TPPPA 2026 Solving the Payments Puzzle Conference

Hilton Phoenix Tapatio Cliffs Resort

November 18th - 20th

Explore Day 1 of the

TPPPA 2026 Conference

Preconference Workshop: Exploring the Relationship Between Fraud Risk Management and Suspicious Activity Reporting

Presented by Marsha Jones, President of the TPPPA

Join our 90-minute preconference workshop where we will explore the relationship between Fraud Risk Management and Suspicious Activity Identification and Reporting in Third-Party Payment Processing Relationships. Discussion will identify Bank oversight responsibilities, and the TPPP’s identification and reporting obligations. The session will include a group/tabletop exercise where participants identify higher-risk activities that should be prioritized in monitoring practices.

What’s the Fuss about Bank Special Purpose Charters?

Presented by James Stevens, Partner at Troutman Pepper Locke

Special purpose bank charters let an institution engage in a limited slice of banking rather than the full range of services a commercial bank offers. Charters come from two sources; National (federal) and State special purpose which differ mainly in who grants them, what law governs them, and how far they reach. James will help the audience distinguish the different charter requirements and opportunities, as well as potential challenges and pitfalls related to these endeavors.

Protecting Consumer Data in the Payments Ecosystem: Privacy, Security, and Enforcement Risk for Banks, Processors, and Merchants

Presented by:

Roshni Patel, Counsel at Troutman Pepper Locke

Dustin Taylor, Counsel at Troutman Pepper Locke

Banks, third-party payment processors, and their merchants all handle sensitive consumer data, and all are expected to have written privacy and data security programs to protect it. Regulators and plaintiffs are paying close attention. In this session, we will walk through the legal and enforcement landscape for the payments space.

We will cover:

• Core privacy and security obligations for financial institutions and their service providers, including GLBA Privacy and Safeguards requirements, applicable state privacy and data security laws, and PCI DSS obligations, and how these obligations flow down to processors and merchants.
• Third-party due diligence and oversight. Sponsor banks are responsible for confirming that the processors they onboard are protecting consumer data. We will cover what proof of security controls to request during customer due diligence, and what to monitor on an ongoing basis. 
• Enforcement and litigation trends. We will review recent regulatory enforcement actions and private litigation involving banks, processors, and merchants, including the consequences of those actions and the lessons learned. The topics include data breach and incident response, as well as emerging claims tied to online tracking technologies.
• Practical takeaways. We’ll walk through a checklist for building or refreshing a written privacy and data security program, and questions to ask of banks, processors, and merchants.

Attendees will leave with a clearer view of their obligations and the steps they can take now to reduce regulatory and litigation exposure.

The Six Building Blocks of a Modern

Third-Party Sender Program

Presented by Milan Malkani, Founder of dhango

Every Third-Party Sender program has to stand up the same core functions: NACHA file management, originator onboarding and KYC/KYB, daily OFAC monitoring, risk controls, return-rate tracking, and audit-ready reporting. Too often these still run on manual file approvals, copy/paste background checks, and subledgers recon-structed after the fact. Milan Malkani, the founder of dhango, walks through what each building block requires and where programs commonly fall short. He then shows how automation can handle the operational load: per-originator holds, limits, and funding timelines, return-rate alerts before Nacha thresholds hit, and a complete audit trail that is ready when your bank or examiner asks.

Finding solutions to the problem of First-Party Fraud

Presented by: 

Jordan Bennet from Nacha

Sara Hentges from UMACHA



First-Party fraud is of increasing concern to many financial institutions and their third-party senders and originators. Nacha created the First-Party Fraud Workgroup to focus on ways to mitigate this issue. The first-party fraud workgroup and Nacha are exploring ways to support financial institutions and originators in their fight against first-party fraud while protecting receivers from legitimate debit fraud. Originators, ODFIs, and RDFIs all have a role to play. Learn about the open request for comment and request for information and how you can let Nacha know your thoughts on first-party fraud. Jordan and Sara will also discuss how your organization can take an active role in the fight against first-party fraud.  

Thank You to Our 2026 Sponsors

2026 Exhibitors

• The conference will begin at 1:00 pm on 11/18 and end at 12:00 pm 11/20.
• Pre-Conference Workshop starts at 10:00 am 11/18.
• Golf tournament will be at 7:30 am on 11/18.

We look forward to seeing you in Phoenix, AZ!

Follow Us on Social Media