WorkflowConsumer Compliance & Conduct

Overdraft Compliance

Overdraft compliance that tests every fee against the balance the member had when they paid, with a named person signing every finding and refund

Every overdraft and NSF fee tested, not a sample, and refunds sized before the exam.

See one case, screen by screen ↓
demo492,316feescourtesy pay and NSF fees tested over 12 months at the sample credit union: every fee, not a sample of accounts
demo7,664feesfailed a test (1.6%): 5,307 members and a $222,256.00 refund estimate, on the sample data
demo0feesrepeat NSF fees on re-presented items since the setting changed, checked every night
target5daysfrom a finding to an approved refund plan, with two signatures
In short

What is Overdraft Compliance?

Overdraft compliance is the testing a credit union's or bank's compliance team does to show that courtesy pay and NSF fees are charged fairly, as disclosed and with the consent Regulation E requires. Overdraft Compliance replays 12 months of posting for every member, tests every fee for authorize positive, settle negative (APSN), repeat fees on re-presented items and opt-in consent, and sizes the refund. The Compliance Officer approves each finding, and a second person checks every refund plan.

AI use cases in banking: a buyer's guide to agentic AI for bank and credit union operations →

Updated

The problem

Why overdraft compliance testing still runs on a sample

Overdraft compliance starts with how each courtesy pay and NSF fee was decided: by the core's posting engine, often on settings left at the vendor's default, and each fee can become a refund. A member buys groceries on Saturday with $61.40 available; on Monday a car payment posts first, and when the purchase settles that night a $29.00 fee is charged on money the member had. A merchant re-presents a returned ACH debit as RETRY PYMT, and each return charges another NSF fee. A phone opt-in taken before the notice was sent leaves every ATM and one-time debit card fee without a valid Reg E opt-in.

Compliance tests this today with a sample of 25 to 60 accounts a quarter: a report request to Deposit Operations, a card processor extract matched to settlements in a spreadsheet, re-presented items found by eye, and the core's opt-in flag trusted instead of the record behind it. A sample finds the pattern but never the population. The refund is rebuilt by hand, the core setting is changed without a record of why, and the examiner asks for the look-back anyway.

typical$184Mrefunded since 2022 for APSN overdraft fees, and $66M more for repeat NSF fees on re-presented items
typical$3.8billionin overdraft and NSF fees collected in a year by reporting credit unions
typical9%of accounts pay 79% of overdraft and NSF fees
Where a quarterly fee test's business days goestimated
By hand25 days
With the solution4.5 days
  • Requesting posting history for the sample from the core5 → 0.1 d
  • Matching card authorizations to settlements4 → 0.1 d
  • Linking re-presented ACH debits and checks to their first return3 → 0.1 d
  • Checking the opt-in record behind ATM and debit card fees2 → 0.2 d
  • Writing the finding and estimating the population3 → 1 d
  • Sizing the refund, ledger entries and member letters8 → 3 d

Estimated split for one quarterly test of courtesy pay and NSF fees at a credit union the size of the sample one, by hand on a sample of accounts and with the agents on every fee. Our estimate, kept modest.

How it works

How one fee is tested

Eight agents replay every member's balance, test every fee and size the refund; a Compliance Officer approves, a second person checks.

What comes in
Posting in6 systems · core, card processor, ACH, opt-in records
Agents at work
Replay agentavailable + ledger
Then
Settlement testauthorized positive
Re-presentmentsame item again
Then
Consent agentopt-in record
Disclosure agentpromise vs practice
Then
Configuration agentthe setting, what-if
Refund agentpopulation + GL
A person decides
Compliance Officer approveswith a reason code; Deposit Operations checks refunds
What comes out
Finding
Refund plan
Examiner pack
One case, step by step

One overdraft compliance finding, from the replay to the refund

Overdraft compliance at Norrell Federal Credit Union, a fictional $6.8 billion credit union with 520,000 members and about 41,000 courtesy pay and NSF fees a month. Here is Renée Castellanos's Wednesday, October 21, 2026, screen by screen, in the working solution.

  1. 01Wednesday morning

    What needs her today, on one screen

    Renée Castellanos · VP & Compliance Officer

    Overnight the agents replayed 12 months of posting for all 410,284 checking accounts and tested every one of 492,316 courtesy pay and NSF fees; 7,664 failed a test. Five items need a person, each with its clock: finding F-2026-031 with 9 business days left, refund plan RP-2026-07, practice change PC-2026-04, two held items past their SLA and member notice NT-2026-07. The core posting file for October 20 has not arrived, and the home screen says so, with Retry now.

    “Nightly watch of repeat fees on re-presented items: 0, 0 since the change on October 19.”

  2. 021:00 to 4:12 AM

    Eight fee tests on every fee, not a sample

    Replay agent and the test agents

    Run TR-2026-1021 read 61.8 million transactions and 214 fee settings, then ran eight tests on every fee from October 20, 2025 to October 19, 2026, each with the rules behind it. Authorized positive, settled negative: 4,920 fees, 3,912 members, $142,680.00, waiting for approval. Repeat fees on re-presented items, opt-in consent and the daily fee cap are approved findings; three tests passed.

    Settlement test agent: 96 fees held for a person because an authorization file is missing.

  3. 03One member's week

    The balance the member had when she paid

    Replay agent

    Account ending 4417, Keisha Monroe, September 30 to October 6, 2026, drawn as two lines: available balance and ledger balance. Her $38.12 purchase at Brightwater Grocery on Saturday at 5:48 PM was authorized with $61.40 available. On Monday a $250.00 ACH debit to Fairmont Auto Finance posted first, so when the purchase settled that night the account was negative and a $29.00 courtesy pay fee was charged.

    “Authorized positive, settled negative: covered by $61.40 when authorized on Saturday.”

  4. 04Next example

    The fee that stands, and the pattern across members

    Settlement test agent

    The fee on the car payment is labeled “Allowed: the ACH debit itself overdrew the account”, so the refund is targeted, not blanket. A second member, account ending 6052, bought $91.33 at Sunrise Market with $729.50 available; rent check 2210 for $725.00 cleared first. An ACH debit posted first in 61% of these fees, a check in 22% and another card settlement in 17%.

    “The same pattern hit 3,912 members: 4,920 fees, $142,680.00 in 12 months.”

  5. 059:40 AM

    She approves the finding; its author cannot

    Renée Castellanos · VP & Compliance Officer

    Finding F-2026-031, drafted by Marcus Bell, says why it happened: the core decides card and ATM fees at settlement, the vendor default, and section 14 of the member agreement says so. It cites the unfairness test, FDIC FIL-19-2023 and the NCUA's January 2025 letter on overdraft and NSF fee practices, shows confidence 0.97 against a 0.90 threshold, and lists what the agents set aside, such as 1,204 card transactions on February 11–12, 2026 with no authorization file. Renée approves with FA-01, Pattern confirmed by the replay and the rule.

    “Marcus Bell prepared this finding. You may approve it; he may not.”

  6. 06The same minute

    One refund plan, prepared by one person and checked by another

    Refund agent

    The Refund agent adds the 3,912 members to refund plan RP-2026-07, which grows to 5,307 members, 7,664 fees and $222,256.00 across four findings; 436 members in more than one finding are counted once. It splits how members are paid (5,005 credits, 288 official checks, 14 estates) and drafts the general ledger entries. Renée sends the plan; Priya Raman verifies a sample of members against their replays and approves as checker with RA-01.

    The Refund agent never posts a refund: two signatures first.

  7. 079:43 AM

    The setting behind the finding, replayed before it changes

    Priya Raman · Deposit Operations Manager

    The Configuration agent read the fee settings of the core banking system and the card processor and names the one behind the finding: the courtesy pay fee basis for card and ATM items is SETTLEMENT, the vendor default since the 2024 conversion. Practice change PC-2026-04 moves it to AUTHORIZATION from November 2, 2026. The what-if replay shows about 410 fewer fees a month and $11,890 a month less fee income, estimated, before Priya approves with PA-01.

    “Renée Castellanos proposed it. You approve it as checker.”

  8. 08Before anything is sent

    A plain refund notice, in English or Spanish

    Jordan Whitfield · Member Services Director

    The Notice agent drafts a notice for each of the 5,307 members in the language on file: 611 in Spanish, 345 by mail and 18 in large print. Keisha's says the credit union charged a $29.00 fee for a purchase her balance covered when she made it, and refunds it on or before November 6, 2026. Only Jordan approves the wording, and nothing is sent before the refund plan is checked.

    Never in a member notice: a finding number, a rule or the word “violation”.

  9. 09Ready for the exam

    The NCUA examiner pack, assembled from the record

    Helen Strand · Internal Auditor

    For the NCUA exam on January 11, 2027, the agents build nine sections from the record: the fee testing program and its 8 tests, findings F-2026-027 to F-2026-031, 40 replays, the refund plan, 4 practice changes, 188,412 consent records tested, 5 promises compared, the audit trail and the governance of 8 agents. Member names are masked, account numbers show their last four digits, and any suspicious activity report or case is always left out.

    “I need who decided, why, on what evidence, in one pack.”

Who it’s for

Built for everyone who signs off on a fee.

The same finding, seen by the five people who carry it from the replay to the exam: what their quarter looked like, and what it looks like now.

RC
Renée CastellanosVP & Compliance Officer · owns the NCUA exam
VP & Compliance Officer
Before
Signs findings built on a 40-account sample, with the refund population a guess. “Show me the member's balance at the moment they paid. Then I'll sign.”
Now
Opens a finding with one member's week replayed and the population in one sentence, and approves it with a reason code.
MB
Marcus BellCompliance Testing Analyst · drafts findings, approves nothing
Compliance Testing Analyst
Before
Requests posting history for a sample, matches card authorizations by hand, and finds re-presented items by eye. “A sample of forty tells me there's a problem. It never tells me how big.”
Now
Drafts findings from tests the agents ran on every fee, and works the 64 items they held for a person, in bulk where the agents' proposal holds.
PR
Priya RamanDeposit Operations Manager · checker on refunds and core changes
Deposit Operations Manager
Before
Is asked to change a core setting, or to pull a refund population with a core query, with no record of why. “Tell me which setting, what changes, and what it costs before I touch the core.”
Now
Sees the setting behind each finding and a 12-month what-if, and checks every refund plan and practice change as the second signature.
JW
Jordan WhitfieldMember Services Director · approves member notices
Member Services Director
Before
Writes refund letters once a population exists. “If we refund, the letter has to be plain, in their language, and right.”
Now
Approves notices drafted for every member in the language on file, after the refund plan is checked.
HS
Helen StrandInternal Auditor · reports to the Supervisory Committee
Internal Auditor
Before
Rebuilds who decided what, and why, from memos and a shared folder.
Now
Reads everything, changes nothing, and exports the examiner pack with names masked and accounts shown by their last four digits.
Built on the engine

8 agents. Each with one job, and hard limits.

Eight agents replay every member's balance, test every fee and size the refund; a Compliance Officer approves, a second person checks.

Replay agent

Rebuilds every member's available and ledger balance, minute by minute, for 12 months, in the order items posted, from posting history, card authorizations and ACH returns.

  • Never fills a gap in source data: a missing file holds the affected fees for a person
  • Read only on every system
Settlement test agent

Tests each card and ATM courtesy pay fee: was the available balance enough when the member authorized the item? Names the item that posted in between.

  • Proposes findings; never approves one
  • Below 0.90 confidence, holds the fee for a person
Re-presentment agent

Links every re-presented ACH debit (RETRY PYMT, same originator and amount, within 180 days) and every re-deposited check to its first return, and tests repeat NSF and courtesy pay fees.

  • Never links on amount alone
Consent agent

Opens the Regulation E opt-in record behind every ATM and one-time debit card fee: the notice, the opportunity, the consent and the written confirmation, in that order.

  • Never treats the core's opt-in flag as consent
Disclosure agent

Turns each promise in the fee schedule, the member agreement and the Truth in Savings disclosures into a test on the replayed postings, and reads ATM receipts and app balances.

  • Never rewrites a disclosure; drafts a change for approval
Configuration agent

Reads the fee settings of the core banking system and the card processor every night, names the setting behind each finding, and replays 12 months under a proposed change.

  • Read only on the core: a person makes every change
Refund agent

Sizes the refund across approved findings, removes overlaps and fees already refunded, splits credits, checks and estates, and drafts the general ledger entries.

  • Never posts a refund
  • Two signatures first
Notice agent

Drafts a short notice for every member in the refund plan, in English or Spanish as on file: the amount, the dates and what changed.

  • Never names a finding, a rule violation or any confidential flag
  • The Member Services Director approves every notice
Compliance Officer

Approves every finding with a reason. The agents propose; a named person decides.

Ask in plain words

Ask about any fee, member or setting

Ask about any fee, member, finding, setting or rule, or say what to draft. Every answer cites its record and opens the screen it is about.

Why is the fee on account ending 4417 a problem?

Keisha Monroe bought groceries for $38.12 on Saturday, October 3, with $61.40 available. On Monday a $250.00 ACH car payment posted first, so when the purchase settled that night the account was negative and a $29.00 fee was charged. The FDIC calls this authorize positive, settle negative. The fee on the ACH itself stays. The same pattern hit 3,912 members.

Which core setting caused the repeat NSF fees?

NSF_FEE_ON_REPRESENTED_ITEM = CHARGE, the vendor default. Examiners have found exactly that default unfair. The change went live on October 19, and the nightly watch shows 0 repeat fees since.

How big is the refund with a 24-month look-back?

With all four findings and 24 months: an estimated 7,018 members, 9,684 fees and $280,836.00, against 5,307 members and $222,256.00 for 12 months. It needs the card processor's archive for the older authorizations, which has been requested. The plan stays at 12 months until the Supervisory Committee decides.

Draft the Supervisory Committee summary

Drafted for November 18, two pages: what we tested (492,316 fees), what we found (four practices, 7,664 fees, $222,256.00), what we did (one refund plan, three settings changed, a nightly watch) and one decision for the committee: the look-back. Renée Castellanos signs before it goes.

Every screen

The working solution, as it ships.

13 screens from the working solution, on its sample data. Pick one to see it large.

The balance replayOne member's week as two lines, available and ledger balance, each purchase marked when it was authorized and when it settled, and the courtesy pay fee labeled authorized positive, settled negative, beside the members it hit.
What needs you todayThe Compliance Officer's home: what the agents did overnight, four numbers, the five items that need a person with their clocks, and the late posting file.
Eight fee tests on every feeAPSN fees, representment fees, Reg E opt-in, the daily fee cap and four more tests, each with its rules, its population and the run that tested it.
A second member, a different causeA rent check cleared before the purchase settled: the same APSN pattern, and the check's own fee labeled allowed.
The finding to approveWhat was found, why it happened, the rules, the evidence, the confidence, what was set aside and the decision with a reason code.
The refund plan, maker and checkerMembers, fees and the overdraft fee refund by finding, overlaps counted once, how members are paid, the general ledger entries and the checker's approval.
The core setting and its what-ifThe fee settings read from the core and the card processor, the vendor default behind the finding, and 12 months replayed under the proposed change.
One returned payment, charged three timesA re-presented ACH debit linked to its first return by its match keys: the first NSF fee allowed, the second and third refunded.
The opt-in record behind the feeThe Reg E opt-in read in order: a phone consent taken before the notice was mailed, with the call transcript and the fees it affects.
What members were told, and what the core doesFive promises from the fee schedule and the member agreement beside the core's practice: one broken, one to change, three kept.
The member noticeA plain refund notice in English or Spanish, the delivery split, and what never appears in a member notice.
What the agents held for a personFees below the confidence threshold or missing a source file, each with an owner, a due date, an escalation and the agents' proposal, decided one by one or in bulk.
The NCUA examiner packNine sections assembled from the findings, replays, approvals and audit trail, with masking settings, signed by a named person.
Governance

Built for overdraft compliance exams: cited, checked, on the record.

Every value cites its recordEach balance, fee and finding opens its source: the card authorization, the ACH batch, the posting history, the opt-in call transcript, the fee schedule or the member agreement.
The person who prepared it never approves itMarcus drafts findings and Renée approves them; Renée prepares refund plans and practice changes and Priya checks them; Jordan approves every notice. Each decision carries a reason code.
Agents propose; people actNo agent approves a finding, posts a refund, changes a core setting or sends a notice. The Configuration agent is read only on the core, and the Refund agent hands an approved plan to the member remediation program.
What the agents hold, a person decidesBelow the confidence threshold, or with a missing source file, a fee goes to the work queue with an owner, a due date of 3 business days and an escalation to the Compliance Officer, then to the Chief Risk Officer.
Versioned agents, tested before they changeEach agent's version, model, prompt and threshold is recorded on every run. A new version runs the golden set of 214 fee events with known answers and waits for the Compliance Officer; any override of an agent's call needs a reason code and is reported to internal audit.
Private by default, kept five yearsTest evidence and refund records are kept five years after a finding closes. Account numbers show their last four digits everywhere, every view of member data is logged with who, when and why, and a suspicious activity report or case never appears on a member notice or a pack.
Configuration

Your fee schedule and your approvers, as settings

The tests, thresholds, approvers and clocks are settings. A change by the administrator waits for the Compliance Officer, and every version is on the audit trail.

SettingDefaultChoose from
Findings are approved byVP & Compliance OfficerVP & Compliance Officer · Chief Risk Officer
Refund plans and core changes are checked byDeposit Operations ManagerDeposit Operations Manager · COO
Look-back12 months12 months · 24 months
Confidence below which a person decides0.90Any value; per-agent thresholds override it
Daily fee cap4From your fee schedule
Small-overdraft threshold$5.00From your fee schedule
Keep test evidence and refund records5 years after a finding closes5 years · 7 years
Decide a finding10 business days from the draftAny number of business days; escalates at the SLA
Connections

Works with the systems your fees already run through

Core banking systemposting history, fee settings and account status, read every night
Card processorauthorizations, settlements and ATM receipt settings
ACH processing and document imagingreturns, RETRY PYMT entries and images of re-deposited checks
Member agreement librarythe fee schedule, the agreement, opt-in notices and the mailing log
Contact center recordingsphone opt-in calls and their transcripts
General ledger and member remediationfee income accounts, refund entries and approved plans for payout
What it changes

The difference, in numbers.

Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.

target
Everyfee
courtesy pay and NSF fee tested for 12 months, not a sample of 40 accounts
Every fee
12 months, every member
target
0
new APSN or repeat NSF fees after a change, checked every night
target
5days
from a finding to an approved refund plan, with two signatures

“demo” = seen in the working solution, on its sample data · “target” = the design goal, measured in the live solution · “estimated” = our estimate · “typical” = published figures (CFPB Supervisory Highlights, Issue 37: about $184 million refunded for APSN fees and $66 million for re-presentment NSF fees since 2022; NCUA: about $3.8 billion in overdraft and NSF fees at reporting credit unions in a year; Congressional Research Service IN12513: 9% of accounts pay 79% of the fees). Rules named on this page: Regulation E, 12 CFR 1005.17; the Dodd-Frank Act and FTC Act unfairness standard (UDAAP); FDIC FIL-19-2023; NCUA letter to credit unions on overdraft and NSF fee practices, January 2025; Truth in Savings for credit unions, 12 CFR 707; Nacha reinitiation rules. The CFPB's 2022 circular on unanticipated overdraft fees was withdrawn on May 12, 2025 (90 FR 20084), and the FDIC rescinded its re-presentment guidance on April 10, 2026 (FIL-14-2026); neither is relied on. Norrell Federal Credit Union and the people, members, merchants, accounts and records named on this page are fictional: characters and sample data in the working solution.

Questions

What compliance officers ask about overdraft compliance.

What is overdraft compliance?

Overdraft compliance is the testing a credit union's or bank's compliance team does to show that courtesy pay and NSF fees are charged fairly, as disclosed and with the consent Regulation E requires. Overdraft Compliance replays 12 months of posting for every member, tests every fee for authorize positive, settle negative (APSN), repeat fees on re-presented items and opt-in consent, and sizes the refund. The Compliance Officer approves each finding, and a second person checks every refund plan.

What is an authorize positive, settle negative (APSN) fee?

An overdraft fee on a debit card or ATM item that the available balance covered when the member authorized it, charged later because other items posted first and the account was negative when it settled. The FDIC (FIL-19-2023) sees heightened risk under both the available and the ledger balance method, and the NCUA's January 2025 letter to credit unions says examiners pay particular attention to these fees. Under the unfairness test, a disclosure alone does not make the fee avoidable when the member had the money at the moment they paid. The CFPB's 2022 circular on these fees was withdrawn in May 2025. The Settlement test agent judges each fee at the moment the member authorized the item, and labels the fee that stands as allowed.

Are representment fees on a re-presented item allowed?

Nacha rules let a merchant re-present a returned ACH debit up to two times within 180 days, labeled RETRY PYMT, but it is still one item. The NCUA's January 2025 letter names NSF fees on re-presented items as an exam focus, and CFPB examiners have cited them as unfair (Supervisory Highlights, Issue 37). The FDIC withdrew its own re-presentment guidance in April 2026 (FIL-14-2026) and expects disclosures to match practice, so the agent also tests each fee against the fee schedule's "per item" promise. The Re-presentment agent links every re-presented ACH debit and re-deposited check to its first return by its match keys, never on amount alone: the first NSF fee stands, and the later ones are tested for refund.

How does it check Reg E opt-in for ATM and debit card overdraft fees?

The Consent agent opens the record behind every ATM and one-time debit card fee instead of trusting the core's flag, and reads it in the order 12 CFR 1005.17 requires: the notice, a reasonable opportunity, the consent, the written confirmation. On the sample data it read 188,412 records and found 162 phone opt-ins taken before the notice was sent and 52 records lost in a core conversion.

How is an overdraft fee refund sized and approved?

When a finding is approved, the Refund agent adds its fees to the refund plan, removes overlaps and fees already refunded, splits credits, checks and estates, and drafts the general ledger entries. The Compliance Officer prepares the plan, the Deposit Operations Manager verifies a sample of members against their replays and approves it as checker, and only then does it go to the member remediation program.

Can it show that a fix worked?

Yes. After a practice change goes live, the same replay runs every night on the day's fees and tells the analyst only about fees that fail a test. On the sample data the watch has shown 0 repeat fees on re-presented items since the setting changed on October 19.

Do people stay in control of findings and refunds?

Yes. The agents test, cite and draft; they never approve a finding, post a refund, change a core setting or send a notice. The person who prepared an item can never approve it, every decision carries a reason code, and anything below the confidence threshold goes to a person with an owner and a due date.

How long does it take to go live?

The Agentic Solution Engine builds and deploys it from your requirements and documents, such as your fee schedule, member agreement, fee settings and a sample of posting history, and it goes live once every quality gate has passed. We will walk you through it on your own fees first.

See it on
your fees.

We'll run Overdraft Compliance on a sample of your own posting history, fee settings and fee schedule.