CBP Requires Security Token Verification for ACH Refund Changes in ACE Portal Starting October 10

Beginning October 10, 2026, CBP requires email or SMS security token verification whenever an authorized user adds or modifies ACH refund information in an ACE Portal importer sub-account, the change cannot be completed without the token. Other authorized users on the same sub-account can opt in to email or SMS alerts after any ACH refund change. The step follows CBP's addition of SMS as an ACE Portal login method and matters for importers receiving electronic duty refunds, including IEEPA refunds processed through CAPE, since refunds are paid only by ACH. CBP says detailed instructions will appear in an update to its ACE Portal ACH Bank Information for Electronic Refunds training guide.