Accredited ACH Professional (AAP) — Questions and Answers
Question 1: In ACH operations, what does "settlement" refer to?
- The process of reconciling accounts within a financial institution
- The posting of account balances on customer statements
- The process of clearing checks
- The movement of funds between banks to complete an ACH transaction (Correct answer)
Correct answer: The movement of funds between banks to complete an ACH transaction
In ACH operations, 'settlement' refers to the final movement of funds between financial institutions to complete an ACH transaction. It is the process by which the actual money is exchanged between the banks involved, typically occurring through the Federal Reserve or a private clearing house. Settlement confirms that the funds have been successfully transferred and are available in the receiving account.
Question 2: Under Regulation E, a financial institution's error resolution process must be completed within:
- 60 calendar days as the maximum allowed period
- 5 business days regardless of circumstances
- 10 business days (or 45 calendar days if provisional credit is extended to the consumer) (Correct answer)
- 2 business days in all cases
Correct answer: 10 business days (or 45 calendar days if provisional credit is extended to the consumer)
Regulation E requires institutions to investigate and resolve error claims within 10 business days, or up to 45 calendar days if they provisionally credit the disputed amount while investigating.
Question 3: A reversing entry must be transmitted within how many banking days after the original entry's settlement date?
- 5 banking days (Correct answer)
- 2 banking days
- Same banking day
- 60 calendar days
Correct answer: 5 banking days
Under NACHA rules, a reversing entry must be sent within 5 banking days of the original entry's settlement date.
Question 4: Return code R29 indicates:
- Insufficient funds in a corporate account
- Corporate customer advises the entry is not authorized (for CCD, CTX, or other corporate entries) (Correct answer)
- Corporate account has been closed
- Invalid company identification number
Correct answer: Corporate customer advises the entry is not authorized (for CCD, CTX, or other corporate entries)
R29 (Corporate Customer Advises Not Authorized) is the business equivalent of R10, used when a corporate Receiver states a debit entry was not authorized.
Question 5: NOC change code C01 indicates:
- Incorrect routing/transit number
- Incorrect individual name
- Incorrect transaction code
- Incorrect DFI account number (Correct answer)
Correct answer: Incorrect DFI account number
C01 is the change code used in a Notification of Change to indicate that the DFI account number in the entry is incorrect and needs to be updated.
Question 6: After identifying and analyzing loss exposures and evaluating and selecting the appropriate risk management techniques, the next step in the risk management process is to Choose one answer.
- Monitor the results.
- Decide on risk financing techniques.
- Implement the selected techniques. (Correct answer)
- Revise the risk management program.
Correct answer: Implement the selected techniques.
The risk management process follows a logical sequence to effectively address potential losses. After identifying and analyzing loss exposures, and subsequently evaluating and selecting the most appropriate risk management techniques (both control and financing), the next crucial step is to put these chosen strategies into action. This implementation phase involves executing the selected techniques, such as purchasing insurance, installing safety measures, or establishing contingency plans, before their effectiveness can be monitored.
Question 7: Which SEC code is used for prearranged payments and deposits between a company and consumer accounts?
- CCD (Corporate Credit or Debit)
- WEB (Internet-Initiated Debit)
- CTX (Corporate Trade Exchange)
- PPD (Prearranged Payment and Deposit) (Correct answer)
Correct answer: PPD (Prearranged Payment and Deposit)
PPD is the Standard Entry Class code for ACH credits and debits to consumer accounts where a written authorization has been established in advance.
Question 8: CTX entries differ from CCD entries primarily because CTX:
- Requires same-day settlement by rule
- Is limited to credit entries only
- Supports up to 9,999 addenda records for corporate trade exchange data (Correct answer)
- Is used only for consumer deposit accounts
Correct answer: Supports up to 9,999 addenda records for corporate trade exchange data
CTX (Corporate Trade Exchange) supports up to 9,999 addenda records, allowing detailed remittance information to accompany business-to-business payments.
Question 9: What record type code identifies the Company/Batch Control Record in an ACH file?
- 9
- 8 (Correct answer)
- 6
- 7
Correct answer: 8
Record type code '8' identifies the Company/Batch Control Record, which closes each batch and contains batch-level totals and counts.
Question 10: What format does the 'Effective Entry Date' field use in the ACH Batch Header Record?
- MMDDYY
- MM/DD/YYYY
- YYYY-MM-DD
- YYMMDD (Correct answer)
Correct answer: YYMMDD
The Effective Entry Date field uses the 6-character YYMMDD format as specified by NACHA, with the two-digit year appearing first.
Question 11: For a company initiating a one-time ACH debit authorized by a consumer on the company's website, which SEC code is correct?
- TEL
- POP
- WEB (Correct answer)
- PPD
Correct answer: WEB
WEB is the correct SEC code for any ACH debit to a consumer account where authorization was obtained via the internet, whether for a one-time or recurring payment.
Question 12: ARC entries convert:
- Returned checks to ACH credit entries
- Consumer checks received via U.S. mail or a dropbox to ACH debit entries (Correct answer)
- Business checks to ACH credit entries
- Wire transfer instructions to ACH entries
Correct answer: Consumer checks received via U.S. mail or a dropbox to ACH debit entries
ARC (Accounts Receivable Conversion) is used to convert consumer checks mailed or dropped off as payment into ACH debit entries processed in back-office operations.
Question 13: When must an ODFI suspend an Originator's ACH origination privileges?
- After any single returned entry regardless of return code
- When the ODFI determines the Originator has materially breached the origination agreement or NACHA rules (Correct answer)
- When the ODFI's aggregate return rate exceeds 1%
- Only when NACHA formally orders the ODFI to do so
Correct answer: When the ODFI determines the Originator has materially breached the origination agreement or NACHA rules
An ODFI must suspend an Originator that has materially breached the ACH origination agreement or the NACHA Operating Rules to protect the network and limit the ODFI's liability.
Question 14: What is the standard return timeframe for unauthorized ACH debit entries according to the Nacha Operating Rules?
- 5 business days from the date of notification
- 60 calendar days from the settlement date (Correct answer)
- 24 hours from the time the entry was processed
- 2 business days from the receipt of the entry
Correct answer: 60 calendar days from the settlement date
According to the Nacha Operating Rules, consumers are granted a specific timeframe to dispute unauthorized ACH debit entries. For transactions involving consumer accounts, the standard return timeframe is 60 calendar days from the settlement date of the unauthorized debit. This rule provides consumers with adequate time to review their bank statements and report any debits they did not authorize, ensuring consumer protection.
Question 15: Stop payment requests from consumers regarding ACH debits must be honored by the RDFI if received:
- 30 days in advance of the debit date
- In time to allow a reasonable opportunity to act before the scheduled debit (Correct answer)
- At least 3 banking days before the scheduled debit
- Only if submitted in writing to the RDFI branch
Correct answer: In time to allow a reasonable opportunity to act before the scheduled debit
Under Regulation E and NACHA rules, the RDFI must honor a stop payment request if it is received in time for the institution to have a reasonable opportunity to act on it.
Question 16: Under NACHA rules, a Third-Party Sender's compliance obligation includes:
- Registering directly with the Federal Reserve before transmitting entries
- Entering into a written agreement with the ODFI acknowledging its responsibilities under NACHA Operating Rules (Correct answer)
- Annual CPA certification of its ACH transaction volumes
- Obtaining direct NACHA membership as a condition of operation
Correct answer: Entering into a written agreement with the ODFI acknowledging its responsibilities under NACHA Operating Rules
NACHA requires each Third-Party Sender to have a written agreement with its sponsoring ODFI that explicitly acknowledges the TPS's obligations to comply with NACHA Operating Rules.
Question 17: An authorization for recurring PPD debits must notify the consumer of:
- The right to stop payment and the procedure to exercise that right (Correct answer)
- The ACH Operator's processing schedule and cutoff times
- The exact dollar amounts for every future debit in the series
- The ODFI's name, routing number, and contact information
Correct answer: The right to stop payment and the procedure to exercise that right
NACHA requires that recurring debit authorizations inform consumers of their right to stop payment and how to exercise that right, protecting consumer interests.
Question 18: What is the primary purpose of Same Day ACH?
- To process international payments
- To provide faster processing for both ACH credits and debits (Correct answer)
- To eliminate the need for overnight batch processing
- To replace wire transfer services
Correct answer: To provide faster processing for both ACH credits and debits
The primary purpose of Same Day ACH is to provide faster processing for both ACH credits and debits. It allows for the settlement of transactions on the same business day they are originated, significantly reducing the traditional multi-day processing time. This enhancement offers greater speed and flexibility for businesses and consumers, enabling quicker access to funds and more timely payments.
Question 19: What is the return timeframe for an RDFI to return an unauthorized consumer debit entry using return code R10?
- 5 banking days from the settlement date
- 2 banking days from the settlement date
- 90 calendar days from the settlement date
- 60 calendar days from the settlement date of the original entry (Correct answer)
Correct answer: 60 calendar days from the settlement date of the original entry
R10 (Customer Advises Not Authorized) has a 60 calendar-day extended return window, reflecting consumer protection rights for unauthorized debits.
Question 20: Which entity is responsible for receiving ACH entries and posting them to Receiver accounts?
- ACH Operator
- RDFI (Receiving Depository Financial Institution) (Correct answer)
- Originator
- Third-Party Sender
Correct answer: RDFI (Receiving Depository Financial Institution)
The RDFI receives ACH entries from the ACH Operator and posts them to the Receiver's account.
Question 21: What record type code is assigned to an ACH Entry Detail Record (e.g., for PPD or CCD entries)?
- 8
- 5
- 7
- 6 (Correct answer)
Correct answer: 6
Record type code '6' identifies Entry Detail Records, which carry individual transaction data for standard SEC codes like PPD and CCD.
Question 22: For PPD debit entries, the written authorization obtained by an Originator must be:
- Clear, readily understandable, and contain the payment amount, schedule, and Receiver's account information (Correct answer)
- Authorization provided exclusively through an online portal
- Verbal authorization recorded and retained on file
- Any signed document from the Receiver, regardless of content
Correct answer: Clear, readily understandable, and contain the payment amount, schedule, and Receiver's account information
NACHA rules require that PPD debit authorizations be clear, readily understandable, and include key terms such as the payment amount, frequency, and start date.
Question 23: NACHA membership is required for which entities?
- All Third-Party Senders
- All Originators of ACH entries
- Federal Reserve Banks only
- ODFIs and RDFIs (depository financial institutions participating in the ACH network) (Correct answer)
Correct answer: ODFIs and RDFIs (depository financial institutions participating in the ACH network)
NACHA membership is required for depository financial institutions that participate directly in the ACH network as ODFIs or RDFIs.
Question 24: Which field in the ACH File Header Record identifies the entity that created or originated the ACH file?
- Immediate Destination Name
- File Creation Date
- File ID Modifier
- Immediate Origin Name (Correct answer)
Correct answer: Immediate Origin Name
The Immediate Origin Name field (23 characters) in the File Header Record identifies the originating entity — either the ODFI or the company that created the ACH file.
Question 25: What fills the unused record positions at the end of an ACH file to satisfy the blocking factor requirement?
- Records filled entirely with the digit '9' (Correct answer)
- Space characters (0x20)
- Records filled entirely with the digit '0'
- Null bytes (0x00)
Correct answer: Records filled entirely with the digit '9'
Padding records consisting entirely of the digit '9' are appended to the end of an ACH file so the total record count is a multiple of 10 (the blocking factor).
Question 26: For POP entries, what must an Originator provide to the consumer at the point of purchase?
- A copy of the NACHA Operating Rules for consumer reference
- A written authorization for all future debit entries
- The merchant's ODFI name and ACH company ID
- A receipt and clear notice that the check will be converted to an ACH debit entry (Correct answer)
Correct answer: A receipt and clear notice that the check will be converted to an ACH debit entry
For POP entries, the Originator must provide the consumer with a receipt and prominent notice that their check will be converted to an ACH debit and is not their original check.
Question 27: Government agencies that originate ACH entries are classified as:
- ACH Operators
- Non-participating DFIs
- Third-Party Processors
- Federal or state government Originators (Correct answer)
Correct answer: Federal or state government Originators
Federal and state government agencies that initiate ACH entries (such as payroll or benefit payments) are classified as government Originators under NACHA rules.
Question 28: For most standard return reasons, an RDFI must return an ACH entry within how many banking days of the settlement date?
- 5 banking days
- Same business day
- 2 banking days (Correct answer)
- 60 calendar days
Correct answer: 2 banking days
The standard return timeframe under NACHA rules is 2 banking days from the settlement date of the original entry.
Question 29: What is the Addenda Type Code used for an IAT Return?
- 99 (Correct answer)
- 19
- 98
- 25
Correct answer: 99
For an International ACH Transaction (IAT) Return, the Addenda Type Code used is 99. This specific code is designated within the ACH file format to identify an IAT return, ensuring proper handling and routing of international payment returns. It helps distinguish IAT returns from other types of ACH returns.
Question 30: The unauthorized entry return rate threshold (using codes R05, R07, R10, R29, R51) that triggers NACHA scrutiny is:
- 3.0% of debit entries originated
- 0.5% of debit entries originated (Correct answer)
- 1.0% of debit entries originated
- 15.0% of debit entries originated
Correct answer: 0.5% of debit entries originated
The unauthorized return rate threshold is 0.5%—much stricter than the 15% overall threshold—because unauthorized entries indicate serious authorization failures.
Question 31: Regulation E primarily protects:
- Consumers from unauthorized electronic fund transfers (Correct answer)
- Businesses from ACH fraud and unauthorized debits
- ACH Operators from network disruptions caused by fraud
- ODFIs from Originator liability for unauthorized entries
Correct answer: Consumers from unauthorized electronic fund transfers
Regulation E (Electronic Fund Transfer Act) establishes the rights of consumers and the responsibilities of financial institutions regarding unauthorized electronic fund transfers.
Question 32: When an ODFI receives a return entry from an ACH Operator, it must pass the return to the Originator within:
- 2 banking days of receiving the return (Correct answer)
- Same banking day of receipt
- 5 calendar days of receipt
- 60 banking days of receipt
Correct answer: 2 banking days of receiving the return
The ODFI must pass return entries to the Originator within 2 banking days of receiving them from the ACH Operator.
Question 33: The second step in the risk management process is analyzing loss exposures. Which one of the following is true regarding this step? Choose one answer.
- Loss exposures that could interfere with the achievement of the organization's goals are identified in this step.
- Loss exposures are analyzed based on loss frequency, loss severity, total dollar losses, and timing in this step. (Correct answer)
- A major strength of loss exposure analysis is that the process is generally inexpensive.
- A weakness of loss exposure analysis is that it is useful only for those types of losses that an organization has suffered in the past.
Correct answer: Loss exposures are analyzed based on loss frequency, loss severity, total dollar losses, and timing in this step.
The second step in the risk management process, analyzing loss exposures, involves a detailed quantitative and qualitative assessment of identified risks. This analysis specifically focuses on four critical dimensions: loss frequency (how often a loss is expected), loss severity (the potential financial impact of each loss), total dollar losses (the aggregate financial burden), and timing (when losses are likely to occur). This comprehensive evaluation helps in understanding the true impact of potential risks.
Question 34: In a NACHA ACH file, what is the 'blocking factor' and what value does it have?
- The encryption level of the file; value is 128-bit
- The minimum transaction dollar amount; value is $0.01
- The maximum number of batches allowed; value is 999
- The number of records per block; value is 10 (Correct answer)
Correct answer: The number of records per block; value is 10
The blocking factor is 10, meaning ACH files must be padded with '9' records so the total record count is a multiple of 10 (one block = 10 records Ă— 94 characters = 940 bytes).
Question 35: The overall debit return rate threshold that triggers NACHA review of an Originator is:
- 25% of debit entries originated
- 15% of debit entries originated (Correct answer)
- 0.5% of debit entries originated
- 3% of debit entries originated
Correct answer: 15% of debit entries originated
An overall debit return rate exceeding 15% triggers NACHA review of the Originator's practices, as this indicates systemic problems with the origination.
Question 36: RCK entries are used to re-present:
- Corporate wire rejections as ACH credits
- Rejected ACH batches for reprocessing
- International check conversions for clearance
- Returned consumer checks (NSF) as ACH debit entries (Correct answer)
Correct answer: Returned consumer checks (NSF) as ACH debit entries
RCK (Re-presented Check Entry) allows Originators to re-present a check that was returned for insufficient or uncollected funds as an ACH debit entry.
Question 37: How is the 'Hash Total' in an ACH Batch Control Record calculated?
- By counting the total number of entries and addenda records
- By adding the debit and credit totals together
- By summing all dollar amounts in the batch
- By summing the 8-digit RDFI routing transit numbers of all entries (Correct answer)
Correct answer: By summing the 8-digit RDFI routing transit numbers of all entries
The hash total is the sum of all 8-digit routing transit numbers (RTNs) of the RDFIs for entries in the batch, used to detect data integrity errors.
Question 38: OFAC compliance in ACH processing requires financial institutions to:
- File a SAR with FinCEN for every IAT entry received
- Screen transactions against the SDN list and block or reject prohibited transactions (Correct answer)
- Report all international ACH transactions to OFAC before processing
- Obtain OFAC pre-approval for every IAT entry originated
Correct answer: Screen transactions against the SDN list and block or reject prohibited transactions
Financial institutions must screen ACH transaction parties against OFAC's Specially Designated Nationals (SDN) list and block or reject any transactions involving prohibited parties.
Question 39: Which two entities serve as ACH Operators in the United States?
- JPMorgan Chase and Wells Fargo
- OCC and FDIC
- NACHA and FinCEN
- FedACH and EPN (operated by The Clearing House) (Correct answer)
Correct answer: FedACH and EPN (operated by The Clearing House)
The two ACH Operators are FedACH (operated by the Federal Reserve Banks) and EPN (Electronic Payments Network, operated by The Clearing House).
Question 40: In an ACH Trace Number, what do the first 8 digits represent?
- The transaction date in YYYYMMDD format
- The RDFI's routing transit number
- The ODFI's routing transit number (without the check digit) (Correct answer)
- The batch sequence number assigned by the ODFI
Correct answer: The ODFI's routing transit number (without the check digit)
The first 8 digits of the 15-digit ACH Trace Number are the ODFI's 8-digit routing transit number (the 9-digit RTN minus its check digit), uniquely identifying the originating institution.
Question 41: In ACH operations, what is the primary purpose of the prenotification (prenote) process?
- To initiate a Same Day ACH transaction
- To ensure the transaction will not be returned
- To notify the RDFI of an upcoming large transaction
- To verify the accuracy of account information before sending live entries (Correct answer)
Correct answer: To verify the accuracy of account information before sending live entries
The prenotification (prenote) process in ACH operations is a zero-dollar entry sent by the Originating Depository Financial Institution (ODFI) to the Receiving Depository Financial Institution (RDFI). Its primary purpose is to verify the accuracy of the account number and routing number for a future live entry. This crucial step helps prevent returns due to incorrect account information, thereby improving the efficiency and reliability of subsequent ACH transactions.
Question 42: A Notification of Change (NOC) is sent by an RDFI when:
- An entry is returned for insufficient funds
- Account information has changed but the entry was still successfully posted (Correct answer)
- A Receiver formally disputes a transaction with the RDFI
- An Originator requests account verification before sending entries
Correct answer: Account information has changed but the entry was still successfully posted
An NOC is sent when the RDFI posts an entry successfully but detects that certain account information (e.g., account number or routing number) needs to be corrected for future entries.
Question 43: Return code R01 indicates:
- Payment stopped by the Receiver
- No account or unable to locate the account
- Account has been closed
- Insufficient funds in the Receiver's account (Correct answer)
Correct answer: Insufficient funds in the Receiver's account
R01 (Insufficient Funds) means the Receiver's account did not have enough available funds to cover the debit entry at the time of posting.
Question 44: A Nested Third-Party Sender is defined as:
- An ODFI that sponsors multiple originators simultaneously
- A Federal Reserve branch providing sub-processing services
- A TPS that itself uses another TPS to transmit entries to an ODFI (Correct answer)
- A direct ACH network member with nested accounts
Correct answer: A TPS that itself uses another TPS to transmit entries to an ODFI
A Nested Third-Party Sender is a TPS that contracts with another TPS (rather than directly with an ODFI) to transmit ACH entries, creating a layered origination structure.
Question 45: The File Control Record in a NACHA ACH file uses which record type code?
- 7
- 9 (Correct answer)
- 0
- 8
Correct answer: 9
Record type code '9' identifies the File Control Record, which always appears as the last meaningful record in an ACH file and contains file-level totals.
Question 46: A zero-dollar account verification entry sent before initiating WEB debits is used to:
- Confirm the Receiver's identity with NACHA's verification registry
- Calculate the Receiver's available credit limit for debit transactions
- Verify that the Receiver's account is open and the account number is valid (Correct answer)
- Reserve settlement capacity at the ACH Operator in advance
Correct answer: Verify that the Receiver's account is open and the account number is valid
Zero-dollar verification entries (a form of prenote for WEB entries) confirm that the routing and account numbers are valid and the account is open before initiating live debit transactions.
Question 47: Return code R02 means:
- Invalid account number structure
- Insufficient funds in the account
- The Receiver's account has been closed (Correct answer)
- Authorization has been revoked
Correct answer: The Receiver's account has been closed
R02 (Account Closed) indicates that the account number matched an account that has since been closed and can no longer receive entries.
Question 48: According to Reg E, a financial institution must provide notification to a consumer within ___ day(s) of preauthorized transfer.
- 10 calendar days
- 2 business days (Correct answer)
- 1 business day
- 45 calendar days
Correct answer: 2 business days
According to Regulation E, financial institutions must provide notification to a consumer within two business days of a preauthorized transfer. This rule ensures consumers are promptly informed about transactions affecting their accounts. This notification helps consumers monitor their finances and identify any unauthorized activity quickly.
Question 49: Which federal regulation provides protections for consumers using electronic funds transfers (EFTs), including ACH transactions?
- Regulation E (Correct answer)
- Regulation Z
- Regulation D
- Regulation CC
Correct answer: Regulation E
Regulation E, also known as the Electronic Fund Transfer Act, is the federal regulation that provides comprehensive protections for consumers using electronic funds transfers (EFTs), including ACH transactions. It establishes rules for disclosures, error resolution, and liability limits for unauthorized transactions. This regulation is crucial for safeguarding consumer rights in the electronic payment system.
Question 50: For WEB debit entries, what additional security requirement is imposed on Originators?
- Mandatory two-factor authentication for all WEB transactions
- Real-time fraud monitoring certification by a third party
- Monthly reporting of WEB volume to NACHA
- An annual audit to validate the security of transmission and storage of Receiver banking information (Correct answer)
Correct answer: An annual audit to validate the security of transmission and storage of Receiver banking information
NACHA rules require Originators of WEB entries to conduct an annual audit of their data security practices for transmitting and storing Receiver banking information.
Question 51: How frequently must ODFIs complete an ACH audit as required by NACHA?
- Monthly (at least once per month)
- Annually (at least once per calendar year) (Correct answer)
- Every two years at minimum
- Quarterly (every three months)
Correct answer: Annually (at least once per calendar year)
NACHA Operating Rules require ODFIs to complete an ACH audit at least once per calendar year to assess compliance with the rules.
Question 52: The IAT SEC code is required when:
- A payment transaction involves a financial agency outside the United States (Correct answer)
- A foreign currency is used in any ACH transaction
- Any international wire transfer is processed
- A cross-border PPD entry is sent to Canada
Correct answer: A payment transaction involves a financial agency outside the United States
IAT (International ACH Transaction) must be used whenever an ACH payment involves a financial agency outside the territorial jurisdiction of the United States.
Question 53: Which party in the ACH network bears ultimate responsibility for the actions of a Third-Party Sender?
- NACHA
- The Receiver's bank
- The ACH Operator
- The ODFI (Correct answer)
Correct answer: The ODFI
The ODFI is ultimately responsible for the actions of its Third-Party Senders and must ensure their compliance with NACHA Operating Rules.
Question 54: Which of the following best describes an ACH "batch"?
- A collection of return items from various RDFIs
- A single transaction processed by the ACH Operator
- A set of ACH entries scheduled for future processing
- A group of ACH transactions submitted together for processing (Correct answer)
Correct answer: A group of ACH transactions submitted together for processing
In the ACH Network, a "batch" refers to a collection of individual ACH entries (transactions) that are grouped together by an Originator or ODFI and submitted as a single file for processing. This batching mechanism allows for the efficient processing of multiple transactions simultaneously, such as a company's payroll direct deposits or a utility company's bill payments, rather than sending each entry individually.
Question 55: A consumer may revoke ACH debit authorization by:
- Filing a formal complaint with NACHA's consumer protection division
- Notifying the Originator in the manner specified in the authorization agreement (Correct answer)
- Calling their RDFI only—the RDFI then notifies the Originator
- Disputing the charge through their credit card issuer
Correct answer: Notifying the Originator in the manner specified in the authorization agreement
To revoke an ACH debit authorization, the consumer must notify the Originator in the method described in the authorization agreement itself.
Question 56: When an Originator receives a Notification of Change, they must make the required corrections:
- Within 30 calendar days of the NOC
- Within 6 banking days of the NOC settlement date or before initiating the next entry, whichever is later (Correct answer)
- Within 2 banking days of receipt
- On the same day the NOC is received
Correct answer: Within 6 banking days of the NOC settlement date or before initiating the next entry, whichever is later
NACHA rules require Originators to update their records based on NOC data within 6 banking days of the NOC's settlement date or before the next entry to that account.
Question 57: For ARC entries, the notice posted by the Originator at the point of check collection must be:
- Sent via email to the consumer prior to the collection date
- Printed directly on the back of every check accepted
- Clear and conspicuous, informing consumers that their check will be converted to an ACH debit (Correct answer)
- Posted only on the Originator's public website
Correct answer: Clear and conspicuous, informing consumers that their check will be converted to an ACH debit
For ARC, NACHA requires a clear and conspicuous notice at the collection point (e.g., billing statement or return envelope) that checks may be converted to ACH debits.
Question 58: In an ACH Entry Detail Record, the 'Transaction Code' field (2 digits) specifies which of the following?
- The account type (checking/savings) and debit or credit direction (Correct answer)
- The SEC code for the transaction
- The originating bank's Federal Reserve district
- The priority processing level of the transaction
Correct answer: The account type (checking/savings) and debit or credit direction
The Transaction Code identifies both the account type (checking or savings) and the direction (debit or credit), for example '22' for a checking credit and '27' for a checking debit.
Question 59: What is the purpose of the 'File ID Modifier' field in the ACH File Header Record?
- To distinguish multiple files sent by the same originator on the same date (Correct answer)
- To specify whether the file contains debits, credits, or both
- To indicate whether the file is processed by FedACH or EPN
- To encrypt the ACH file for secure transmission
Correct answer: To distinguish multiple files sent by the same originator on the same date
The File ID Modifier (a single alphanumeric character, A–Z or 0–9) distinguishes multiple ACH files created by the same originator on the same business day, preventing duplicate file confusion.
Question 60: The 'Total Debit Entry Dollar Amount' field in an ACH File Control Record includes which entries?
- Only consumer debit entries (PPD, WEB)
- All debit entries across every batch in the file (Correct answer)
- Debit entries minus any returns or reversals in the file
- Only same-day ACH debit entries
Correct answer: All debit entries across every batch in the file
The File Control Record's Total Debit Entry Dollar Amount is the grand total of all debit Entry Detail Records from every batch in the file, used for file-level balancing.
Question 61: Risk management program goals are typically divided into two categories: pre-loss goals and post-loss goals. Which one of the following describes one of these categories of goals? Choose one answer.
- Post-loss goals broadly describe the degree of recovery that an organization will strive to reach following a loss. (Correct answer)
- Pre-loss goals are risk management goals that allow the organization to prepare for future losses.
- Pre-loss goals include profitability, earnings stability, and loss prevention.
- Post-loss goals include immediate restoration of operations, tolerable uncertainty, and loss mitigation.
Correct answer: Post-loss goals broadly describe the degree of recovery that an organization will strive to reach following a loss.
Risk management goals are typically categorized into pre-loss and post-loss objectives. Post-loss goals specifically define the desired state of an organization after a loss event has occurred. These goals aim to guide the recovery process, ensuring the organization can survive, maintain operations, and achieve a certain level of stability and normalcy following an adverse incident.
Question 62: How many characters are in each record of a standard NACHA-formatted ACH file?
- 128
- 94 (Correct answer)
- 120
- 80
Correct answer: 94
All ACH records — regardless of type — are exactly 94 characters in length, as required by the NACHA Operating Rules file format specification.
Question 63: What are the two primary types of transactions processed through the ACH Network?
- Wire transfers and credit card payments
- Check and electronic transfers
- Credit and debit transactions (Correct answer)
- Direct deposits and cash withdrawals
Correct answer: Credit and debit transactions
The two primary types of transactions processed through the ACH Network are credit and debit transactions. Credit transactions involve pushing funds from one account to another, such as direct deposits of payroll. Debit transactions involve pulling funds from an account, like automatic bill payments. These two categories encompass the vast majority of ACH activity.
Question 64: A contested dishonored return must be sent by the RDFI within:
- 1 banking day of receiving the dishonored return (Correct answer)
- 2 banking days of receiving the dishonored return
- 5 business days of receiving the dishonored return
- 60 calendar days of the original entry settlement
Correct answer: 1 banking day of receiving the dishonored return
If an RDFI contests a dishonored return, it must transmit the contested dishonored return within 1 banking day of receiving the dishonored return.
Question 65: Return code R07 indicates:
- Account has been closed
- Authorization revoked by the Receiver (Correct answer)
- Payment stopped by the Receiver
- Insufficient funds in the account
Correct answer: Authorization revoked by the Receiver
R07 (Authorization Revoked by Consumer) is used when a consumer has revoked a previously granted authorization for recurring debits.
Question 66: An electronic authorization for WEB entries is valid if it:
- Meets PCI-DSS Level 1 certification standards
- Is confirmed via SMS text message to the consumer's mobile number
- Includes a digital certificate issued by a NACHA-approved certificate authority
- Is logically associated with the consumer's account information and can be reproduced in paper form (Correct answer)
Correct answer: Is logically associated with the consumer's account information and can be reproduced in paper form
NACHA requires that electronic authorizations for WEB entries be logically associated with the account information and capable of being reproduced in a readable paper format.
Question 67: Return code R08 means:
- Authorization has been revoked by the consumer
- Account has been frozen by the RDFI
- Insufficient funds with a simultaneous stop payment order
- Payment stopped—the Receiver has requested a stop payment on the entry (Correct answer)
Correct answer: Payment stopped—the Receiver has requested a stop payment on the entry
R08 (Payment Stopped) is returned when the Receiver has placed a stop payment order with the RDFI specifically covering the ACH debit entry.
Question 68: The ENR SEC code is used for:
- Electronic network routing of ACH batches
- Employer payroll enrollment and setup
- Emergency notification routing for system outages
- Automated enrollment of consumers in federal government benefit programs (Correct answer)
Correct answer: Automated enrollment of consumers in federal government benefit programs
ENR (Automated Enrollment) is used by federal government agencies to enroll or update consumer direct deposit information for government benefit programs.
Question 69: What distinguishes a Third-Party Processor from a Third-Party Sender under NACHA rules?
- Third-Party Processors handle only returned entries
- A TPS transmits entries directly to an ODFI; a Third-Party Processor provides processing services but does not transmit entries as a sending point (Correct answer)
- They are interchangeable terms under NACHA rules
- Third-Party Processors are NACHA members; Third-Party Senders are not
Correct answer: A TPS transmits entries directly to an ODFI; a Third-Party Processor provides processing services but does not transmit entries as a sending point
A Third-Party Sender transmits entries to an ODFI and is in the direct chain of transmission, while a Third-Party Processor provides back-office services without being the sending point to the ODFI.
Question 70: A late return is defined as one that is:
- Transmitted after the applicable return deadline, making the RDFI liable for the amount (Correct answer)
- Any return entry processed on a weekend or holiday
- A return sent by the wrong financial institution
- Returned after 5 PM ET on any banking day
Correct answer: Transmitted after the applicable return deadline, making the RDFI liable for the amount
A late return is one that the RDFI transmits after the deadline established by NACHA rules, exposing the RDFI to liability for any losses that result.
Question 71: The SHR (Shared Network Entry) SEC code is used for:
- Multi-bank wire transfers settled via ACH
- Point-of-sale debit transactions processed through a shared electronic network (Correct answer)
- Shared banking services between affiliated institutions
- International shared-currency transactions
Correct answer: Point-of-sale debit transactions processed through a shared electronic network
SHR is used for point-of-sale debit transactions initiated through a shared electronic network (such as Interlink or STAR) processed via ACH.
Question 72: For CCD entries (business-to-business ACH), what type of authorization is required?
- A consumer-style written authorization with signature
- A NACHA-approved authorization form specific to CCD
- A written agreement between the trading partners, though the format is flexible (Correct answer)
- Verbal authorization is sufficient for business accounts
Correct answer: A written agreement between the trading partners, though the format is flexible
CCD entries require a written agreement between the Originator and Receiver, but NACHA does not prescribe a specific format for business-to-business authorizations.
Question 73: An Originator's agreement with its ODFI must include:
- A complete list of all Receivers to be debited
- Monthly transaction volume caps approved by NACHA
- Written approval from the ACH Operator for each entry type
- The Originator's agreement to comply with the NACHA Operating Rules (Correct answer)
Correct answer: The Originator's agreement to comply with the NACHA Operating Rules
NACHA rules require that ODFIs include a provision in their Originator agreements binding the Originator to comply with the NACHA Operating Rules.
Question 74: An ODFI's warranty to the ACH network when transmitting entries includes:
- That entries are guaranteed to be fraud-free
- That the RDFI will post entries within one hour of receipt
- That entries comply with NACHA Operating Rules and that the Originator has obtained proper authorization (Correct answer)
- That all entries will settle on the same day
Correct answer: That entries comply with NACHA Operating Rules and that the Originator has obtained proper authorization
By transmitting entries, the ODFI warrants that they comply with NACHA Operating Rules and that proper Receiver authorizations have been obtained.
Question 75: A consumer's written authorization for a recurring ACH debit must include which essential element?
- The Receiver's signature or electronic equivalent authorizing the debit (Correct answer)
- The Originator's bank routing number on the authorization form
- NACHA certification number for the Originator
- The ACH Operator's approval code for the transaction
Correct answer: The Receiver's signature or electronic equivalent authorizing the debit
An authorization for recurring ACH debits must be signed or agreed to by the consumer (Receiver) using a written signature or its electronic equivalent.
Question 76: What is the primary role of an Originating Depository Financial Institution (ODFI) in the ACH network?
- Settles funds directly with consumers
- Audits ACH transactions for NACHA compliance
- Only processes returned entries from RDFIs
- Receives ACH entries from Originators and forwards them to an ACH Operator (Correct answer)
Correct answer: Receives ACH entries from Originators and forwards them to an ACH Operator
The ODFI acts as the entry point into the ACH network, accepting entries from Originators and transmitting them to an ACH Operator for processing.
Question 77: BSA/AML requirements that apply to ACH transactions include:
- Monitoring for suspicious activity and filing SARs when warranted (Correct answer)
- Filing a CTR for every ACH transaction exceeding $10,000
- Reporting all ACH entries to FinCEN on a daily basis
- Obtaining NACHA approval for all high-value ACH entries
Correct answer: Monitoring for suspicious activity and filing SARs when warranted
Financial institutions must monitor ACH transactions for suspicious activity patterns and file Suspicious Activity Reports (SARs) with FinCEN when warranted under BSA requirements.
Question 78: The ACH audit requirement under NACHA rules applies to:
- Federal Reserve member banks exclusively
- NACHA member financial institutions only, excluding processors
- ODFIs, RDFIs, Third-Party Senders, and Third-Party Processors participating in the ACH network (Correct answer)
- Only ODFIs and RDFIs that are direct NACHA members
Correct answer: ODFIs, RDFIs, Third-Party Senders, and Third-Party Processors participating in the ACH network
The annual ACH audit requirement applies broadly to all participants in the ACH network, including ODFIs, RDFIs, Third-Party Senders, and Third-Party Processors.
Question 79: How is a Third-Party Sender (TPS) defined under NACHA Operating Rules?
- A company that transmits ACH entries on behalf of Originators through an ODFI (Correct answer)
- A direct customer of an ODFI with its own origination agreement
- An ACH network operator that settles transactions
- A federal reserve bank that clears ACH entries
Correct answer: A company that transmits ACH entries on behalf of Originators through an ODFI
A Third-Party Sender is an intermediary that transmits ACH entries to an ODFI on behalf of Originators, often providing processing services for multiple clients.
Question 80: A dishonored return is when:
- A Receiver formally rejects a credit entry
- An ACH Operator cancels a batch before settlement
- An ODFI returns a return entry because it does not comply with NACHA rules (Correct answer)
- NACHA rejects a batch for format errors
Correct answer: An ODFI returns a return entry because it does not comply with NACHA rules
A dishonored return is transmitted by an ODFI when it receives a return entry that it believes was improper or untimely under NACHA Operating Rules.
Question 81: For TEL entries, an Originator may initiate a one-time ACH debit only if:
- The call was recorded regardless of who initiated it
- The consumer has a prior written agreement on file
- There is an existing relationship with the consumer OR the consumer initiated the call (Correct answer)
- Any inbound or outbound call is made with the consumer
Correct answer: There is an existing relationship with the consumer OR the consumer initiated the call
TEL requires either an existing relationship between the Originator and consumer, or the consumer must have initiated the telephone call to the Originator.
Question 82: The administrative return rate threshold (R02, R03, R04) that triggers NACHA review of an Originator is:
- 0.5% of ACH debit entries originated
- 1% of ACH debit entries originated
- 15% of ACH debit entries originated
- 3% of ACH debit entries originated (Correct answer)
Correct answer: 3% of ACH debit entries originated
An administrative return rate exceeding 3% triggers NACHA review, indicating the Originator's account database has significant data quality issues.
Question 83: Which record type code identifies an ACH Addenda Record?
- 5
- 7 (Correct answer)
- 6
- 8
Correct answer: 7
Record type code '7' identifies Addenda Records, which provide supplemental payment-related information attached to an Entry Detail Record.
Question 84: Which return code is used when the RDFI cannot identify or locate the account referenced in the entry?
- R04 (Invalid Account Number Structure)
- R03 (No Account/Unable to Locate Account) (Correct answer)
- R01 (Insufficient Funds)
- R02 (Account Closed)
Correct answer: R03 (No Account/Unable to Locate Account)
R03 (No Account/Unable to Locate Account) is used when the account number cannot be matched to any existing account at the RDFI.
Question 85: How long must an Originator retain authorization records for ACH entries?
- 5 years from the date of the last transaction under the authorization
- Until the Receiver's account is permanently closed
- 2 years from the termination or revocation of the authorization (Correct answer)
- 7 years from the date the authorization was originally signed
Correct answer: 2 years from the termination or revocation of the authorization
NACHA rules require Originators to retain the original or copy of each authorization for 2 years after the authorization is terminated or revoked.
Question 86: When an RDFI requests proof of authorization for a PPD debit entry on behalf of a disputing consumer, the ODFI must respond within:
- 2 banking days of the request
- 10 banking days of the request (Correct answer)
- Same banking day of the request
- 30 calendar days of the request
Correct answer: 10 banking days of the request
NACHA rules require the ODFI (and thus the Originator) to provide proof of authorization to the RDFI within 10 banking days of a written request.
Question 87: For which of the following return codes is a Written Statement of Unauthorized Debit not required?
- R-10
- R-07
- R-51
- R-38 (Correct answer)
Correct answer: R-38
For the return code R-38 (Stop Payment on Source Document), a Written Statement of Unauthorized Debit (WSUD) is not required. A WSUD is typically needed for unauthorized transactions where the consumer claims they did not authorize the debit. However, for an R-38, the consumer has already initiated a stop payment, which serves as sufficient notification to the financial institution.
Question 88: Under Nacha Operating Rules, how long does an Originating Depository Financial Institution (ODFI) have to transmit a returned ACH debit entry to the Receiving Depository Financial Institution (RDFI)?
- 1 business day (Correct answer)
- 5 business days
- 2 business days
- 60 calendar days
Correct answer: 1 business day
Under Nacha Operating Rules, an Originating Depository Financial Institution (ODFI) has one business day to transmit a returned ACH debit entry to the Receiving Depository Financial Institution (RDFI). This strict timeframe ensures that returned funds are processed promptly and efficiently within the ACH Network. Adhering to this deadline is crucial for maintaining the integrity and speed of ACH transactions.
Question 89: What does the 'Originator Status Code' field in the ACH Batch Header Record identify?
- The Federal Reserve district of the ODFI
- Whether the ODFI is a bank or a credit union
- Whether the file contains consumer or corporate transactions
- Whether the originator is a government entity or other originator (Correct answer)
Correct answer: Whether the originator is a government entity or other originator
The Originator Status Code is a one-character field that distinguishes government originators ('2') from non-government originators ('1'), affecting certain regulatory and processing rules.
Question 90: Which entity establishes the rules and operating standards governing the ACH network?
- The Office of the Comptroller of the Currency (OCC)
- NACHA – The Electronic Payments Association (Correct answer)
- The Federal Reserve Board
- The Federal Deposit Insurance Corporation (FDIC)
Correct answer: NACHA – The Electronic Payments Association
NACHA – The Electronic Payments Association is the self-regulatory organization that writes and enforces the NACHA Operating Rules for the ACH network.
Question 91: When an ODFI uses a Third-Party Sender, the ODFI must ensure the TPS complies with:
- NACHA Operating Rules (Correct answer)
- Only the state banking laws of its domicile
- The Federal Reserve Act
- IRS regulations exclusively
Correct answer: NACHA Operating Rules
The ODFI retains responsibility for its TPS relationships and must ensure all TPS activity complies with the NACHA Operating Rules.
Question 92: What dollar amount must a 'Prenote' ACH entry always contain?
- $1.00
- Any amount under $1.00
- $0.00 (Correct answer)
- $0.01
Correct answer: $0.00
Prenote entries always carry a dollar amount of zero; they are zero-dollar test transactions used to validate receiver account information before live entries are sent.
Question 93: NACHA's enforcement mechanisms for rules violations include:
- Criminal prosecution through NACHA's in-house legal authority
- Automatic account freezing by the ACH Operator
- Direct Federal Reserve intervention and sanction
- Fines, suspension, or termination of ACH network participation (Correct answer)
Correct answer: Fines, suspension, or termination of ACH network participation
NACHA enforces its rules through a risk management framework that includes financial fines, suspension from the ACH network, and termination of participation rights.
Question 94: Risk is a term that is regularly used and that is generally understood in context. As used in this discussion, which one of the following is one of the two elements within the definition of risk?
- Likelihood of injury or damage to property
- Opportunity for profit
- Probability of financial loss
- Uncertainty of outcome (Correct answer)
Correct answer: Uncertainty of outcome
In the context of risk management, risk is fundamentally defined by two key elements: uncertainty of outcome and the possibility of a negative deviation from what is expected. Uncertainty refers to the unpredictability of whether a particular event will occur and what its consequences might be. This inherent unpredictability is what makes risk a central concern for organizations, necessitating management strategies.
Question 95: The ACH Rules state that items returned for R01 and R09 can only be reinitiated two times for all of the following SEC codes except:
- PPD
- RCK (Correct answer)
- ARC
- POP
Correct answer: RCK
The Nacha Operating Rules state that items returned for R01 (Insufficient Funds) and R09 (Uncollected Funds) can only be reinitiated two times for most SEC codes, but RCK (Re-presented Check Entry) is an exception. RCK entries have specific reinitiation rules that differ from other SEC codes, allowing for a different re-presentment process for checks converted to ACH.
Question 96: Which one of the following risk control techniques will reduce loss severity and make losses more predictable, without increasing loss frequency? Choose one answer.
- Duplication (Correct answer)
- Separation
- Diversification
- Loss prevention
Correct answer: Duplication
Duplication is a risk control technique that involves creating backup copies of critical assets, data, or operations and storing them in a separate location. This strategy primarily reduces loss severity because if the primary asset is damaged or destroyed, the duplicate can be quickly utilized to restore functionality. It also makes losses more predictable by ensuring continuity, without necessarily influencing the frequency of the initial loss event.
Question 97: Under NACHA rules, an ODFI's annual risk assessment must include:
- Conducting individual audits of all consumer Receiver accounts
- Evaluating the ACH risk of each Originator and Third-Party Sender relationship (Correct answer)
- Submitting a formal risk report to both NACHA and the Federal Reserve
- Filing a Suspicious Activity Report for each high-risk Originator
Correct answer: Evaluating the ACH risk of each Originator and Third-Party Sender relationship
NACHA requires ODFIs to perform annual risk assessments that evaluate the ACH-related risks posed by each Originator and Third-Party Sender relationship.
Question 98: What is the primary obligation of an RDFI when it receives an ACH debit entry?
- Hold the entry for 5 business days before posting
- Forward the entry to NACHA for approval
- Obtain the Receiver's approval before posting
- Post the entry to the Receiver's account unless a valid return reason exists (Correct answer)
Correct answer: Post the entry to the Receiver's account unless a valid return reason exists
The RDFI must post ACH entries to the Receiver's account unless it has a valid return reason under the NACHA Operating Rules.
Question 99: Which party initiates a reversing entry in the ACH network?
- NACHA as the network administrator
- The RDFI on behalf of the Receiver
- The Originator through its ODFI (Correct answer)
- The ACH Operator upon error detection
Correct answer: The Originator through its ODFI
Only the Originator, through its ODFI, may initiate a reversing entry to correct an erroneous entry that was already transmitted.
Question 100: BOC (Back Office Conversion) entries are created from:
- Checks collected at the point of sale and converted during back-office processing (Correct answer)
- Online banking check images submitted by consumers
- Wire transfer instructions converted for ACH clearing
- Returned ACH items re-processed as new entries
Correct answer: Checks collected at the point of sale and converted during back-office processing
BOC is used when a source document (check) is collected at the point of sale but conversion to an ACH debit occurs later in back-office processing rather than at the register.
Question 101: International ACH Transactions (IAT) require the Originator to include in mandatory addenda:
- Only the Receiver's IBAN number in place of the routing number
- A SWIFT code substituted for the RDFI routing number
- Details about the foreign financial institution and cross-border payment information (Correct answer)
- Dual-currency authorization signed by both parties
Correct answer: Details about the foreign financial institution and cross-border payment information
IAT entries require multiple mandatory addenda records containing detailed information about the originating and receiving financial institutions and cross-border payment details.
Question 102: What is the maximum length of the 'Company Entry Description' field in an ACH Batch Header Record?
- 8 characters
- 10 characters (Correct answer)
- 15 characters
- 22 characters
Correct answer: 10 characters
The Company Entry Description field is exactly 10 characters and typically appears on the receiver's bank statement to describe the nature of the payment.
Question 103: When will an ODFI receive returns with an R18 code from the ACH Operator?
- When debits have been released to the operator two days prior to their effective date. (Correct answer)
- When debits have been released to the operator two days prior to their settlement date.
- When credits have been released to the operator two days prior to their effective date.
- When credit have been released to the operator two days prior to their settlement date
Correct answer: When debits have been released to the operator two days prior to their effective date.
An ODFI (Originating Depository Financial Institution) will receive returns with an R18 code when debits have been released to the ACH Operator two days prior to their effective date. This code, 'Improper Effective Entry Date,' indicates that the effective date on the debit entry is too far in the future, violating ACH Rules for timely processing. The ACH Operator will return such entries to the ODFI.
Question 104: What is the length of the 'Individual Name' field in an ACH PPD Entry Detail Record?
- 35 characters
- 15 characters
- 30 characters
- 22 characters (Correct answer)
Correct answer: 22 characters
The Individual Name field in an Entry Detail Record is 22 characters long and identifies the name of the receiver (individual or company) for the transaction.
Question 105: What is the main responsibility of the Originating Depository Financial Institution (ODFI) in ACH transactions?
- To ensure compliance with ACH rules and properly transmit entries to the ACH Operator (Correct answer)
- To ensure all transactions are settled by the Federal Reserve
- To determine the settlement date for the transaction
- To verify the authenticity of the Receiver's account
Correct answer: To ensure compliance with ACH rules and properly transmit entries to the ACH Operator
The Originating Depository Financial Institution (ODFI) plays a critical role in ACH transactions, bearing significant responsibilities. Its main responsibility is to ensure that all ACH entries it originates fully comply with the Nacha Operating Rules and any applicable laws. The ODFI must also properly transmit these compliant entries to the ACH Operator for processing, acting as the gateway for Originators into the ACH Network.
Question 106: The maximum NACHA fine for a willful rules violation is:
- $50,000 as a flat fee per audit finding
- $100 per individual entry in violation
- $1,000 per batch transmitted in violation
- Up to $500,000 per incident (Correct answer)
Correct answer: Up to $500,000 per incident
NACHA can impose fines up to $500,000 per incident for willful violations of the Operating Rules, with lesser amounts for less severe violations.
Question 107: NOC change code C05 indicates:
- Incorrect DFI account number
- Incorrect company name
- Incorrect routing/transit number
- Incorrect transaction code (Correct answer)
Correct answer: Incorrect transaction code
C05 is used in a Notification of Change when the transaction code (indicating account type and credit/debit) in the entry is incorrect.
Question 108: Which SEC code covers ACH debit entries to consumer accounts where authorization is obtained at the point of sale via a debit card transaction?
- BOC (Back Office Conversion)
- WEB (Internet-Initiated Debit)
- POP (Point-of-Purchase)
- POS (Point-of-Sale) (Correct answer)
Correct answer: POS (Point-of-Sale)
POS (Point-of-Sale) is the SEC code for consumer debit transactions initiated at the point of sale using a debit card or similar access device.
Question 109: When an Originator changes a Receiver's recurring debit amount from the amount previously disclosed, notice must be provided at least:
- 7 calendar days before the scheduled debit (Correct answer)
- 30 days before the new amount is debited
- On the same day as the debit occurs
- No advance notice is required if within 10% of prior amount
Correct answer: 7 calendar days before the scheduled debit
NACHA rules require Originators to notify consumers at least 7 calendar days in advance when the debit amount will vary from the amount stated in the authorization.
Question 110: What is the record type code for the File Header Record in a NACHA-formatted ACH file?
- 2
- 1 (Correct answer)
- 5
- 9
Correct answer: 1
The File Header Record always uses record type code '1' and appears exactly once at the very beginning of every ACH file.
Question 111: What term describes the company or individual that initiates ACH credit or debit entries with authorization from a Receiver?
- Originator (Correct answer)
- RDFI
- ACH Operator
- Third-Party Processor
Correct answer: Originator
The Originator is the entity that initiates ACH entries, having obtained proper authorization from the Receiver to do so.
Question 112: What does the 'Entry/Addenda Count' field in an ACH Batch Control Record include?
- Both Entry Detail Records and Addenda Records combined (Correct answer)
- Only Entry Detail Records in the batch
- Entry Detail Records minus any prenote entries
- Only Addenda Records in the batch
Correct answer: Both Entry Detail Records and Addenda Records combined
The Entry/Addenda Count field is the sum of all Entry Detail Records and all Addenda Records within the batch, used to verify that no records were dropped or added.
Question 113: Under Regulation E, a consumer must report an unauthorized transaction within what timeframe to receive maximum protection?
- 30 calendar days of the transaction date
- 60 days from the date of the account statement
- Same day the unauthorized transaction is discovered
- 2 business days of learning of the loss or theft of an access device (Correct answer)
Correct answer: 2 business days of learning of the loss or theft of an access device
Reporting within 2 business days of learning of a lost or stolen access device limits consumer liability to $50; waiting longer increases potential liability.
Question 114: When a consumer's check is received via a lockbox for conversion to an ACH debit, which SEC code applies?
- ARC (Accounts Receivable Conversion) (Correct answer)
- TEL (Telephone-Initiated Entry)
- BOC (Back Office Conversion)
- POP (Point-of-Purchase)
Correct answer: ARC (Accounts Receivable Conversion)
ARC is the correct SEC code for checks received via mail or lockbox (not at a physical point of purchase) that are converted to ACH debit entries.
Question 115: Before originating entries for a new Originator, an ODFI is required by NACHA rules to:
- File a report with FinCEN about the new relationship
- Notify the RDFI in advance of the first entry
- Conduct a risk assessment and due diligence review of the Originator (Correct answer)
- Obtain pre-approval from NACHA
Correct answer: Conduct a risk assessment and due diligence review of the Originator
NACHA rules require ODFIs to perform due diligence and a risk assessment of new Originators before transmitting entries on their behalf.
Question 116: What is a Notification of Change (NOC) in the ACH Network, and how should it be handled?
- An alert that a transaction failed; the ODFI must investigate and retransmit the entry within 24 hours.
- A request for additional payment information; it must be acknowledged by the RDFI within 2 business days.
- A warning that funds have been reversed; it must be processed immediately.
- A message sent by the RDFI to the ODFI to correct or update information; the Originator must make changes within 6 banking days or before the next payment cycle. (Correct answer)
Correct answer: A message sent by the RDFI to the ODFI to correct or update information; the Originator must make changes within 6 banking days or before the next payment cycle.
A Notification of Change (NOC) is an electronic message sent by the Receiving Depository Financial Institution (RDFI) to the Originating Depository Financial Institution (ODFI) to correct or update incorrect or outdated information for a Receiver's account. Upon receiving an NOC, the Originator is mandated by Nacha Rules to make the necessary changes to their records within six banking days or before the next scheduled entry, whichever is later, to ensure future entries are processed accurately.
Question 117: NACHA Operating Rules require ODFIs to monitor their Originators primarily for which key compliance metric?
- Return rates—specifically the unauthorized debit return rate and the overall debit return rate (Correct answer)
- Average transaction dollar amount relative to industry benchmarks
- Consumer complaint ratio reported to the CFPB
- Daily entry count compared to the Originator's origination limit
Correct answer: Return rates—specifically the unauthorized debit return rate and the overall debit return rate
ODFIs must monitor Originator return rates, because excessive overall or unauthorized return rates indicate compliance problems that require ODFI intervention.
Question 118: Same-Day ACH rules require ODFIs to submit same-day entries to the ACH Operator by:
- Any time before 5:00 PM local bank time
- Specific same-day processing windows (e.g., 10:30 AM ET and 2:45 PM ET) (Correct answer)
- Before 9:00 AM ET for guaranteed same-day settlement
- Midnight of the processing day regardless of time zone
Correct answer: Specific same-day processing windows (e.g., 10:30 AM ET and 2:45 PM ET)
Same-Day ACH has defined submission windows (such as 10:30 AM ET and 2:45 PM ET) that ODFIs must meet for entries to receive same-day settlement.
Question 119: WEB entries are defined as:
- Wire transfers processed through a web portal
- Business-to-business ACH entries submitted via a web interface
- Credit entries initiated through online banking
- ACH debit entries to consumer accounts authorized via the internet (Correct answer)
Correct answer: ACH debit entries to consumer accounts authorized via the internet
WEB is the SEC code for one-time or recurring ACH debit entries to consumer accounts where authorization is obtained via the internet.
Question 120: Which SEC code is used for point-of-purchase check conversion transactions at a merchant location?
- ARC (Accounts Receivable Conversion)
- RCK (Re-presented Check)
- POP (Point-of-Purchase) (Correct answer)
- BOC (Back Office Conversion)
Correct answer: POP (Point-of-Purchase)
POP is used when a consumer's check is converted to an ACH debit entry at the point of purchase with the consumer present.
Accredited ACH Professional (AAP)
The AAP certification validates expertise in ACH network operations, rules and regulations, risk management, file formatting, and other payment systems. It is administered by Nacha and recognized as the premier credential for ACH payments professionals.
Exam Rules
- You can skip questions and return to them later
- Flag questions for review before submitting
- No feedback shown until you submit the entire exam
- Unanswered questions count as wrong — answer everything
- 10 pretest questions are mixed in and don't affect your score
- Timer auto-submits when time runs out
- Your progress is auto-saved every 30 seconds