Skip to main content
Is Our Fraud Tool Even Running Before We Send?Fraud Detection Analytics
5 min readFor Payment Security Engineers

Is Our Fraud Tool Even Running Before We Send?

These questions surfaced in three different team channels last week. A payments engineer was troubleshooting ACH return spikes, a fraud analyst was reviewing quarterly costs, and an integration lead was justifying a verification vendor. Different contexts, same issue: we're catching problems after money's already moved.

Timing is more critical than most teams realize. Recent PYMNTS Intelligence research shows 57% of firms detect payment fraud or failures only after settlement. This isn't a technology gap; it's an architectural decision costing high-uncertainty firms 42 basis points of revenue, compared to 21 basis points for firms that verify earlier. When measured against revenue, those basis points cut deep.

Here's what teams keep asking and what actually works.

Do We Need Instant Verification or Is Batch Good Enough?

Batch verification tells you what happened. Instant verification lets you decide what happens next.

If you're running nightly batch checks against account validity, you're essentially running a reconciliation process, not a fraud control. The payment's already in flight, and the customer thinks the transaction cleared.

Instant bank account verification occurs at the decision point. Before initiating the ACH transfer or authorizing the card transaction, confirm the account exists and belongs to the claimed party. Among firms that adopted instant or real-time bank account verification, 84% rated it very or extremely effective at reducing fraud risk or improving payment integrity.

The operational difference shows in your return rates. Firms detecting problems before settlement show 81% adoption of instant verification, compared to 47% among firms catching issues after settlement. That's cause and effect.

Where Should Verification Run in the Payment Flow?

Right before you commit to the transaction, not after you receive the request.

Most teams add verification to existing workflows without rethinking the sequence. You receive a payment request, validate the format, check your internal fraud rules, then send it to your processor, and maybe run a secondary account check. By then, you've already made the decision.

Flip it. Verify the account and identity before your fraud rules engine scores the transaction. If the account doesn't exist or the ownership doesn't match, there's nothing to score. You've eliminated the entire decision tree.

This is crucial for faster payment rails. Firms that said greater payment speed increased fraud exposure reported average costs of 41 basis points, about 60% higher than firms without that pressure. Speed compresses your decision window. If verification isn't already in the critical path, you won't have time to add it when the fraud pattern emerges.

How Much Is Poor Integration with AR Workflows Costing Us?

Probably more than your vendor's telling you.

Firms reporting poor integration between verification tools and accounts receivable workflows show average costs of 40 basis points of annual revenue. Firms with strong integration report 30-35 basis points. That 5-10 basis point spread represents the friction cost: manual reviews, delayed settlements, customer service calls, and payment retries.

Poor integration creates three specific problems. First, your team can't act on verification results in real time because the data doesn't flow into the transaction decision system. Second, you can't correlate verification failures with fraud patterns because the tools don't share a data model. Third, you end up running redundant checks because different systems don't trust each other's results.

If your verification tool requires a separate API call that doesn't return data in the same transaction context, you've got an integration problem. If your fraud analysts are exporting CSVs to cross-reference verification results with chargebacks, you've got an integration problem.

What's the Difference Between Instant Verification and Open Banking Ownership Checks?

Instant verification confirms the account exists and is active. Open banking ownership checks confirm who controls it.

Both matter, but they solve different fraud patterns. Instant verification catches typographical errors, closed accounts, and basic account validity issues. Open banking checks, where available and consented, verify that the person initiating the payment actually has authority over the account.

The adoption split is telling. Among firms detecting fraud before settlement, 76% use open banking-based ownership checks versus 35% of firms detecting after settlement. That gap's wider than the instant verification gap because ownership verification directly addresses account takeover and synthetic identity fraud, which are harder to catch with traditional methods.

You don't need to choose one. Layer them. Run instant verification to eliminate invalid accounts, then run ownership checks on transactions that meet your risk threshold. The combination gives you both speed and depth.

Are ACH Returns for Invalid Accounts Normal?

Seven in 10 firms encountered ACH returns tied to invalid or closed accounts or customer input errors in the previous 12 months. So yes, it's common. No, you shouldn't accept it as normal.

Those returns represent verification failures that should've been caught before initiation. Each return costs you the return fee, the customer service time, the delayed revenue recognition, and often the customer relationship. If you're processing high volumes, those costs compound quickly.

The pattern usually points to one of three gaps: you're not verifying account validity before sending the ACH file, you're relying on customer-entered routing and account numbers without confirmation, or your verification tool is checking against stale data.

Fix it by moving account verification into the payment setup flow, not the payment execution flow. When a customer adds a payment method, verify it then. Don't wait until they make a purchase.

How Do We Know If We're High-Uncertainty or Low-Uncertainty?

If 88% of firms reported at least one accounts receivable integrity issue in the previous 12 months, you're probably not in the 12% that didn't.

But uncertainty isn't binary. It's a function of how much visibility you have into payment outcomes before they become final. If you're routinely surprised by fraud chargebacks, ACH returns, or payment failures that you didn't predict, you're operating with high uncertainty.

The practical test: can you predict, with reasonable accuracy, which percentage of this week's payment volume will result in returns or fraud disputes? If your answer's a guess, you've got a detection timing problem.

Where Should We Start If We're Mostly Detecting Fraud After Settlement?

Start with visibility into what's happening before settlement.

Instrument your payment flow to capture where verification checks run, what they return, and whether those results actually influence the transaction decision. You probably have more verification data than you realize; it's just not connected to outcomes.

Then move one verification step earlier in the flow. If you're checking accounts after authorization, check before. If you're checking after settlement, check during authorization. Don't try to redesign the entire stack at once.

The goal isn't perfect fraud prevention. It's reducing the time between when fraud occurs and when you detect it. Every hour you shave off that window reduces your exposure and your costs.

PCI DSS requirements

You Might Also Like