Positive pay for nonprofits

Nonprofits sit in an awkward spot when it comes to check fraud. The money you handle is not yours, it belongs to donors, grantors, and the people you serve, so a loss is harder to absorb both financially and reputationally. At the same time, small organizations rarely have the staff to separate who writes a check, who signs it, and who reconciles the account. The same bookkeeper often does all three. That is exactly the gap a thief, internal or external, looks for.

Positive pay is one of the cheapest controls that closes part of that gap. It does not require more staff, and the bank does the matching for you. This page explains how it works for a nonprofit, what it costs, and how to produce the file your bank needs without paying for desktop software.

What positive pay does, in one paragraph

Each time you cut a batch of checks, you send your bank a small file listing every check you issued: check number, dollar amount, issue date, and usually the account and payee name. When a check is presented for payment, the bank compares it against your list. If the check number, amount, or payee does not match what you reported, the bank holds the item and asks you to approve or reject it. A forged check, an altered amount, or a check number you never issued gets flagged before the money leaves your account. Payee positive pay, which also matches the payee name, catches the common trick of washing a real check and rewriting who it is paid to.

Why this matters more for nonprofits

Checks are still the payment type most often hit by fraud. In the Association for Financial Professionals 2025 survey, 63% of organizations reported attempted or actual check fraud in 2024, more than ACH or wire fraud, and check use actually rose rather than fell. Nonprofits feel a few of these pressures harder than a typical business:

Many banks bundle positive pay into treasury or business banking and may waive or discount fees for nonprofit accounts. Ask your relationship manager directly, because the line item is sometimes negotiable for a 501(c)(3).

Standard vs. reverse positive pay

Two versions exist, and the difference matters on a tight budget. With standard positive pay, you send the issue file up front and the bank holds anything that does not match until you approve it. With reverse positive pay, you send nothing in advance; the bank shows you each check as it clears and you decide. Reverse is cheaper or free at some banks, but it is weaker: if you miss the daily review window, the bank pays the item by default. For a small finance team that cannot guarantee someone checks the queue every single morning, standard positive pay is the safer default.

The catch: getting the file out of your accounting software

Here is the practical snag most nonprofits hit. QuickBooks, the most common nonprofit accounting tool, cannot export a positive pay file natively. Neither can most fund-accounting packages. Your bank expects a specific file, often a fixed-width text file or a CSV with the columns in an exact order, and your software produces a check register that does not look like that. Something has to sit in the middle and convert one into the other.

Three paths exist:

Generating the file for free

PositivePayMaker is a free, browser-based tool that turns your check register into your bank's positive pay file. You export your issued checks from QuickBooks or your fund-accounting system as a CSV or Excel file, open the tool, pick your bank's layout or the custom format builder, and download the file to upload to your bank. Because everything runs in your browser, your check data never gets sent to a server. That last point matters for a nonprofit handling donor and grant accounts: there is no third-party account to create and no register leaving your machine.

The tool includes 11 bank layouts, six of them built from published specifications including Chase and Huntington, plus a custom format builder for any bank not on the list and a file validator to check your output before you send it. If your bank uses a treasury platform like Centrix, Q2, Fiserv, or FIS, the exact field order comes from your bank's own specification, which you can request from your treasury or business-banking contact and then reproduce with the custom builder.

Setting it up without breaking your budget

  1. Ask your bank to enable standard positive pay on your operating account, and ask whether the fee is waived or reduced for nonprofits.
  2. Request the exact file specification, the field layout and format, from your treasury contact or business banking portal.
  3. Export your issued checks from QuickBooks or your accounting software to CSV or Excel.
  4. Convert the register to your bank's layout. The QuickBooks positive pay walkthrough covers the export and column mapping step by step.
  5. Verify the first file with your bank before you rely on it. Send the initial file, confirm with your bank that it loaded cleanly and matched, and only then treat the process as routine. A layout that is one column off will reject silently, which defeats the purpose.

Positive pay will not catch every kind of fraud, ACH and wire scams need separate controls, but for the check-based risk that hits nonprofits hardest, it is a low-cost, high-leverage protection that keeps working no matter who is staffing the books this quarter.

Create your positive pay file