Positive pay for small business

If you write business checks, your account number and routing number are printed on every one of them. A check you mail to a vendor passes through several hands before it clears. That is the opening fraudsters use, and small businesses are squarely in the crosshairs because they tend to reconcile accounts less often and rarely have a treasury team watching for altered or counterfeit items.

Positive pay is the single most effective bank control against this. This page explains why small operators are targeted, what the service actually costs, and how to produce the daily file your bank needs without buying desktop software.

Why small businesses get hit

Checks remain the payment method most often subjected to fraud. In the Association for Financial Professionals' 2025 Payments Fraud and Control Survey, 63% of organizations reported attempted or actual check fraud in 2024, more than any other payment type. Roughly three-quarters of organizations faced payments fraud of some kind. And recovery is getting harder: only 22% of victims recovered 75% or more of their lost funds, down from 41% two years earlier.

A few things make a small business an attractive target:

• Checks are still in heavy use. Around 91% of surveyed organizations still write checks, so the attack surface has not shrunk even as digital payments grew.
• Reconciliation lags. When you check the bank balance once a month, a forged check can clear and the funds can be long gone before anyone notices.
• One person handles the books. Without separation of duties, there is no second set of eyes to catch an altered payee or amount.
• Mail theft and "check washing." A stolen check can be chemically altered so the payee and amount change while your signature stays put.

Positive pay closes the gap by moving the verification to the bank. You tell the bank, in advance, exactly which checks you issued. Anything that does not match gets flagged before it pays.

How positive pay works

The mechanics are the same whether you run one account or ten:

1. You issue checks from your accounting system or check register.
2. You send your bank a check issue file (the positive pay file) listing each check's number, amount, account, issue date, and often the payee name.
3. When a check is presented for payment, the bank compares it against your list.
4. Any check that does not match becomes an exception. The bank notifies you, and you decide to pay or return it before the money moves.

The payee-name version of this control is sometimes sold separately as "payee positive pay." It catches the check-washing case where the number and amount are unchanged but the payee was altered. If your bank offers it, turn it on.

What it costs through your bank

Positive pay is a treasury service your bank enables on a business checking account. Pricing varies by institution, but typical structures look like this: a monthly base fee commonly in the range of about $25 to $100, sometimes plus a small per-exception fee of roughly $1 to $3 when an item is flagged. Some community and regional banks bundle it into a business account package or waive the fee, so it is worth asking your relationship manager directly.

Set that against the downside. A single altered check for a few thousand dollars that you cannot recover dwarfs years of the monthly fee. For most businesses that write more than a handful of checks a month, the math is not close.

The part that trips people up: the file

Enabling the service is the easy half. The recurring chore is producing the check issue file in the exact layout your bank expects, every time you cut checks. Each bank defines its own format: some want a comma-separated file, some want fixed-width columns at specific character positions, and the field order differs from one bank to the next.

QuickBooks does not export a positive pay file natively. Neither do most small-business accounting tools. That gap is what the paid converters exist to fill, and it is also what leaves a lot of owners hand-editing spreadsheets at risk of a format error that gets the whole upload rejected.

The free file workflow

PositivePayMaker handles the conversion step at no cost and entirely inside your browser. You export your check register from QuickBooks or any accounting tool as a CSV or Excel file, open the tool, map your columns to the bank's fields, and download a file in the format your bank accepts. Your check data never leaves your computer; nothing is uploaded to a server.

It ships with 11 bank layouts, six of those built from published specifications including Chase and Huntington. If your bank is not on the list, the custom format builder lets you match any CSV or fixed-width layout once and reuse it, and the built-in validator checks a file before you send it. To learn the field-by-field details, see the positive pay file format reference. QuickBooks users can follow the QuickBooks positive pay guide for the export steps.

When a paid desktop tool makes sense

Free is not always the right answer, and it is fair to name the alternatives. Big Red Consulting's PositivePay File Creator runs about $119 the first year and $99 a year after that. It is a Windows application that plugs directly into QuickBooks Desktop, so if you want a fixed integration that pulls straight from QuickBooks without an export step, it does that job. Treasury Software's Bank Positive Pay runs roughly $59.95 a month for a single-user desktop license and maintains a library of 350-plus verified bank layouts, which can save setup time if your bank uses an unusual format. MoneyThumb and ProperSoft sell paid desktop converters in the same vein.

If you cut checks daily across many accounts, or you want a one-time install that always pulls from QuickBooks with no manual export, a paid tool can earn its keep. If you cut checks weekly or monthly and are comfortable exporting a register, the free browser workflow covers the same need without a subscription.

Verify your first file with the bank

Whichever route you take, treat the first file as a test. Generate it, then confirm with your bank that it imported cleanly before you rely on the process. A field in the wrong position or a header your bank does not expect can cause a silent rejection, which defeats the entire control. Banks expect this back-and-forth during onboarding, so ask your treasury contact to confirm the format the first time. Once one clean file goes through, the rest are repetition.

Create your positive pay file