PCI compliance for card machines: what you pay
PCI fees are one of the charges small businesses most often miss on a card machine bill. Here is what PCI compliance is, who it applies to and how to check what you are charged.
The short answer
PCI DSS (Payment Card Industry Data Security Standard) is a set of security rules for any business that accepts card payments. It exists to keep customers' card details safe. Some providers add a monthly PCI fee to your bill, and some add a further charge if you don't complete their yearly compliance questionnaire. Those fees are set by the provider, so they differ between quotes.
Who has to comply?
Every business that takes card payments, whether through a card machine, over the phone or online. What is asked of you depends on how you take payments and how much you take. Smaller businesses are usually asked to complete a short self-assessment questionnaire, often once a year.
The charges to look for
- Monthly PCI fee: a fixed charge each month, sometimes per terminal.
- Non-compliance fee: an extra charge if the questionnaire is not completed, which can make the monthly cost much higher.
- Set-up or annual fees: one-off or yearly charges that appear on the first statement.
Add these up with your rental and per-transaction fees when you compare quotes. A low headline rate can look cheaper than it is once PCI charges are included.
Everyday habits that help keep card data safe
- Never write down or photograph card numbers.
- Let customers enter their own PIN on the terminal.
- Keep your terminal in sight and put it away safely at close.
- Install software updates when your provider asks you to.
- Don't store card details on paper, spreadsheets or in email.
How to check what you are paying
Look at your last statement for lines such as "PCI", "compliance", "security" or "data protection". If you can't see where it is charged, ask your provider for a full list of monthly fees. Or send us the statement and we'll go through it line by line.
What PayZu charges for PCI
- Zero PCI fees
- £0 upfront and zero hidden fees
- Debit card rates from 0.29%* (T&Cs apply)
*0.29% applies to UK consumer debit cards for businesses with monthly card takings above £40,000. Credit, business and international card rates, and rates for lower takings, are quoted individually. Subject to eligibility and status.
Common questions
What does PCI DSS stand for?
Payment Card Industry Data Security Standard. It is the security standard for businesses that accept card payments.
Do I have to pay a PCI fee?
The standard applies to any business that takes cards, but the fee is your provider's own charge. Some charge monthly, some charge nothing, so it is worth comparing.
Does PayZu charge for PCI compliance?
No. PayZu charges zero PCI fees. Your account manager can explain what applies to your business.
Related
Send your statement — let us beat it
Tell us about your business and we'll come back with a line-by-line comparison. You can also email your statement to info@payzu.co.uk.
- Debit card rates from 0.29% (T&Cs apply)
- £0 upfront
- Zero hidden & PCI fees
- Next-day settlement