By clicking Accept, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. View our Privacy Pprivacy poprivacy policy for more information.
   |   
Data

What is real-time bank account verification?

Data
October 16, 2026
   |   
Aeropay Team

Aeropay Team

This article was written by the payments nerds at Aeropay. Our goal is to provide you with solid insights to help your business operationalize more efficient, value-focused payments.

Connect with 
Aeropay Team

Table of contents

Blog Section

Key takeaways

  • How does real-time bank account verification work?
  • What does each verification method confirm?
  • Why do US businesses have to verify an account before the first online debit?
  • How do you compare providers on bank coverage and match rates?
  • What is the best way to connect a customer's bank account to a payment?
  • Frequently asked questions
  • Verify accounts before the first payment

Real-time bank account verification confirms that a customer's bank account is real and open before the first payment, in seconds instead of the day or more micro-deposits take. In one method, the customer logs in to their bank, which returns the live balance and, where the bank shares it, the account owner. In the other, a validation service checks the account and routing numbers with no login.

For US businesses that collect payments online, verification is also a rule. Since March 19, 2021, Nacha has required the originator of an online (WEB) debit to validate the account number before its first use and again whenever it changes.

How does real-time bank account verification work?

Real-time verification asks either the customer's bank or a validation service about the account at the moment the customer enters it. A bank login returns more data. A validation check works without a login.

Verification by bank login

The customer connects their account by signing in to their own bank, and the bank answers for the account directly.

  1. The customer chooses to pay by bank and picks their bank from a list.
  2. The bank's own login screen opens, in the browser or the bank's app, and the customer signs in there.
  3. The customer picks the account to share and approves the connection.
  4. The bank issues a secure token to the provider, so neither the business nor the provider ever sees the customer's banking password.
  5. The bank returns the account and routing numbers, the account type and the current balance, plus the account holder's name where the bank shares it.
  6. The provider checks that data against the customer's details and the payment amount, then approves the account.

How a provider connects to each bank decides how often this flow succeeds. Our guide to bank linking compares the connection types.

Verification by account validation check

The customer types their account and routing numbers, and the provider sends them to a validation service before the first debit. The service reports whether the number is valid and belongs to an open account, and some services also compare the account holder's name with the name the customer gave. No login is involved, so the check works at banks that don't support a direct connection. It returns no balance.

What does each verification method confirm?

Only a bank login confirms the balance. Micro-deposits and validation checks both confirm the account is real and open, and the validation check does it in seconds.

CheckTyped-in number onlyMicro-depositsAccount validation checkBank login
Account exists and is openNoYes, once the deposits landYes, at entryYes, at connection
Payer owns the accountNoIndirectly (they can see the statement)Depends on the service's name matchYes, from the bank's owner data where shared
Funds cover the paymentNoNoNoYes, from the live balance
Customer effortType two numbersType two numbers, wait, return and confirm two amountsType two numbersSign in to their bank
Time to first paymentImmediateA day or moreSecondsSeconds
Returns it helps preventNoneR02, R03, R04 (closed, missing or invalid account)R02, R03, R04R02, R03, R04, plus R01 (insufficient funds) on the first payment

The balance row is the one most comparisons skip. A micro-deposit test passes on an account holding $3, and the customer's first $300 payment comes back as insufficient funds two banking days later.

A balance check reflects the account at that moment. The balance can fall before a later debit settles, so a verified account can still return a payment for insufficient funds.

Why do US businesses have to verify an account before the first online debit?

Nacha treats account validation as the minimum part of fraud detection for online debits. Since March 19, 2021, the originator of a WEB debit must validate the account number before its first use and before any change to it. Nacha does not count a fraud detection system without account validation as sufficient.

The rule leaves the method to the business. Nacha names prenotes, micro-transaction verification and commercially available validation services as options, and a bank-login check validates the account at the moment of connection.

Two more rules raise the stakes for getting verification right.

  • Fraud monitoring. Since June 22, 2026, Nacha's fraud monitoring rules apply to every non-consumer originator regardless of volume, which covers any business that sends ACH payments. Each business must run risk-based processes to spot fraudulent entries and review them at least annually. Verification is one input to those processes and doesn't meet the whole obligation on its own.
  • Return thresholds. Nacha reviews any business whose administrative returns (R02, R03 and R04) pass 3.0% of its debits. Checking the account at signup stops the returns caused by wrong or closed accounts before the first debit goes out.

When a return does happen, the code decides what you do next. Our guide on how to recover a failed bank payment covers each one.

How do you compare providers on bank coverage and match rates?

Compare providers on what happens after the customer picks their bank, starting with whether the connection succeeds and the owner's name matches. A bank count only tells you a bank is on the list.

A match rate is the share of verifications where the owner name returned by the bank or validation service matches the name the customer gave. A mismatch is the clearest sign of a borrowed or stolen account, so ask for the rate measured on traffic like yours.

Question to askWhy it mattersWhat a strong answer includes
What share of my customers' banks connect by bank login?A bank count includes banks reached only through slower fallbacksConnection success by bank, measured on traffic like yours
How often does the owner name match?A mismatch flags account takeover and borrowed accountsA match rate, plus how nicknames and joint accounts are handled
What data comes back?Balance at connection catches insufficient funds before the first debitOwner name and balance where the bank shares them, and transaction history depth by bank
What happens when a bank won't connect?A micro-deposit fallback brings back the waitA validation check that answers in seconds
What happens when a connection expires?Banks revoke tokens and customers change passwordsReconnection without sending the customer through linking again
Do returning customers link again?Every repeat link is a chance to drop offRecognition of customers who have already linked a bank

Aeropay's network connects to more than 12,000 US banks and credit unions. Whichever provider you evaluate, us included, ask for connection success on your own customers' banks alongside the total. Our guide to choosing a pay by bank provider covers the rest of the evaluation.

What is the best way to connect a customer's bank account to a payment?

The best way is to link, verify and check the balance in one step at checkout, with a validation check ready for banks that won't connect. The customer signs in once, and the payment goes out against an account you know is open, owned by the payer and funded.

That is how we built Aerosync, Aeropay's bank-linking product. Users link and verify a bank account in under 10 seconds with Aerosync, and the business sees the result before the first debit.

Five steps make the flow convert and hold up.

  1. Offer bank login first at checkout, with a search for the customer's bank at the top.
  2. Check the balance against the payment amount before submitting the first debit.
  3. Fall back to a validation check when the bank won't connect, so the customer still pays in the same session.
  4. Check the balance again before each later debit, because balances change after signup.
  5. Restore expired connections and recognize returning customers, so a second payment never means a second link.

Frequently asked questions

Is real-time verification the same as bank account linking?

No. Linking is the connection a customer makes to their bank. Verification is the check on what comes back, confirming the account is open, belongs to the payer and can cover the payment. With a bank login, both happen in the same step, which is why the two terms get used interchangeably.

What are the alternatives to Plaid for bank account linking?

Alternatives to Plaid include standalone bank connectivity providers and pay by bank platforms that integrate bank linking with payment processing. Aerosync, Aeropay's proprietary bank connectivity platform, supports more than 12,000 US banks and credit unions and connects directly with Aeropay's payment infrastructure. When evaluating alternatives, businesses should compare bank coverage, connection success rates, account verification capabilities, fallback options, and the ability to support seamless repeat payments.

What does a customer need to verify their account in real time?

For a bank login, only their online banking sign-in, entered on their bank's own screen. They don't type account numbers or wait for deposits, and the business never receives the password. For a validation check, they type their account and routing numbers and get an answer in seconds.

Do micro-deposits still meet Nacha's account validation rule?

Yes. Nacha's WEB debit rule doesn't prescribe a method, and it lists micro-transaction verification alongside prenotes and commercial validation services. Micro-deposits confirm the account is open, but they take a day or more and don't check the balance, so they work best as a last-resort fallback.

Does real-time verification confirm who owns the account?

Yes, when the bank shares the account holder's name or the validation service offers a name match. The provider compares that name with the one the customer entered, and a mismatch is a reason to stop before the first debit. Ask a provider which banks return owner names.

What is the difference between bank account verification and payment processing?

Verification checks the account before any money moves. Payment processing initiates the debit, settles it and handles any return. Some providers sell verification alone, so the business connects it to a separate processor. Pay by bank networks run both on one connection.

Verify accounts before the first payment

Talk with our team about adding real-time verification to your checkout, with bank login first and a validation check for banks that won't connect.

Sources

Back to blog
←