Fraudulent ACH Emails Appearing to Come from NACHA

Since February of 2011, NACHA has been the victim of unrelenting and evolving phishing attacks.  Both consumers and businesses have been receiving e-mails referencing ACH (Automatic Clearing House, a.k.a. electronic) transfers, payments or transactions by NACHA.  The e-mail contains links or attachments (also showing up as a PDF files) containing malicious code that will infect your computer.   

These attacks are occurring more frequently and showing increased complexity. Even though the contents of these e-mails vary, more recent examples include a counterfeit NACHA logo and the citation of NACHA’s physical mailing address and phone number.  Perpetrators may also be exploiting email addresses recently stolen from the Epsilon breach. 

Customers should be informed that NACHA does not process, nor touch ACH transactions that flow in between organizations and financial institutions.  NACHA also does not send communications directly to individuals or organizations about ACH transactions that they originate or receive. 

If you receive an email like this, do NOT access the link or attachments provided within it and do not under any circumstances provide any personal information through this media.  NACHA is attempting to identify the source of the e-mails and disrupt the transmission.  Please help them out by reporting any similar e-mail attempts to abuse@nacha.org.