TOPIC: Credit Card PCI Compliance Letter

Hi Guys,

All of you using our credit card processing service just received or will soon receive a letter from First National about PCI Compliance (I received my letter Saturday the 29th).

PCI compliance is something being FORCED upon all banks (see www.paypal.com/pcicompliance for paypal and their new $30 a month charge) and their credit card users by Visa, Mastercard, AMEX, etc, as a way to reduce the chances that your computer or website can be hacked and the credit card numbers stolen. Because of several large hacks recently on Barnes & Noble, Heartland Bank and a few others, totaling over 100 million card numbers being stolen, credit card companies are looking for ways to reduce break data theft (and their liability).

What is PCI Compliance? Basically a scan is done on your computer and web server (ours for 99% of you guys) to look for any security leaks. You can read more about it here: en.wikipedia.org/wiki/Payment_Card_Indus...ta_Security_Standard . It also involves checking into how you collect credit card info and store it until you enter it into the payment system.

What does this mean for you? Right now it means that you have to pay $10/$120 a year to a third party (money does not go to the bank) to say you comply. I'm trying to work on a workaround with the bank if users don't ever use the payfuse login, we'll see where that goes.

The letter you received should have stated you had until October 31st to comply. Seems like there was an error on the bank end.

I have already talked to our attorney about this as I had a user want to cancel because of this. According to him, since this is a change to the agreement you signed with First National you will be able to cancel your contract without penalty. I'm working on who at First National to contact if this is the path you choose.

I'll update you guys as I get more info over the next few days. Let me know if you have any more questions you want me to pose to the bank.

I agree, I am not going to offer credit card services anymore.  I knew that there would be a way for these processors, banks or whomever these blood suckers are to raise their fees.  I agree that this was NOT in the original agreement and removing myself from First National should NOT cause penalty.  They had better honor this, or to court we go...

I am sick and tired of being bleed dry form these credit card companies....I get maybe 1% using these services anyway.  Bye Bye First National. >

Hey Bob,

Unfortunately every bank / processor will have to have compliance in place by the end of the year. This isn't something the banks wanted (as they're going to lose members and have to comply themselves). As you can see paypal is going to be charging 30 bucks a month via McAfee who is doing their scans so I'm glad First National chose a compliance company (Trustwave) that charges so much less.

I'm trying to find a way around this by removing users payfuse access and only allowing their direct data entry in the web page. I'm hoping this will avoid all fees. I'll fin out in the next few days.

I agree, frustrating as can be though.

The 30.00 per month for paypal is for what usage?  Does that mean that we have to pay 30.00 per month on top of the web hosting fee in order to use their services for payments?

I believe I am leaning towards canceling my credit card account as well.
Not worth it and 99% of my clients are fine with paying by check or cash.

The only good I have noticed is if a client forgets there check.

Thanks Dominic.
I received my letter yesterday. Let us know what transpires, but I feel we will all be required to pay these fees as individual business owners.