Portal: ACH Option
With the addition of ACH information to the portal, I propose adding a verification button to improve security and accuracy. Verifying ACH details before use is a standard best practice to minimize user errors and prevent fraud. This feature would notify the foundation when new ACH details are added, prevent unverified transactions, and reduce errors and fraud by allowing a temporary hold on banking information being used until verification is complete. Implementing this feature would enhance data integrity, security, and overall operational efficiency.

-
Zac Smith commented
Agreed, the current version is not to a security level we would need to implement it. Having "login as" access then opens up the ability to change the ACH info for anyone and simply changing a profile's primary email opens up the ability too with the new portal's "login with email" option. I would actually prefer to see this tied to the "pay" email over the primary since that is the ACH notification email. And then the verification button and/or at least some notifications to that email both when the ACH info is changed and when that "pay" email is changed? Something that could raise some flags if anything unauthorized was happening.