ACH Transactions Language
ACH transactions are electronic money transfers made between banks and credit unions across the Automated Clearing House (ACH) network. While convenient and sometimes appropriate, you should NEVER fulfill a request to wire money from an email alone. Below are some examples of language vetted by a cyber law firm that can be helpful to include in your email signature as notice of your organization’s best cyber practices on this topic:
- [CLIENT] will never send an email requesting that wiring, ACH, or other payment instructions be changed or altered. if you receive a similar request from anyone, you should always confirm billing or payment instructions with a known contact in person or, if not possible, over the phone, so that you can confirm the identity of the sender. If you ever receive or have received a request from [client] regarding payment instructions via email only, please reach out to a known contact at [CLIENT] in person or by phone. Always contact our main number and do not utilize the phone number in the email you receive.
- Never wire transfer money based on an email request from our office without calling this office and speaking with someone personally to confirm wire information. When calling, do not use the phone number from the e-mail signature line. Even if an email looks like it has come from this office, or someone involved in your transaction, do not accept emailed wire instructions from anyone without voice verification. You will never be instructed to wire money related to a payment without verbal consent.