Risk Retreat Sessions

2026

Tuesday, August 4

1:00 PM – 1:10 PM – Welcome to Nacha’s Risk Retreat


1:15 PM – 2:15 PM – From Finding to Fallout: When Compliance Issues Escalate 
A compliance issue rarely stays contained. What starts as a single finding can quickly snowball once new facts, internal pressure, or external scrutiny enter the picture. In this workshop, participants will work through a realistic compliance scenario from the moment a finding is identified through escalation, remediation, and executive communication. Along the way, new developments will be introduced that force teams to reassess their approach, adjust timelines, and recalibrate messaging. Attendees will collaborate to determine appropriate corrective actions, documentation, and next steps while balancing regulatory expectations, organizational risk, and leadership concerns.

Participants will leave with a clearer framework for managing compliance issues as they evolve, and the confidence to respond when a situation no longer goes according to plan.
 


2:20 PM – 3:35 PM – Ripped from the Headlines: What Would You Do? 
Payments risk, compliance, and security issues do not happen in a vacuum. They unfold in real time, under scrutiny, and often with imperfect information. This session uses recent payments-related headlines to challenge attendees to step into the decision-maker role. Participants will work through what actions they would take in the first hours and days of an incident, who should be involved, and where existing policies or controls may fall short. Discussion will focus on response strategy, ownership, and risk prioritization rather than post-event analysis. Attendees will leave with a sharper sense of how to translate current events into actionable lessons for their own organizations.


3:40 PM – 4:55 PM – Fraud Lab: Break the Scheme 
In this hands-on lab, attendees will dissect a real-world faster payments fraud scenario from “Ripped from the Headlines” and work together to break it apart. Teams will analyze how the fraud unfolded, identify control gaps, and pinpoint missed opportunities for earlier intervention. The focus is on decision points, not hindsight, and on strengthening prevention and detection strategies before losses occur. 


Wednesday, August 5


8:30 AM – 9:30 AM – Fraud Monitoring Readiness Lab: Identifying Gaps 
With the new Nacha fraud monitoring requirements now in effect, organizations must be able to demonstrate that their fraud monitoring approach is reasonably designed to identify potentially fraudulent ACH activity. In this lab, participants will walk through a practical, repeatable exercise they can use at their own organization to assess whether their current fraud monitoring processes, tools, and controls are meeting the intent of the Nacha rules. Working through realistic scenarios, attendees will evaluate how fraud risks are identified today, where monitoring may fall short, and how gaps can be documented, prioritized, and addressed. The focus is not on specific technologies, but on building a defensible, risk-based assessment process that supports compliance, operational effectiveness, and examiner expectations.


9:35 AM - 10:35 AM – Follow the Money: BSA Decisions with Imperfect Information 
In the payments system, regulations are created to protect the innocent. In this course, the dedicated students who listen to these cases become the judge and jury as they preside over payments risk-related legal rulings. Teams are divided into plaintiffs, defendants and jurors as they strategize to break down the facts of each case. Several preeminent payments attorneys assist in this engaging, interactive course. These are their stories. 


10:40 AM - 11:55 AM – The Payments Court: Faster Payments Unit 
In the world of instant transactions, payment disruptions are inevitable. The dedicated professionals who resolve them are part of an elite squad known as the Faster Payments Unit. These are their processes.

In this interactive session, you’ll step into the courtroom. We’ll present a real-world payments lawsuit, with half the class representing the plaintiff and half the defendant. You’ll argue your side in a mock trial, debating key issues around faster payments liability, processes, and outcomes. By the end, you’ll have sharpened your understanding of both sides of the legal coin in faster payments disputes.


12:00 PM - 12:45 PM – Lunch


12:50 PM - 1:50 PM – Designing Controls for What You Don’t Control 
Third-party relationships and fintech partners play a critical role in today’s payments ecosystem, but risk does not stop at organizational boundaries. In this session, participants will examine how to design, assess, and document controls when key processes, data, or decisions sit with external partners. Attendees will work through practical scenarios involving third-party participants, vendors and fintech relationships to identify where oversight is effective, where gaps commonly exist, and what controls actually mitigate risk when direct control is limited. The session focuses on governance, monitoring, and accountability, helping participants strengthen how third-party risk is managed and defended.


1:55 PM - 2:55 PM – Managing Risk During Change 
Periods of change introduce some of the highest risk in payments operations. In this workshop, participants will work through realistic change scenarios such as system conversions, new product launches, acquisitions, or process redesigns, and assess how risk management and controls should adapt during transition periods. Attendees will identify where standard monitoring may break down, what compensating controls are appropriate, and how to maintain oversight while operations evolve. The session emphasizes proactive planning and practical decision-making to help participants manage risk effectively when normal processes are in flux.


2:55 PM – 3:00 PM – Closing Remarks

yes