ACH Email Contains Malware

We have received several reports, including a warning from West Lafayette, regarding an email that may contain malware with the subject line “Rejected ACH payment” or “ACH transfer rejected” which contains the following content:



The ACH transaction (ID: 742901829422), recently initiated from your checking account (by you or any other person), was rejected by the other financial institution.

Canceled transaction

Transaction ID:


Reason of rejection

See details in the report below

Transaction Report

report_742901829422.doc (Microsoft Word Document)

13450 Sunrise Valley Drive, Suite 100
Herndon, VA 20171

2011 NACHA – The Electronic Payments Association


Please permanently delete this message by holding down the shift key and clicking delete.

Please Do not click on the link. It will attempt to install malware on your computer.


A financial institution’s Web page should never be accessed from a link provided in an email. It should only be accessed by typing the Web site name, or URL address, into the Web browser or by using a book mark.

Financial institutions do not be send e-mail messages that request confidential information, such as account numbers, passwords, or PINs.

Financial institutions always use https: to ensure that you are using a secure Web page.