Loading…
7
That PCI compliance shortcut advice nearly cost my business last September
A guy named Tom from a Facebook group told me to just skim over the PCI self-assessment questionnaire and check yes on everything to save time. I followed his advice and three months later my processor flagged me for a random audit. Turns out I had two glaring gaps in how I stored customer card data and they hit me with a $500 fine plus a month of higher transaction fees. Has anyone else had a wake-up call from ignoring the details on those forms?
3 comments
Log in to join the discussion
Log In3 Comments
the_rowan3mo ago
Not quite right - skimming PCI is a terrible idea, not a shortcut.
7
iris_barnes873mo ago
Exactly. Skimming PCI is how you end up with a 50k fine and your processor dropping you. I watched a buddy try to shortcut their annual audit paperwork and it nearly sank his whole operation. Not worth the risk for a few hours of work.
2
jackson.max3mo ago
My payment processor auditor told me I had to map out exactly where card data flowed in my system which took about four hours. Once I did that the PCI self-assessment questionnaire took twenty minutes because I already knew my real gaps. That mapping exercise saved me from the same $500 fine and I do it every year now without skipping a single question.
4