Nacha's September 2026 ACH Rules: New IAT Definition and 9 A.M. Funds Availability

If your business pays overseas contractors by direct deposit, collects customer payments through ACH, or simply lives and dies by the timing of payroll credits, two rule changes taking effect on September 18, 2026 deserve your attention. The first guarantees that standard ACH credits land in accounts by 9 a.m. on settlement day — with no fine print about when your bank received the file. The second rewrites the definition of an International ACH Transaction (IAT), which determines whether your cross-border payments carry extra compliance obligations. Get the classification wrong, and your bank's screening systems see a payment they cannot properly evaluate.

The good news: neither change asks small businesses to file new forms or learn a new payment rail. But both reward businesses that understand what changed and adjust their cash planning and vendor-payment workflows accordingly. Here is what the new rules say, in plain language, and what to do about them.

The September 2026 Changes at a Glance​

Nacha, the organization that writes and enforces the operating rules for the ACH network, approved a package of updates that take effect September 18, 2026, with follow-on pieces arriving in 2027 and 2028:

• Funds availability for non–Same Day ACH credits: receiving banks must make every standard ACH credit available by 9:00 a.m. local time on the settlement date, regardless of when they received the file. The old 5 p.m. receipt condition is gone.
• A clarified IAT definition: a rewritten Section 8.55 spells out exactly when a payment counts as the U.S. leg of an international transaction, so originators and their banks classify payments consistently.
• Same-Day IATs allowed: the long-standing prohibition on sending IATs as Same Day entries has been removed.
• Coming later: mandatory IAT contact registration (January 1, 2027), an optional date-of-birth field for IAT entries (March 19, 2027), and a new R90 return code for sanctions-related returns (March 2028).

For context on scale, Nacha reports that more than 121 million IATs moved across the network in 2024 — and cross-border volume keeps growing as more small businesses hire, buy, and sell internationally.

Change 1: Standard ACH Credits Must Be Available by 9 A.M. — Full Stop​

How the old rule worked​

Under the rule in force for years, a receiving bank (RDFI) had to make funds available by 9 a.m. on settlement day only if it received the ACH file from its network operator by 5 p.m. local time on the banking day before settlement. Files arriving after that cutoff fell into a gray zone: banks were permitted to post them by 9 a.m., but nothing required it.

In practice, both ACH operators routinely deliver files to banks multiple times after 5 p.m., so a meaningful slice of next-day credits sat in that gray zone. Most banks posted them by 9 a.m. anyway as a matter of customer service — but "most" is not a rule, and businesses planning around payday or rent day could not count on it.

What the new rule says​

Subsection 3.3.1.1 now reads, in essence: for any credit that is not a Same Day entry, the receiving bank must make the amount available for withdrawal no later than 9:00 a.m. (its local time) on the settlement date. The 5 p.m. receipt condition is deleted. If your bank gets the file in a 6 a.m. distribution on settlement morning, those credits are still due in your account by 9 a.m.

There is one narrow carve-out: institutions that physically cannot comply — Nacha's example is banks in Guam, where files may not even be available before 9 a.m. local time on settlement day — are excepted. For everyone operating in the continental U.S., the 9 a.m. commitment is now unconditional.

What it means for your cash planning​

Non–Same Day ACH credits are the workhorses of small-business cash flow: payroll direct deposits, vendor and invoice payments, customer refunds, government benefits, and platform cashouts. The practical effects:

• Payday is more predictable. If you run payroll with a next-day settlement date, your team can rely on 9 a.m. availability instead of hoping the file beat the old cutoff.
• Tight cash windows get safer. Businesses that schedule outgoing wires or debits against expected incoming credits face less timing risk on settlement mornings.
• Forecasts can assume morning availability. If your cash-flow model discounts next-day ACH credits by a day "just in case," you can tighten that assumption — but verify with your bank first, since the obligation technically falls on the receiving bank, and your bank's funds-availability disclosures govern your account.

One caution: the rule accelerates availability, not settlement. It does not make standard ACH same-day, and it does not change return windows — an ACH credit can still be returned after it posts. Do not treat a 9 a.m. credit as irreversible until return deadlines pass.

Change 2: The IAT Definition, Finally in Plain Language​

Why the definition matters to you​

An International ACH Transaction is the U.S. ACH leg of a payment that crosses a border. IATs travel with seven mandatory addenda records carrying sender and receiver details, and they trigger OFAC and sanctions-screening obligations for the banks involved. Misclassify an international payment as a domestic PPD or CCD entry and the screening data never travels with it — a compliance failure your bank will trace back to you as the originator. Misclassify a domestic payment as an IAT and you add cost, delay, and screening friction for no reason.

The problem was that the old definition was hard to apply. Industry participants told Nacha they struggled to determine which payments qualified, so classification was inconsistent across originators and banks.

The new Section 8.55 wording​

Effective September 18, 2026, an IAT is defined as "an Entry that is the U.S. ACH network component of an international payment transaction" — where an international payment transaction is a transfer of funds or monetary value that either:

1. Originates with, transits through, or is delivered to an account at an office of a financial agency located outside the United States, or
2. Is otherwise received from a sender or delivered to a receiver via a facility of a financial agency located outside the United States.

"Financial agency" is broadly defined: any entity authorized by law to hold financial asset accounts or to issue payment instruments and transfer funds for third parties — which reaches beyond banks to money transmitters and similar providers.

Nacha stresses that this is a clarification, not a conceptual change: the revision rewords the test so originators can apply it, rather than moving the boundary of what counts as international. Still, Nacha expects the clearer wording to push more cross-border payments into proper IAT formatting — and explicitly positions IATs as a safe, fast, inexpensive cross-border method more organizations should use.

A practical test for your payments​

Ask two questions about each recurring ACH payment your business originates or receives:

1. Does the money touch an account at an office outside the U.S. at any point? Paying a developer in Portugal from your U.S. operating account, collecting subscription revenue from a customer whose bank account is in Canada, or funding a foreign subsidiary's payroll — if any leg sits outside the U.S., the U.S. ACH component is an IAT.
2. Does a foreign facility intermediate the payment even if the accounts look domestic? If a money transmitter or payment platform routes your transfer through infrastructure abroad, prong two can pull it into IAT territory. This is the prong most likely to surprise businesses — ask your provider where the funds actually travel.

If either answer is yes, talk to your bank about originating the payment as an IAT rather than a domestic entry class. Your bank (as ODFI) shares responsibility for proper formatting, and its ACH origination agreement likely already requires you to identify international payments.

Same-Day IATs are now possible​

Buried in the package is a meaningful operational unlock: the sentence "An IAT Entry cannot be a Same Day Entry" has been removed. Cross-border ACH payments can now ride the Same Day windows, which matters when you are fixing a missed payroll for overseas staff or rushing payment to a foreign supplier. Expect your bank to roll out Same-Day IAT support on its own timeline — eligibility in the rules does not mean availability at every bank on day one.

What Arrives After September​

Three follow-on changes are already on the calendar, and the 2028 item deserves attention now because it requires systems work:

• January 1, 2027 — IAT contacts in the ACH Contact Registry. Every financial institution must register a monitored phone number and email for IAT inquiries, answered during business hours. Banks can enter the information today; the compliance benefit for businesses is a faster resolution path when a cross-border payment gets stuck in screening.
• March 19, 2027 — Optional date-of-birth field for IAT entries. An additional data element originators may include to improve sanctions-screening accuracy and reduce false-positive holds on common names.
• March 2028 — New R90 return code for sanctions compliance. Today, return code R16 bundles two unrelated reasons: "account frozen" and OFAC/sanctions action. R90 splits sanctions returns into their own code, and — critically — its two-banking-day return clock starts when the receiving bank determines a sanctions obligation is triggered, not on settlement date. That gives banks investigation time but means originators may see sanctions returns arrive later than ordinary returns. Because new return codes require programming across banks, processors, and software vendors, Nacha gave this change the longest lead time in the package.

What Your Business Should Do Now​

You do not need to become an ACH rules expert. You do need a short checklist and one conversation with your bank:

1. Inventory your cross-border ACH flows. List every recurring payment that touches an account or provider outside the U.S.: overseas contractors, foreign suppliers, international payroll, cross-border customer collections. Note how each is currently formatted (IAT versus domestic entry class).
2. Ask your bank to review the classifications. Bring the inventory to your treasury or business banking contact and ask whether each payment meets the clarified IAT definition. If your bank offers an originator compliance review, this is the year to take it.
3. Confirm your OFAC screening expectations. IAT origination typically obligates you to screen payees against sanctions lists and to respond to bank inquiries. Make sure someone on your team owns that workflow before volume grows.
4. Tighten cash forecasts — then verify. Update your cash-flow model to assume 9 a.m. availability for standard ACH credits, and confirm the assumption against your bank's funds-availability policy. Payroll providers and AP automation vendors may also update their timing guidance.
5. Ask about Same-Day IAT availability. If you ever need to rush a cross-border payment, find out now whether your bank supports Same-Day IAT origination and what cutoff times and fees apply.
6. Track the 2027–2028 items with your vendors. If you run payments through accounting or payroll software, ask the vendor how it will support the optional date-of-birth field and the R90 return code. Return-code changes have broken reconciliations before when software did not recognize the new code.

Common Mistakes to Avoid​

• Assuming "my bank handles compliance." Your bank screens what it receives, but as the originator you choose the entry class and supply the data. An international payment sent as a domestic CCD because "the vendor gave me a U.S. routing number" is still your misclassification if the funds transit abroad — correspondent and intermediary routing can internationalize a payment that looks domestic.
• Confusing availability with finality. The 9 a.m. rule puts money in the account sooner; it does not shorten return windows. Keep your buffer against ACH returns, especially on large first-time credits.
• Ignoring the receivables side. The IAT definition applies to payments you receive as well. If foreign customers pay you through ACH, confirm with your bank that inbound entries are coded correctly so holds and screening delays do not surprise you.
• Waiting until 2028 to think about R90. If your reconciliation process keys on return codes, a new code appearing in 2028 without a mapping in your system means unhandled exceptions. Put it on your vendor-review list now.

Keep Your Cash Timing Accurate to the Day​

Rules that move money earlier are only useful if your books reflect when funds actually arrive. As 9 a.m. availability becomes unconditional, reconcile your ACH batches against settlement-date availability rather than conservative next-day assumptions, track cross-border transfer fees separately from the underlying expense so your per-vendor costs stay honest, and keep your short-term cash forecast honest about return windows. Beancount.io provides plain-text accounting that gives you complete transparency and control over your financial data — no black boxes, no vendor lock-in. Get started for free and see why developers and finance professionals are switching to plain-text accounting.