Foundations 4 min read
Who are the parties in an ACH transaction?
Originator, ODFI, Operator, RDFI, Receiver, and the Third-Party players — a map of who does what and who is accountable for what.
Understanding roles is the fastest way to understand ACH compliance. Almost every obligation in the Nacha Operating Rules is assigned to a specific role, so identifying your role tells you which rules apply to you — and which liabilities you carry. Get the role right and the rest of the Rules snap into focus; get it wrong and you will either over-comply in the wrong places or, worse, miss obligations entirely.
The core roles
- Originator — initiates entries and is responsible for obtaining valid authorization, using the correct SEC code, and retaining records.
- ODFI (Originating Depository Financial Institution) — warrants entries to the network, sets and monitors exposure limits for its Originators, and bears ultimate liability if an Originator violates the Rules.
- ACH Operator — clears and settles batches between financial institutions; FedACH and EPN are the two Operators.
- RDFI (Receiving Depository Financial Institution) — posts entries to Receiver accounts and handles returns and Notifications of Change within required timeframes.
- Receiver — the consumer or business account holder who authorized the credit or debit.
Third-Party players
Two third-party roles cause the most confusion — and the most audit findings.
A Third-Party Service Provider (TPSP) performs one or more ACH functions on behalf of an Originator or a financial institution — for example, a payroll processor that formats and transmits files. A Third-Party Sender (TPS) is a specific kind of TPSP that has an origination agreement with the ODFI but sits between the ODFI and the actual Originator, so that no direct agreement exists between the ODFI and that Originator. Payment facilitators and many fintech platforms operate as Third-Party Senders.
The distinction is not academic. Third-Party Senders carry their own obligations under the Rules, including conducting an annual audit, registering with Nacha through their ODFI, and performing due diligence and ongoing monitoring of the Originators they send for. A Nested Third-Party Sender — one that originates through another Third-Party Sender rather than directly through the ODFI — adds another layer of oversight obligations. Misclassifying a Third-Party Sender as an ordinary Originator is a serious and common error.
Who is accountable for what
Liability in ACH generally flows toward the institution that introduced the entry to the network. The ODFI warrants every entry it originates, which means that if an Originator sends an unauthorized or improperly formatted entry, the ODFI is ultimately answerable to the network — and will pass that responsibility back to the Originator or Third-Party Sender through its agreement. RDFIs, by contrast, are chiefly responsible for posting accurately and for handling returns and NOCs on time.
Start every question with role
Before asking “does this rule apply to me?”, ask “what role am I playing in this transaction?” An organization can hold more than one role at once — a bank can be both an ODFI and an RDFI, and a fintech can be both an Originator for itself and a Third-Party Sender for its customers.
Frequently asked questions
- What is the difference between an ODFI and an RDFI?
- The ODFI is the Originator’s bank; it introduces and warrants entries to the network. The RDFI is the Receiver’s bank; it posts entries and handles returns and Notifications of Change. A single institution can act as both.
- What is a Third-Party Sender?
- A Third-Party Sender is an intermediary that has an origination agreement with an ODFI but sits between the ODFI and the actual Originator, so the ODFI has no direct agreement with that Originator. Third-Party Senders have their own audit, registration, and Originator-oversight obligations.
- What is a Nested Third-Party Sender?
- A Nested Third-Party Sender originates through another Third-Party Sender rather than directly through the ODFI. This arrangement adds additional due-diligence and monitoring obligations and is a specific focus of Nacha’s Third-Party Sender rules.
- Can one company hold more than one ACH role?
- Yes. For example, a fintech platform may be an Originator for its own payments and a Third-Party Sender for its customers, and a bank is routinely both an ODFI and an RDFI. Each role brings its own set of obligations.
Go to the source
Use Nacha's official resources to confirm current requirements and effective dates.
This resource is published by Clusia for educational purposes and is not legal, accounting, or compliance advice. This site is independent of Nacha. Always confirm requirements against the current Nacha Operating Rules and your own institution's policies.