices, as this indicates systemic problems with the origination.
Question 103: Under NACHA rules, a Third-Party Sender's compliance obligation includes:
- Entering into a written agreement with the ODFI acknowledging its responsibilities under NACHA Operating Rules (Correct answer)
- Annual CPA certification of its ACH transaction volumes
- Obtaining direct NACHA membership as a condition of operation
- Registering directly with the Federal Reserve before transmitting entries
Correct answer: Entering into a written agreement with the ODFI acknowledging its responsibilities under NACHA Operating Rules
NACHA requires each Third-Party Sender to have a written agreement with its sponsoring ODFI that explicitly acknowledges the TPS's obligations to comply with NACHA Operating Rules.
Question 104: Under NACHA rules, an ODFI's annual risk assessment must include:
- Filing a Suspicious Activity Report for each high-risk Originator
- Submitting a formal risk report to both NACHA and the Federal Reserve
- Evaluating the ACH risk of each Originator and Third-Party Sender relationship (Correct answer)
- Conducting individual audits of all consumer Receiver accounts
Correct answer: Evaluating the ACH risk of each Originator and Third-Party Sender relationship
NACHA requires ODFIs to perform annual risk assessments that evaluate the ACH-related risks posed by each Originator and Third-Party Sender relationship.
Question 105: A zero-dollar account verification entry sent before initiating WEB debits is used to:
- Confirm the Receiver's identity with NACHA's verification registry
- Verify that the Receiver's account is open and the account number is valid (Correct answer)
- Calculate the Receiver's available credit limit for debit transactions
- Reserve settlement capacity at the ACH Operator in advance
Correct answer: Verify that the Receiver's account is open and the account number is valid
Zero-dollar verification entries (a form of prenote for WEB entries) confirm that the routing and account numbers are valid and the account is open before initiating live debit transactions.
Question 106: NOC change code C05 indicates:
- Incorrect company name
- Incorrect routing/transit number
- Incorrect transaction code (Correct answer)
- Incorrect DFI account number
Correct answer: Incorrect transaction code
C05 is used in a Notification of Change when the transaction code (indicating account type and credit/debit) in the entry is incorrect.
Question 107: Regulation E primarily protects:
- Consumers from unauthorized electronic fund transfers (Correct answer)
- ACH Operators from network disruptions caused by fraud
- ODFIs from Originator liability for unauthorized entries
- Businesses from ACH fraud and unauthorized debits
Correct answer: Consumers from unauthorized electronic fund transfers
Regulation E (Electronic Fund Transfer Act) establishes the rights of consumers and the responsibilities of financial institutions regarding unauthorized electronic fund transfers.
Question 108: The Gateway Operator role in international ACH is performed by:
- NACHA exclusively as the global network administrator
- The U.S. Treasury Department
- FinCEN as the international compliance gatekeeper
- An ODFI or RDFI that transmits or receives entries across national borders (Correct answer)
Correct answer: An ODFI or RDFI that transmits or receives entries across national borders
A Gateway Operator is an ODFI or RDFI that transmits ACH entries to or receives them from a financial agency outside the United States.
Question 109: A Nested Third-Party Sender is defined as:
- A Federal Reserve branch providing sub-processing services
- A TPS that itself uses another TPS to transmit entries to an ODFI (Correct answer)
- An ODFI that sponsors multiple originators simultaneously
- A direct ACH network member with nested accounts
Correct answer: A TPS that itself uses another TPS to transmit entries to an ODFI
A Nested Third-Party Sender is a TPS that contracts with another TPS (rather than directly with an ODFI) to transmit ACH entries, creating a layered origination structure.
Question 110: How is the 'Hash Total' in an ACH Batch Control Record calculated?
- By summing the 8-digit RDFI routing transit numbers of all entries (Correct answer)
- By summing all dollar amounts in the batch
- By adding the debit and credit totals together
- By counting the total number of entries and addenda records
Correct answer: By summing the 8-digit RDFI routing transit numbers of all entries
The hash total is the sum of all 8-digit routing transit numbers (RTNs) of the RDFIs for entries in the batch, used to detect data integrity errors.
Question 111: When a consumer's check is received via a lockbox for conversion to an ACH debit, which SEC code applies?
- TEL (Telephone-Initiated Entry)
- POP (Point-of-Purchase)
- ARC (Accounts Receivable Conversion) (Correct answer)
- BOC (Back Office Conversion)
Correct answer: ARC (Accounts Receivable Conversion)
ARC is the correct SEC code for checks received via mail or lockbox (not at a physical point of purchase) that are converted to ACH debit entries.
Question 112: NACHA Operating Rules require ODFIs to monitor their Originators primarily for which key compliance metric?
- Daily entry count compared to the Originator's origination limit
- Return rates—specifically the unauthorized debit return rate and the overall debit return rate (Correct answer)
- Average transaction dollar amount relative to industry benchmarks
- Consumer complaint ratio reported to the CFPB
Correct answer: Return rates—specifically the unauthorized debit return rate and the overall debit return rate
ODFIs must monitor Originator return rates, because excessive overall or unauthorized return rates indicate compliance problems that require ODFI intervention.
Question 113: A late return is defined as one that is:
- A return sent by the wrong financial institution
- Any return entry processed on a weekend or holiday
- Returned after 5 PM ET on any banking day
- Transmitted after the applicable return deadline, making the RDFI liable for the amount (Correct answer)
Correct answer: Transmitted after the applicable return deadline, making the RDFI liable for the amount
A late return is one that the RDFI transmits after the deadline established by NACHA rules, exposing the RDFI to liability for any losses that result.
Question 114: The ACH audit requirement under NACHA rules applies to:
- Federal Reserve member banks exclusively
- NACHA member financial institutions only, excluding processors
- ODFIs, RDFIs, Third-Party Senders, and Third-Party Processors participating in the ACH network (Correct answer)
- Only ODFIs and RDFIs that are direct NACHA members
Correct answer: ODFIs, RDFIs, Third-Party Senders, and Third-Party Processors participating in the ACH network
The annual ACH audit requirement applies broadly to all participants in the ACH network, including ODFIs, RDFIs, Third-Party Senders, and Third-Party Processors.
Question 115: Return code R02 means:
- Insufficient funds in the account
- The Receiver's account has been closed (Correct answer)
- Authorization has been revoked
- Invalid account number structure
Correct answer: The Receiver's account has been closed
R02 (Account Closed) indicates that the account number matched an account that has since been closed and can no longer receive entries.
Question 116: Risk is a term that is regularly used and that is generally understood in context. As used in this discussion, which one of the following is one of the two elements within the definition of risk?
- Probability of financial loss
- Uncertainty of outcome (Correct answer)
- Opportunity for profit
- Likelihood of injury or damage to property
Correct answer: Uncertainty of outcome
In the context of risk management, risk is fundamentally defined by two key elements: uncertainty of outcome and the possibility of a negative deviation from what is expected. Uncertainty refers to the unpredictability of whether a particular event will occur and what its consequences might be. This inherent unpredictability is what makes risk a central concern for organizations, necessitating management strategies.
Question 117: An authorization for recurring PPD debits must notify the consumer of:
- The right to stop payment and the procedure to exercise that right (Correct answer)
- The exact dollar amounts for every future debit in the series
- The ACH Operator's processing schedule and cutoff times
- The ODFI's name, routing number, and contact information
Correct answer: The right to stop payment and the procedure to exercise that right
NACHA requires that recurring debit authorizations inform consumers of their right to stop payment and how to exercise that right, protecting consumer interests.
Question 118: Return code R29 indicates:
- Corporate account has been closed
- Invalid company identification number
- Insufficient funds in a corporate account
- Corporate customer advises the entry is not authorized (for CCD, CTX, or other corporate entries) (Correct answer)
Correct answer: Corporate customer advises the entry is not authorized (for CCD, CTX, or other corporate entries)
R29 (Corporate Customer Advises Not Authorized) is the business equivalent of R10, used when a corporate Receiver states a debit entry was not authorized.
Question 119: The ENR SEC code is used for:
- Employer payroll enrollment and setup
- Automated enrollment of consumers in federal government benefit programs (Correct answer)
- Emergency notification routing for system outages
- Electronic network routing of ACH batches
Correct answer: Automated enrollment of consumers in federal government benefit programs
ENR (Automated Enrollment) is used by federal government agencies to enroll or update consumer direct deposit information for government benefit programs.
Question 120: NACHA's enforcement mechanisms for rules violations include:
- Fines, suspension, or termination of ACH network participation (Correct answer)
- Automatic account freezing by the ACH Operator
- Direct Federal Reserve intervention and sanction
- Criminal prosecution through NACHA's in-house legal authority
Correct answer: Fines, suspension, or termination of ACH network participation
NACHA enforces its rules through a risk management framework that includes financial fines, suspension from the ACH network, and termination of participation rights.
Accredited ACH Professional (AAP)
The AAP certification validates expertise in ACH network operations, rules and regulations, risk management, file formatting, and other payment systems. It is administered by Nacha and recognized as the premier credential for ACH payments professionals.
Exam Rules
- You can skip questions and return to them later
- Flag questions for review before submitting
- No feedback shown until you submit the entire exam
- Unanswered questions count as wrong — answer everything
- 10 pretest questions are mixed in and don't affect your score
- Timer auto-submits when time runs out
- Your progress is auto-saved every 30 seconds