AAP Exam Prep Free practice test →

Free AAP Practice Questions

10 free, exam-style Accredited ACH Professional (AAP) practice questions with answers and explanations. No signup required. Work through them below, then take the full free AAP practice test to study every exam domain.

Question 1

A consumer authorized her gym to debit $50 on the 15th of each month via a signed PPD authorization. The gym mistakenly debits her account for $50 on the 8th of the month. The consumer signs a Written Statement of Unauthorized Debit and her RDFI returns the entry. Which Return Reason Code is correct?

  1. R05 - Unauthorized Debit to Consumer Account Using Corporate SEC Code
  2. R07 - Authorization Revoked by Customer
  3. R10 - Originator Not Known / Not Authorized to Debit Account
  4. R11 - Customer Advises Entry Not in Accordance with the Terms of the Authorization
Show answer & explanation

Correct answer: D - R11 - Customer Advises Entry Not in Accordance with the Terms of the Authorization

Question 2

An ODFI delivers a Same Day ACH file to its ACH Operator at 1:15 p.m. ET on Tuesday. Assuming the file is otherwise eligible and the entries are within the per-payment limit, when will these entries settle and when must the RDFI make the funds available to the Receiver?

  1. Settlement at 1:00 p.m. ET; funds available by 1:30 p.m. RDFI local time Tuesday
  2. Settlement at 5:00 p.m. ET Tuesday; funds available by 5:00 p.m. RDFI local time Tuesday
  3. Settlement at 6:00 p.m. ET Tuesday; funds available by end of RDFI's processing day Tuesday
  4. The file missed Tuesday's Same Day windows and will settle as next-day ACH on Wednesday
Show answer & explanation

Correct answer: B - Settlement at 5:00 p.m. ET Tuesday; funds available by 5:00 p.m. RDFI local time Tuesday

Question 3

A consumer notifies her financial institution on the 9th calendar day after receiving her statement that an unauthorized ACH debit appears on the statement. The institution cannot complete its investigation within 10 business days. To extend the investigation period, the institution must:

  1. Notify the consumer in writing that the investigation will take longer; no provisional credit required
  2. Provisionally credit the consumer's account for the disputed amount within 10 business days, after which it has up to 45 calendar days to complete the investigation
  3. Complete the investigation within 90 calendar days regardless of provisional credit, because the dispute involves a recurring debit
  4. File a Suspicious Activity Report and pause the investigation until FinCEN responds
Show answer & explanation

Correct answer: B - Provisionally credit the consumer's account for the disputed amount within 10 business days, after which it has up to 45 calendar days to complete the investigation

Question 4

On October 15, 2026, a consumer disputes an unauthorized PPD debit that was presented to his account on October 14. The RDFI completes its review of the consumer's Written Statement of Unauthorized Debit on Friday, October 16. By the opening of which banking day must the RDFI transmit the return entry?

  1. The opening of the 2nd banking day following the date of the original entry
  2. The opening of the 2nd banking day following completion of the WSUD review
  3. The opening of the 6th banking day following completion of the WSUD review
  4. The opening of the 60th calendar day following the date of the original entry
Show answer & explanation

Correct answer: C - The opening of the 6th banking day following completion of the WSUD review

Question 5

An Originator processes recurring monthly PPD debits for a customer on the 5th of each month. The Originator's ODFI forwards a Notification of Change to the Originator on Tuesday, March 3. The next scheduled debit is Thursday, March 5. By when must the Originator make the corrected information effective?

  1. Before the March 5 entry, because all NOC changes must be implemented before the next entry
  2. Within 2 banking days of receipt - by the opening of Thursday, March 5
  3. By the 6th banking day after receipt - Wednesday, March 11 - even though one entry will go out uncorrected
  4. Within 30 calendar days of receipt
Show answer & explanation

Correct answer: C - By the 6th banking day after receipt - Wednesday, March 11 - even though one entry will go out uncorrected

Question 6

An ODFI's calculated administrative return rate over the preceding 60 days is 3.4%, driven primarily by R03 returns. Which statement BEST describes the regulatory consequence?

  1. The ODFI has exceeded a hard return rate threshold and is automatically subject to a Class 2 Rules violation and fine
  2. The ODFI has exceeded a return rate level, which may trigger an inquiry by the ACH Rules Enforcement Panel but is not itself a per-se violation
  3. There is no consequence; only the 0.5% unauthorized return rate carries enforcement implications
  4. The ODFI must immediately cease originating debits until the rate falls below 3.0%
Show answer & explanation

Correct answer: B - The ODFI has exceeded a return rate level, which may trigger an inquiry by the ACH Rules Enforcement Panel but is not itself a per-se violation

Question 7

A merchant places a cold call to a consumer with whom it has no prior business relationship and offers a magazine subscription. The consumer agrees over the phone and provides her checking account information. The merchant records the call. Under the Nacha Operating Rules, which SEC code and authorization approach is permissible for the resulting debit?

  1. TEL with the recorded oral authorization, because the call was recorded and retained
  2. WEB with similarly authenticated electronic authorization
  3. Neither TEL nor WEB is permissible; TEL requires either an existing customer relationship OR a consumer-initiated call, and WEB requires an Internet/mobile channel
  4. PPD with a similarly authenticated authorization captured by the recording
Show answer & explanation

Correct answer: C - Neither TEL nor WEB is permissible; TEL requires either an existing customer relationship OR a consumer-initiated call, and WEB requires an Internet/mobile channel

Question 8

An Originator wants to debit a Receiver's loan account at the RDFI to collect a regularly scheduled loan payment via ACH. The Originator's file specialist proposes Transaction Code 55 (Automated Payment to Loan Account - Debit). Is this correct?

  1. Yes; TC 55 is the standard transaction code for any ACH debit to a loan account
  2. Yes, provided the Receiver has authorized the debit using a PPD authorization
  3. No; TC 55 may only be used for reversals of erroneous credits previously posted to a loan account, not for the collection of loan payments
  4. No; loan account debits must use TC 27 (Checking Debit) regardless of the actual account type
Show answer & explanation

Correct answer: C - No; TC 55 may only be used for reversals of erroneous credits previously posted to a loan account, not for the collection of loan payments

Question 9

A new e-commerce Originator wishes to begin debiting consumer checking accounts via WEB entries. Before transmitting the first WEB debit on a particular consumer account, what is the Originator REQUIRED to do under the Nacha Operating Rules?

  1. Send a prenotification at least 6 banking days in advance and wait for any return before originating
  2. Use a commercially reasonable method to validate the Receiver's account - such as a prenote, micro-entry, commercial validation service, or prior ACH transaction history with the same account
  3. Obtain a paper authorization signed in wet ink and retain it for 7 years
  4. Register as a Third-Party Sender in Nacha's Risk Management Portal regardless of business model
Show answer & explanation

Correct answer: B - Use a commercially reasonable method to validate the Receiver's account - such as a prenote, micro-entry, commercial validation service, or prior ACH transaction history with the same account

Question 10

A non-Consumer Originator processed 7.5 million ACH originations during calendar year 2023. Effective March 20, 2026, what fraud monitoring obligation applies to this Originator under the Nacha Risk Management Topics rule (Phase 1)?

  1. No obligation; only ODFIs are subject to the March 20, 2026 fraud monitoring requirement
  2. The Originator must establish and implement risk-based processes and procedures designed to identify ACH entries suspected of being unauthorized or initiated due to fraud
  3. The Originator is exempt under Phase 1 and only becomes subject to fraud monitoring under Phase 2 effective June 22, 2026
  4. The Originator must register with Nacha as a Third-Party Sender and submit quarterly fraud reports
Show answer & explanation

Correct answer: B - The Originator must establish and implement risk-based processes and procedures designed to identify ACH entries suspected of being unauthorized or initiated due to fraud

Ready for the real thing?

Practice hundreds more AAP questions with instant scoring, weak-area drills, and full exam simulations.

Start the free practice test See pricing