Request access
RankShield Network · Financial · FedNow rail

FedNow never sleeps.verify before it settles.FedNow fraud prevention from RankShield Financial verifies each instant payment intent before it settles on the Federal Reserve rail. Because FedNow is 24/7/365 and irrevocable, it normalizes the ISO 20022 instruction into a canonical intent and returns a released or held verdict pre-settlement.

iso 20022 normalized24/7/365 · irrevocableverified pre-settlement
rail normalizer · native → canonical intent
# native RTP instruction
debtor: acct-04f2
creditor: acct-1180
amount: 48500.00
ccy: USD
e2e: e2e-7c19a3
↓ normalize + de-identify
rs-fin-intent-v1|rail=rtp|amount_minor=4850000|payer=<commit>|payee=<commit>
digest
one canonical intent, one signature path — whichever rail the money moves on.
01 // Rail
The rail

What is FedNow and why does instant settlement change the risk?

FedNow is the instant-payments rail operated by the Federal Reserve, launched in 2023. It settles payments in real time, runs 24 hours a day, 7 days a week, 365 days a year, and its payments are irrevocable once settled. Instant settlement changes the risk because it collapses the time between a fraudulent approval and a completed, unrecoverable transfer to seconds. On slower or reversible rails there is room to catch and unwind a bad payment; on FedNow there is not. When settlement is instant and final, every control that runs afterward is documenting a loss instead of stopping one. RankShield Financial verifies the intent before the payment is released, which on a 24/7/365 rail is the only window where the check can actually protect the funds. Instant-payment fraud demands an instant, pre-settlement answer — one that is always on because the rail is.

Compare all six payment rails
Real-time
FedNow settles instantly — the interval to intervene after send effectively vanishes.
24/7/365
Always on, including weekends and holidays — the verification has to be always on too.
Irrevocable
A settled FedNow payment is final — the only control that prevents loss runs before release.
02 // Upstream
Why upstream

Why must the check run before a FedNow payment settles?

The check must run before settlement because FedNow gives you no reversal to run after it. Once an instant payment settles, the funds are with the recipient and final; a fraud score computed post-send, an alert reviewed later, or an overnight reconciliation are all too late to protect that payment. RankShield Financial moves the work into the pre-settlement window: normalize the FedNow instruction into a canonical intent, verify identity, authority, and signature, resolve a released or held verdict, and only then let the payment proceed. The decision lands while the payment is still stoppable. Because FedNow operates every day of the year, that verification runs continuously rather than on a business-day schedule — an instant, always-on rail requires an instant, always-on gate, and the released-or-held model is designed to give exactly that without holding up legitimate payments.

Control timingOn reversible railsOn FedNow (irrevocable)
After settlementReversal or return can recover fundsFinal — no sender reversal
Fraud score post-sendRoom to intervene before finalityFinality reached in seconds
Business-hours reviewNext-day handling is workableRail runs 24/7/365 — no pause
Pre-settlement verificationAdds a verifiable gateThe only control that prevents loss
03 // Normalize
One canonical intent

How does RankShield normalize a FedNow payment into a canonical intent?

RankShield takes the native ISO 20022 FedNow instruction — debtor, creditor, amount, currency, end-to-end identifier — and reduces it to a single canonical intent record, the same shape used for every rail. That record is hashed to one digest and signed with composite ML-DSA-65, so a FedNow payment is verified with the same released-or-held logic as RTP, stablecoin, tokenized deposit, CBDC, or on-chain. One canonical intent means one verifiable standard rather than a bespoke, weaker control per network. The instrument here shows it directly: choose FedNow and watch its ISO 20022 fields collapse into a single canonical intent and digest, then switch to another rail and see the identical verification run. Because RTP and FedNow both speak ISO 20022, a bank running both can extend the same pre-settlement verification across them without building two separate fraud stacks.

rail normalizer · native → canonical intent
# native RTP instruction
debtor: acct-04f2
creditor: acct-1180
amount: 48500.00
ccy: USD
e2e: e2e-7c19a3
↓ normalize + de-identify
rs-fin-intent-v1|rail=rtp|amount_minor=4850000|payer=<commit>|payee=<commit>
digest
one canonical intent, one signature path — whichever rail the money moves on.
04 // Direction
Industry direction

How does the industry push toward earlier verification apply here?

The payments industry is moving fraud detection upstream, toward pre-settlement verification, and RankShield's FedNow model is aligned with that direction. Nacha expanded its fraud-monitoring rules — Phase 2 in 2026 — to push fraud detection earlier on the network it governs. Attributed carefully: Nacha governs the ACH and instant network, not the Federal Reserve FedNow Service directly, so this is the industry's trajectory rather than a FedNow-specific mandate, and we will not overstate it. The honest read is that regulators and rule-makers increasingly expect fraud to be caught before value moves, especially on instant rails where there is no reversal. RankShield does not claim to make you compliant with any rule; it produces independently verifiable evidence that supports your fraud-monitoring and audit obligations, in the pre-settlement window the direction of travel points toward.

Nacha 2026
Phase 2 fraud-monitoring rules push detection earlier — Nacha governs ACH/instant, not FedNow directly.
Earlier is the trend
The ecosystem direction is to catch fraud before value moves, especially on irrevocable rails.
Evidence, not a badge
RankShield produces verifiable evidence that supports compliance — it does not make you compliant.
05 // Scams
Instant-payment fraud

How does RankShield stop instant-payment scams on FedNow?

Instant-payment scams — authorized-push-payment fraud and executive impersonation — work by getting a legitimate user to approve a payment that then settles on FedNow in seconds and cannot be recalled. RankShield verifies the intent and its approval before release, so an unfamiliar payee, an amount beyond granted authority, or a missing or synthetic liveness signal causes the payment to be held rather than settled. APP and crypto-rail scam losses were estimated around $10 to 12 billion a year in the 2024 range — an estimate, not a precise figure — but it shows why interception on an irrevocable instant rail must happen before settlement. The held verdict routes a suspect payment back to a human or a stricter quorum while the funds are still in place, and the liveness check runs in the app's own verified channel, never on a live carrier call.

The weekend push

An urgent FedNow payment is approved outside business hours

On a Saturday, when no reviewer is watching, a user is pressured to approve an urgent FedNow transfer to a new counterparty — on a rail that settles instantly, every day of the year.

RankShield: pre-settlement verification runs on FedNow around the clock; the unfamiliar payee, out-of-authority amount, or a replayed liveness response resolves to held, so the instant payment is stopped even at 2 a.m. on a holiday.
~$10–12B/yr
Estimated 2024-range APP and crypto-rail scam losses — why instant-rail interception must be pre-settlement.
06 // Verdicts
Released or held, live

What does the pre-settlement verdict stream look like?

The pre-settlement verdict stream is where the released-or-held model becomes concrete. Each payment intent — FedNow, RTP, an agent payment, a stablecoin transfer — arrives, is reduced to a canonical record, signed, and resolved to a verdict before settlement. Released intents pass identity, authority, and signature and are anchored to a tamper-evident record; held intents stop, with a reason: an over-limit agent, a synthetic liveness score, an out-of-authority payment. The instrument below shows this resolution honestly, including held rows, so the point is not that everything sails through but that every intent is decided pre-settlement and the decision is signed. On a FedNow flow this is the difference between an instant payment that settled because it was verified and one that was held because it could not be — each outcome carrying its own independently checkable attestation.

RankShield Network · pre-settlement ledger
RTP $48,500 invoice · acct ••42anchored ✓
AGENT $1,200 ap_7f3 · vendoranchored ✓
WIRE $96,000 “CEO” call · livenessheld · deepfake
FEDNOW $7,310 payroll · acct ••08anchored ✓
USDC 500.00 0x9f…c1 → 0x2a…7eanchored ✓
verified BEFORE settlementml-dsa-65 · anchored
07 // On FedNow
What RankShield adds to FedNow

Four controls on every FedNow payment.

RankShield does not queue FedNow behind a manual review. It adds a verifiable, cryptographic gate in the pre-settlement window — always on, because the rail is — and applies the same standard to every rail.

Canonical intent

iso 20022 → one record

The native FedNow instruction is normalized to a single canonical intent and digest, so it is verified with the same logic as every other rail rather than a bespoke control.

Always-on verdict

released · held

Identity, authority, and signature are checked before release, 24/7/365. A suspect payment is held while the irrevocable instant transfer can still be stopped.

Verified-channel approval

signed liveness

Human approvals run through the app's verified channel with a nonce-bound, signed liveness check — a replayed or synthetic response is treated as synthetic and held.

Quantum-safe attestation

composite ml-dsa-65

Every intent is signed with post-quantum ML-DSA-65 and sealed to a tamper-evident record, so the decision is independently verifiable and safe against harvest-now-decrypt-later.

FAQ

FedNow fraud prevention — questions, answered.

What is FedNow fraud prevention?
FedNow fraud prevention is stopping a fraudulent instant payment before it settles on the Federal Reserve FedNow Service, rather than trying to recover it afterward. FedNow runs around the clock and settles with finality, so a payment that goes through is final. RankShield Financial normalizes each FedNow instruction into a canonical intent, verifies the payer, payee, amount, and purpose, confirms a human or authorized agent approved it, and returns a released or held verdict before the payment leaves. The fraud is intercepted while the money is still stoppable, not chased after it has settled.
What is FedNow and who operates it?
FedNow is the instant-payments rail operated by the Federal Reserve, launched in 2023. It settles payments in real time, operates 24 hours a day, 7 days a week, 365 days a year, and its payments are irrevocable once they settle. Like RTP, FedNow uses the ISO 20022 messaging standard. Those properties make it powerful for legitimate instant payments and also mean that fraud on FedNow, as on any instant and final rail, has to be intercepted before settlement — there is no built-in reversal for the sender to fall back on.
Why does FedNow need pre-settlement verification?
FedNow payments are instant and irrevocable, so any control that runs after settlement is examining a completed loss rather than preventing one. The window where a check can actually stop a fraudulent instant payment is before it is released. RankShield Financial performs its identity, authority, and signature verification in that pre-settlement window and returns a released or held verdict, so a suspect payment is held while holding it still protects the funds. On a 24/7/365 rail this matters even more, because fraud does not wait for a business day and neither can the verification that guards it.
How does RankShield normalize a FedNow payment?
RankShield takes the native ISO 20022 FedNow instruction — debtor, creditor, amount, currency, end-to-end identifier — and reduces it to one canonical intent record, the same shape used across all six rails. That record is hashed to a single digest and signed with post-quantum ML-DSA-65. Because FedNow is normalized to the same canonical intent as RTP, stablecoin, or on-chain, it is verified with identical released-or-held logic, giving one verifiable standard rather than a separate control per network. The rail normalizer instrument shows this: choose FedNow and watch its ISO 20022 fields collapse into one canonical intent and digest.
How does Nacha’s 2026 push relate to FedNow?
Nacha expanded its fraud-monitoring rules — Phase 2 in 2026 — to push fraud detection earlier, toward pre-settlement verification on the network it governs. Attributed carefully: Nacha governs the ACH and instant network, not the Federal Reserve FedNow Service directly, so this is best read as the industry direction rather than a FedNow-specific mandate. The honest framing is that the ecosystem is moving fraud checks upstream of settlement, and RankShield&apos;s pre-settlement model on FedNow is aligned with that direction. We do not claim Nacha regulates FedNow or that RankShield makes you compliant with any rule; we produce evidence that supports those obligations.
How does RankShield help against instant-payment scams on FedNow?
Instant-payment fraud — authorized-push-payment scams and executive impersonation — works by getting a legitimate user to approve a payment that then settles on FedNow in seconds. RankShield verifies the intent and its approval before release, so an unfamiliar payee, an amount outside granted authority, or a missing or synthetic liveness signal causes the payment to be held rather than settled. APP and crypto-rail scam losses were estimated around $10 to 12 billion a year in the 2024 range — an estimate — which is why the interception has to happen before an irrevocable instant payment settles rather than after.
Does deepfake liveness work on a live FedNow-triggering call?
No. RankShield’s liveness and deepfake checks work only inside the app’s own verified channel — a one-time challenge nonce, a signed detector verdict, and media bound to the specific intent. They do not analyze a live carrier or FaceTime call. So if an impersonation deepfake is used to trigger a FedNow payment, the defense is to require approval through the verified channel, where a replayed or synthetic response is treated as synthetic and the payment is held, rather than to claim we can inspect the call itself. Stating that boundary honestly is part of how we describe the control.
Is FedNow verification quantum-safe?
Yes, by construction. Each FedNow intent is signed with composite ML-DSA-65 from NIST FIPS 204, hybrid with a classical signature and crypto-agile, with transport over hybrid post-quantum TLS where available. That protects the integrity of the intent and its attestation against harvest-now-decrypt-later collection today and a future quantum computer. We say quantum-safe by construction, not quantum-proof — a cryptographically-relevant quantum computer does not exist yet, and the honest claim is that the signing is built to the current post-quantum standard and can rotate as those standards evolve.
Verify, then settle

Verify every FedNow payment before it settles for good.

RankShield Financial is rolling out pre-settlement verification for instant payments with design partners. Request access and we'll map it to your FedNow flows.

Request accessPre-settlement verification