A Check Valve Is Not Proof Against Reverse Flow

Reverse flow begins with a pressure difference

Flow follows the available pressure path. A chemical-injection pump may normally deliver into a higher-pressure process line, while its suction side, calibration pot or storage system remains at much lower pressure. When the pump stops, is isolated incorrectly or loses discharge pressure, the process header can become the driving source. If a check valve leaks or remains open, process fluid may travel backwards into equipment that was never intended to receive it.

The same principle applies to utility water, instrument connections, drains, flare interfaces, parallel pumps and transfer systems. A familiar normal-flow direction can hide the fact that shutdown, startup, maintenance or a blocked outlet changes the pressure relationship. The credible reverse-flow case must be understood for the actual configuration—not inferred from routine operation.

What the ASCO investigation teaches

The U.S. Chemical Safety and Hazard Investigation Board investigated a fatal 2005 explosion at Acetylene Services Company in Perth Amboy, New Jersey. The CSB found that acetylene flowed backwards past a check valve through a recycled-water line and accumulated in a shed before it ignited. The check valve was intended to prevent that path, but it did not seat effectively.

The investigation involved a specific design, service and facility; it should not be presented as proof that every check valve will fail. Its wider lesson is that a single non-return device can be vulnerable to a failure mode that reconnects systems of very different hazard and pressure. The CSB recommended inspection, testing and maintenance of check and block valves, together with positive isolation where needed to prevent explosive-gas backflow.

Hypothetical offshore example

Hypothetical example—not a documented incident: A chemical-injection pump on an FPSO stops while the hydrocarbon process header remains pressurised. The injection-line check valve is assumed to protect the lower-pressure chemical system. Later, an unexpected pressure rise appears at the pump discharge and process liquid is suspected in tubing that should contain only treatment chemical.

Those signs do not prove a particular failure, but they challenge the assumption that the flow path remains one-way. The team should follow the approved abnormal-operation and isolation procedures, protect people from possible pressure or chemical exposure, and involve the responsible operations and technical authorities. Loosening a fitting, cracking a drain or relying on the stopped pump would not establish a safe condition.

Identify where the valve is being credited

Start by tracing every connection between high- and low-pressure systems. Review normal operation, trips, shutdowns, standby equipment, maintenance line-ups and temporary arrangements. Ask where a check valve is explicitly credited in the design basis, operating procedure, isolation plan or hazard study. A valve that is convenient in normal service may not be sufficient as the only barrier against a major reverse-flow consequence.

Confirm that the device is suitable for the fluid, pressure, temperature, solids loading and expected flow regime. A valve that works cleanly on a test bench may behave differently in dirty, corrosive or fouling service. Orientation, minimum opening flow, pulsation and installation details can also affect performance. These are engineering questions for competent personnel working from the approved design basis and applicable standards.

Separate process protection from maintenance isolation

A check valve may contribute to process protection, but it should not be casually treated as proof of isolation before intrusive work. HSE's HSG253 explains the need to select isolation arrangements according to the hazard and the task, then drain, vent, monitor and verify the condition using the approved method. The required standard may include additional valves, physical disconnection or another engineered arrangement.

Before breaking containment, verify the actual boundary and every credible source of pressure or hazardous inventory. If pressure returns, fluid migrates, a line-up changes or the isolation cannot be proved, stop and escalate. The permit records the authorised plan; it does not convert a non-return valve into a positive isolation device.

Maintain evidence—not assumptions

Inspection and testing should demonstrate the function that matters. Records should identify the valve, service, method, acceptance criteria, result and required action. Repeated leakage, contamination, abnormal pressure equalisation or backflow should be connected as process-safety information rather than handled as unrelated minor defects.

When a check valve supports a significant safeguard, review how failure would be detected before demand. A pressure transmitter, sample result, inventory change or alarm may reveal migration, but only if the response is understood and the indication is reliable. Where no early warning exists, the design review should consider whether independent prevention, detection or isolation is required.

Three practical actions for today

• Select one connection between a high-pressure process and a lower-pressure utility or chemical system, and trace the credible reverse-flow path.
• Confirm whether the check valve is credited as a safeguard and what current inspection or test evidence supports that credit.
• Review the approved isolation method for maintenance and make sure nobody is treating the check valve alone as proof that the system is safe to open.

Relevant incident-learning video

The CSB's official video, Dangers of Flammable Gas Accumulation, covers the ASCO explosion and the failed protection against acetylene backflow. It documents a specific incident; use it to support discussion about barrier assumptions, not to diagnose unrelated equipment.

Team discussion question

Where does our installation depend on a check valve to protect a lower-pressure system—and what current evidence demonstrates that protection?

Continue the learning

Compare this lesson with why a valve-position signal does not prove the flow path, then revisit verified isolation before intrusive work.