As a business, if you provide ACH payment processing for your business or clients, your company is ultimately liable for ACH payment fraud, per Regulation E.