Our ACH product allows us to set up dual control requirements for our customers. Which means we have already made sure they have authorized it. However, there is always the risk of account takeover, so we review summary information at least for every file we receive. If the file is unusual (in size, number of transactions, timing, etc), we call back or require them to contact us out of band.