WorkflowPayments Operations

ACH Returns & NOC Management

ACH returns and NOCs worked by the rule's clock, and every originator caught before it crosses a return-rate level

Every return inside its window, and every originator caught before it crosses a level.

See one case, screen by screen ↓
demo268of 286returns for tomorrow's file ready to approve at once, each at 95 % confidence or more and inside its timeframe
demo0.52 %the sample fintech partner's forecast unauthorized return rate eight days out, found while it was still at 0.46 %
demo70 %of that partner's unauthorized returns traced to one sign-up channel opened on Sep 14
targetSame daythe morning's returns, claims and corrections worked before the 4:00 p.m. file
In short

What is ACH Returns & NOC Management?

ACH Returns & NOC Management is how ACH operations post returns and notifications of change on time and track return rates. Agents put the day's ACH returns, unauthorized-debit claims and NOCs in three trays ordered by their deadlines, each with a proposed action, its rule and its sources, and forecast every originator's return rates. Specialists approve, and managers check what moves money late or restricts an originator.

AI use cases in banking: a buyer's guide to agentic AI for bank and credit union operations →

Updated

The problem

Why ACH returns and NOCs miss their clocks today

ACH returns and corrections run on two clocks every bank on the ACH Network owes. As the receiving bank it must return most entries so they reach the originating bank by the second banking day, and a consumer's unauthorized debit within sixty days, backed by the customer's signed statement. As the originating bank it must pass every notification of change to its originator within two banking days and keep each originator under Nacha's return-rate levels: 0.5 % unauthorized, 3 % administrative, 15 % overall.

The work arrives as the core's exception report, in the order it was printed, so an item due in today's file sits behind one due in sixty days. A specialist types a return code per item, and picks R10 because the claim form says so, even when the customer's own statement says she revoked the authorization. Corrections are passed on but nobody checks they were made. Returns received late are posted without a look. Return rates are a monthly spreadsheet, so an originator over a level is found by the network's inquiry letter. A missed window is the bank's own loss.

typical35.2billionACH payments in 2025, worth $93 trillion, and every one can come back as a return or a correction
typical2banking daysto return most entries, and to tell an originator of a notification of change
typical0.5 %the unauthorized return rate threshold every originator is held to, over 60 days
Where an ACH operations morning's hours goestimated
By hand7.5 hours
With the solution1.6 hours
  • Working the core's exception report, one return code typed per item3 → 0.5 h
  • Chasing and reading signed statements for unauthorized-debit claims1.5 → 0.4 h
  • Passing notifications of change to originators and following them up1 → 0.2 h
  • Checking returns received for late arrivals and duplicates0.5 → 0.1 h
  • Return-rate reports by originator and answering inquiries1 → 0.3 h
  • Pulling evidence for the examiner and the annual rules audit0.5 → 0.1 h

Estimated split of one specialist's working hours on a typical day at the demo bank's volume, by hand and with the solution.

How it works

How the day's work moves

Seven agents propose every return code, correction and dishonor and forecast each originator's rates; specialists approve, the manager checks, and a restriction takes two signatures.

What comes in
What comes in4 sources · Federal Reserve files, core exceptions, statements, originators
Agents at work
Returns agentthe code and the clock
Statement readerwhat the customer signed
Then
Correction agentpost, tell, refuse
Timeliness agentreturns we received
Then
Threshold agentforecast and cause
Then
Notice writermasked, checked
Evidence agenttrail and packs
A person decides
ACH Operations Specialist, then the managerapproves in the window; checks what is late or restricts
What comes out
Returns in the right file
Originators told and controlled
Examiner evidence pack
One case, step by step

One morning of ACH returns, from the 06:30 files to a signed control

Tessaly Community Bank, a community bank with a sponsor-bank fintech program, on Thursday, Oct 22, 2026. Today's file closes at 4:00 p.m. ET. Seven agents have read the overnight files; Renata Okafor, an ACH Operations Specialist, signs in at 9:40.

  1. 0106:40 to 07:02

    The morning's ACH returns, read before anyone signs in

    Seven agents

    The agents read the 06:30 Federal Reserve files, 668 returns and 264 notifications of change, and the core's 286 posting exceptions. The returns agent proposes a code for each: 268 at 95 % confidence or more, 11 NSF items waiting for the 2:00 p.m. overdraft sweep, 3 credits that look fraudulent for the manager. The threshold agent measures 1,114 originators over 60 days. Each step says what it read, where it was unsure and whom it handed the work to.

  2. 029:40

    Three trays, ordered by the rule's clock

    Renata Okafor · ACH Operations Specialist

    Today opens on three trays: 286 returns for tomorrow's file ($412,880.47, 7 due in today's file), 41 unauthorized-debit claims inside the 60-day window ($23,960.18), and 264 notifications of change to post, with originators to be told by Mon, Oct 26. Each tray says how many are ready and how many need a person. One line above names the originator heading toward a level.

    “Plumline Pay: unauthorized returns 0.46 %, heading to 0.52 % by Friday, Oct 30”

  3. 03Tomorrow's file

    Each return arrives with its code, rule and deadline

    Returns agent

    Owen Haverford's $1,860.00 PPD debit from CORLISS AUTO LOAN settled Oct 21 and is due in today's file. The agent proposes R01, insufficient funds, at 99 % confidence: available balance $212.40, the overdraft transfer from savings declined, no stop payment or claim. Every check is cited, and the clock shows the 2:00 p.m. escalation and the 4:00 p.m. file.

  4. 04The claim

    The return code the customer's statement supports

    Statement reader

    Dana Whitcombe disputes two $189.00 WEB debits from VANTORRA CLUBS. The claim form said R10. The statement reader read her written statement of unauthorized debit: she ticked that she revoked the authorization on Aug 3 and attached her cancellation email. It proposes R07 for $378.00, checks that she signed on or after both presentment dates, and that the 60th day, Sun, Nov 1, means a file by Fri, Oct 30.

    “The claim form said R10 — set aside: her signed statement says she revoked the authorization on Aug 3.”

  5. 05One click

    The source passage, beside the proposal

    Renata Okafor · ACH Operations Specialist

    Renata clicks the citation. The signed statement opens on the right, signed electronically in online banking on Oct 21, 2026 at 09:12 ET, with the box she ticked and her signature highlighted. Satisfied, Renata approves; both debits go back in Friday's file.

  6. 06Past the window

    Too late for the network, inside Regulation E: a manager decides

    Renata Okafor and Wendell Price

    Martin Ellery's $1,240.00 debit settled Aug 14, and the network's 60-day window closed Oct 13. He reported on Oct 19, inside Regulation E's 60 days from his Aug 31 statement. The agent cannot return it through the network, so it proposes the loss path: credit him, ask the originating bank to accept a late return or indemnify, and book the loss as pending recovery, reason LATE-01. Renata prepares it; the approval waits for Wendell Price, the ACH Operations Manager.

  7. 07The line

    A return-rate forecast before the Nacha level

    Threshold agent

    Plumline Pay, a bill pay and subscriptions partner, has 848 unauthorized returns on 184,300 debits over 60 days: 0.46 %, up from 0.21 % on Aug 27. Counting an estimated 210 unauthorized returns still to come on debits already sent, the agent forecasts it passes 0.5 % on Tue, Oct 27 and reaches 0.52 % by Oct 30.

  8. 08The cause

    Seventy percent from one sign-up channel

    Threshold agent

    The agent breaks the returns down by channel. The affiliate sign-up offers channel, opened Sep 14, carries 22,100 debits and 70 % of the unauthorized returns, a 2.69 % rate; without it Plumline would be at 0.16 %. Asked whether this is account takeover, it answers that the returns are mostly R10 on the first two debits after sign-up, with no login or device change.

  9. 09Signed at 09:46

    Enhanced review, signed by two people before the level

    Asha Varadarajan and Wendell Price

    The agent drafts the control, THR-02: first debits from the affiliate channel held for account validation and an authorization check, the channel capped at 1,500 new first debits a week, a weekly return report by channel, and a review on Fri, Nov 20. Its expected effect brings the rate to 0.38 % by Nov 20. Asha, the Fintech Partner Risk Manager, co-signs; Wendell approves.

    “Approved at 09:46, before the rate crosses 0.5 %.”

  10. 10Before the file

    The sure ones approved at once, every step on the record

    Renata Okafor · ACH Operations Specialist

    Renata approves the 268 ready returns in one batch; the 18 that need a person stay in the tray, and Tomás Lindqvist re-checks a 2 % sample in the afternoon. Every proposal and decision is on the audit trail with who, when, why and the evidence, ready to export as a pack for the examiner or the annual Nacha rules compliance audit.

Who it’s for

Built for everyone who works an ACH return.

The same morning, seen by the four people it passes through — what their day looked like, and what it looks like now.

RO
Renata OkaforACH Operations Specialist · approves in-window returns and corrections
ACH Operations Specialist
Before
Works the core's exception report top to bottom, typing a code per item, and spends half the morning working out which code a customer's complaint really is.
Now
Opens three trays by deadline with each action proposed, approves the sure ones at once, and spends her morning on the 18 that need judgment.
WP
Wendell PriceACH Operations Manager · checks late returns, R17s, dishonors and Nacha replies
ACH Operations Manager
Before
Signs the late ones and is the one Nacha writes to; the answer to an inquiry is assembled from email and exports.
Now
Gets each late claim, code change and dishonor prepared and cited, and a drafted inquiry reply with every figure sourced and the ten-banking-day clock shown.
AV
Asha VaradarajanFintech Partner Risk Manager · co-signs every restriction on a partner
Fintech Partner Risk Manager
Before
Sees a partner's return rate a month after it went wrong, from a monthly report.
Now
Sees every originator's three rates against the levels each morning, with a forecast, the cause and a control to co-sign.
CB
Corinne BellamyTreasury Management Implementation Manager · talks to business clients about corrections
Treasury Management Implementation Manager
Before
Her business clients hear about a notification of change from their employees, not from the bank.
Now
Sees the clients who sent to the old account after a correction, with the dates, and a notice drafted that asks consent for automatic corrections.
Built on the engine

7 agents. Each with one job, and hard limits.

Seven agents propose every return code, correction and dishonor and forecast each originator's rates; specialists approve, the manager checks, and a restriction takes two signatures.

Returns agent

Proposes the return code for every incoming entry the core cannot post or a customer disputes, names the file it must go in and its deadline, and shows each check with its source.

  • Never sends a return
  • Never proposes a code the evidence does not support; below 95 % confidence it asks the specialist
  • Late returns, R17 and items over $25,000 go to the manager
Statement reader

Reads the written statement of unauthorized debit, the claim note and the attachments; records the box ticked, the date signed and the entries named, and says which return code the statement supports.

  • Never signs or completes a statement for a customer
  • Never returns a 60-day claim without one
  • Quotes the box and the date it relies on
Correction agent

Matches notifications of change to the entries sent, posts them to the partner ledger or the bank-held template, tells the originator within two banking days, proposes a refusal when the corrected data is wrong, and finds originators still using the old data.

  • Never changes a routing number on a bank-held template without a second person
  • Never refuses after 15 days
  • Never edits a template without the client's consent on file
Timeliness agent

Tests every return received on an entry the bank sent for its deadline, duplicates and format, and proposes a dishonored return with its code and its five-banking-day deadline.

  • Never dishonors without the manager
  • Never after 5 banking days
Threshold agent

Measures each originator's unauthorized, administrative and overall return rates over 60 days, adds the returns still to come, forecasts 8 days ahead, finds the cause by channel, descriptor and date, and drafts controls and Nacha inquiry replies.

  • Never restricts or suspends an originator
  • Never sends anything to Nacha
  • Every figure cites its record
Notice writer

Drafts returned-item notices, claim letters, correction notices and partner messages from approved templates, with account numbers masked to the last four.

  • Never sends a free-text notice without a checker
  • Never mentions a referral or a report
  • Masks every account number
Evidence agent

Records every proposal and decision with who, when, why and the evidence, and assembles evidence packs by audience.

  • Never edits the trail
  • Referral material only for the BSA Officer
ACH Operations Manager

Checks late returns, R17 and controls. The agents propose; a named person decides.

Ask in plain words

Ask about any return, claim, correction or originator

Ask in plain words, or tell it what to change. Every answer points at the record it came from, and it says what it cannot do.

Why R07 and not R10 for Dana Whitcombe?

Her signed statement says she revoked the authorization. She ticked “I revoked the authorization on Aug 3, 2026” and attached her cancellation email of that day. R10 would say she never authorized Vantorra Clubs, which her own statement contradicts. Both debits, $189.00 on Sep 2 and Oct 2, came after the revocation. The return goes in a file by Fri, Oct 30.

Which originators could cross a Nacha level this month?

One, if nothing changes: Plumline Pay, 0.46 % unauthorized today, forecast 0.52 % by Fri, Oct 30. Kestrova Credit is over at 0.55 % but falling, with Nacha's inquiry open. Ostrander Fitness Studios is at 0.41 % and steady. Fernway Wallet's administrative rate is 2.62 % against 3 %.

Get the sure returns ready for me to approve

268 of 286 returns in tomorrow's file are at 95 % confidence or more and inside their timeframe. I have selected them; you approve — I cannot send a return. The other 18 need you: 11 NSF holds until the 2:00 p.m. sweep, 4 business claims waiting for a signer, and 3 R17 credits for Wendell Price.

Draft the reply to Nacha about Kestrova Credit

Drafted. It gives the cause — debits re-presented on charged-off loans after customers revoked — the fix of Oct 7, today's rate of 0.55 % and falling, and the plan to be under 0.5 % by Nov 18 and hold it 180 days. It is due Mon, Nov 2. Wendell Price signs; I cannot send it.

Every screen

The working solution, as it ships.

13 screens from the working solution, on its sample data. Pick one to see it large.

Today's ACH returns and NOCs, in three trays by deadlineReturns due in tomorrow's file, unauthorized-debit claims inside the 60-day window, and notifications of change to post, each tray with its deadline, what the agents have ready and what needs a person. One line above names the originator heading past a Nacha return-rate level.
Each ACH return arrives with its code, rule and deadlineThe entry list on the left with due-today items first, the returns agent's proposed return code in the middle with every check cited, and the clock and who decides on the right.
The R07 return code the customer's signed statement supportsAn unauthorized-debit claim within the 60-day window. The claim form said R10; the written statement of unauthorized debit says she revoked the authorization, so the agent proposes R07 and explains why when asked.
Every value opens the record behind itClicking a citation opens the source beside the proposal: the customer's signed statement, with the box she ticked and her signature highlighted.
Past the ACH return time frame, inside Regulation EWhen the network's window has closed but the customer reported within Regulation E's 60 days, the agent proposes the loss path, a specialist prepares it and the ACH Operations Manager approves.
Seven agents prepare the day before anyone signs inThe morning run step by step: what each agent read, what it proposed, where it was unsure, and whom it handed the work to.
ACH return rate monitoring against Nacha's thresholdsUnauthorized, administrative and overall debit return rates for each fintech partner and business client, each drawn against its level and its early warning, closest first.
A forecast before the unauthorized return rate thresholdOne originator's three rates against the levels, and the rolling 60-day unauthorized rate with a forecast that counts the returns still to come, with and without the proposed control.
The cause, found in the dataThe threshold agent breaks the unauthorized returns down by sign-up channel, finds where they come from, and answers follow-up questions.
Enhanced review, signed by two people before the levelThe control the agent proposes, its expected effect, and the two signatures a restriction on a partner needs: the Fintech Partner Risk Manager co-signs and the ACH Operations Manager approves.
The reply to a Nacha return-rate inquiry, drafted from the recordThe inquiry letter beside a drafted reply whose every figure is cited, with the ten-banking-day clock and the manager's signature still to come.
ACH NOCs followed through to the originatorNotifications of change posted and passed on within two banking days, wrong ones refused, and the clients who kept paying the old account found and told, with consent asked for automatic corrections.
An audit trail examiners can exportEvery proposal and decision by people and agents, with who, what, when, why and the evidence, filterable and exported as an evidence pack by audience.
Governance

Built for the examiner and the annual rules audit: cited, signed, on the record.

Separation of duties, in the screenSpecialists approve in-window returns and corrections. A button a role may not press says who may. No one checks their own work: the approver can never be the preparer.
Maker-checker on what moves money lateLate returns, R17 returns of suspected fraudulent credits, code changes, dishonors, routing changes on bank-held templates, free-text notices and Nacha replies need the ACH Operations Manager. Restricting an originator needs the manager and the Fintech Partner Risk Manager.
Every value citedEach proposed action names its rule, its deadline, its confidence and its sources, and any value opens the passage behind it. A value without a source is not shown.
Overrides with a reason codeChanging or rejecting a proposal needs a reason code (RC-01 to RC-06) and text. The agent's original proposal is kept beside the decision, and a second specialist re-checks a 2 % sample of each day's approved returns.
Confidential where the law says soA referral from an R17 return appears only in the BSA Officer's view; no notice, tray or pack for anyone else mentions it. Account numbers are masked to the last four, and customer information is open by role and logged.
An audit trail examiners can exportWho, what, when, why and the evidence, for people and agents, kept five years. Packs export for the FDIC examiner, the state examiner, internal audit, the BSA Officer and the annual Nacha rules compliance audit.
Configuration

Your clocks, your levels, your approvers

Nacha's timeframes and return-rate levels ship as settings; the bank's own cutoff, early warnings and approvals sit beside them. The administrator proposes a change and the ACH Operations Manager approves it before it takes effect.

SettingDefaultChoose from
Bank file cutoff4:00 p.m. ETThe last file each banking day, ahead of the Federal Reserve's 4:45 p.m. window
Escalate items due in today's file2:00 p.m.To the ACH Operations Manager
Return-rate levels0.5 % · 3.0 % · 15.0 %Unauthorized · administrative (R02, R03, R04) · overall debit, rolling 60 days
Early warning0.40 · 2.4 · 12.0 %Unauthorized · administrative · overall
Forecast horizon8 daysIncludes returns still to come on debits already sent
Bulk approval floor95 %Below it, an item needs a person
Any return over$25,000Goes to the manager
Records kept5 yearsNacha asks two years, signed statements one; bank policy
Connections

Works with the systems ACH operations already runs on

ACH processing platformincoming entries, returns and dishonors, written only after approval
Core banking systembalances, account status and postings
Federal Reserve ACH filesreturn and notification-of-change files at 06:30, 10:30, 2:45 and 4:45
Fintech partner ledgers and originator mastercorrections posted by API; Company IDs, channels and agreements
Case management and document imagingunauthorized-debit claims and signed statements
General ledgerloss and recovery postings
What it changes

The difference, in numbers.

Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.

typical
0.5%
the Nacha unauthorized return level, forecast for every originator before it is crossed
Monthly reportfound after
Daily forecast8 days ahead
typical
60days
for an unauthorized-debit return, checked against the customer's signed statement on every claim
Every claim
statement read
target
Sameday
the morning's returns, claims and corrections worked before the 4:00 p.m. file
By handinto the afternoon
With agentsbefore noon

“demo” = seen in the working solution, on its sample returns, claims and corrections · “target” = the design goal, measured in the live solution · “estimated” = our estimate from the demo bank's design volumes · “typical” = published figures (Nacha, 2025 ACH Network volume: 35.2 billion payments worth $93 trillion; the Nacha Operating Rules on return timeframes, notifications of change and return-rate levels; Regulation E, 12 CFR 1005.11; 31 CFR 1020.320(e) on SAR confidentiality). People, banks, businesses, originators and account references named on this page are fictional — characters and sample data in the working solution.

Questions

What ACH operations and partner risk teams ask us.

What is ACH Returns & NOC Management?

ACH Returns & NOC Management is how ACH operations post returns and notifications of change on time and track return rates. Agents put the day's ACH returns, unauthorized-debit claims and NOCs in three trays ordered by their deadlines, each with a proposed action, its rule and its sources, and forecast every originator's return rates. Specialists approve, and managers check what moves money late or restricts an originator.

How long does a bank have to return an ACH entry?

Under the Nacha Operating Rules, most returns must reach the originating bank by opening of business on the second banking day after settlement. A consumer's unauthorized debit (R05, R07, R10, R11) may be returned up to 60 calendar days after settlement, with the customer's signed written statement of unauthorized debit. The solution puts each entry in the tray for its clock and escalates items due in today's file at 2:00 p.m.

How does it pick the right ACH return code?

The returns agent reads the entry, the account's balance and status from the core and any claim, and proposes the code the evidence supports, with each check cited. For a claim, the statement reader reads the signed statement: in the sample case the claim form said R10, but the customer had revoked the authorization, so it proposes R07. Below 95 % confidence it asks the specialist.

What happens to an ACH NOC?

The correction agent matches each notification of change to the entry the bank sent, posts it to the fintech partner's ledger or the bank-held template, and tells the originator within two banking days. It proposes a refusal when the corrected data is wrong, inside 15 days, and finds originators still sending to the old account. A routing-number change on a bank-held template needs a second person.

How does it monitor Nacha return rate thresholds?

Every morning the threshold agent measures each originator's unauthorized, administrative and overall debit return rates over 60 days against 0.5 %, 3 % and 15 %, adds the returns still to come on debits already sent, and forecasts eight days ahead. When a rate passes the early warning it finds the cause by channel, descriptor and date and drafts a control. Restricting an originator takes two signatures.

What about returns we receive late or twice?

The timeliness agent tests every return received on an entry the bank sent for its deadline, duplicates and format. In the sample, a late R01 and a duplicate R03 are proposed as dishonored returns, R68 and R67, inside five banking days, with $508.50 going back to the originators. The manager approves every dishonor.

Do people stay in control?

Yes. The agents read, propose, draft and cite; they never send a return, restrict an originator, send a notice or write to Nacha. The specialist approves in-window work, the ACH Operations Manager checks late returns, R17s, dishonors and Nacha replies, and a restriction needs the manager and the Fintech Partner Risk Manager. Every override carries a reason code.

How does it go live at our bank?

The Agentic Solution Engine builds and deploys it from your requirements, your documents and your rules — your cutoff, early warnings, approvers, reason codes, templates and roles — connected to your ACH processing platform, core and partner ledgers. It goes live once every quality gate has passed.

See it on
your returns file.

We'll run ACH Returns & NOC Management on a sample of your own past returns, claims and notifications of change.