The party responsible for ACH fraud is typically the bank which the fraudulent transaction originated from. However, if it can be proven that the account holder was negligent in protecting their account information and passwords, they may also be held liable. It is important for both individuals and businesses to regularly monitor their bank accounts and report any suspicious activity immediately to their financial institution.