- Original Poster
- #1
Hi
Some time before Corona Virus, I had started to setup a Braintree account.
I had been trying to setup an ecommerce site. I did have a business paypal account and had bought the hand held terminal for using with this.
I found the Braintree stuff too much to handle, with Developer and sandbox and what not.
Eventually used the terminal for a few card transactions, customer in person.
Then lockdowns arrived. No longer able to get out to sell stuff. Let the idea of the ecommerce site drift and did not progress that.
HOWEVER :
in the last few weeks I'm getting emails from Security Metrics. They are threatening fire and brimstone and massive fines if I don't go signing up with them and deal with PCI compliance.
Here's a bit from one of the emails : "
This is a notification from the Braintree PCI compliance team. Our previous requests for PCI compliance documentation have gone unanswered and we wanted to make sure, as your account’s Authorized Signer, that you are receiving these communications.
As part of our obligation as a Level 1 Service Provider, [DBA] has now been reported as “Non-Compliant” to the Card Brands and Regional Acquisition Banking Partners. Your business is currently at risk of invoking the maximum amount of fines for merchants that are identified as non-compliant.
What do I need to do?
Your complimentary SecurityMetrics account remains inactive and we have nothing on file to confirm you are adhering to the PCI DSS guidelines as a necessary layer of protection for your business, which is outlined in your Payment Services Agreement. It is vital we are provided with current PCI reporting so that we can update our records accordingly.
"
I never used the Braintree service.
I do use the business paypal account - very occasionally - for inward payments.
So the question is :
Do I need to bother responding to these Security Metrics people?
Is there any benefit in it?
Is there "fines" given that I'll probably never use that Braintree setup?
Some time before Corona Virus, I had started to setup a Braintree account.
I had been trying to setup an ecommerce site. I did have a business paypal account and had bought the hand held terminal for using with this.
I found the Braintree stuff too much to handle, with Developer and sandbox and what not.
Eventually used the terminal for a few card transactions, customer in person.
Then lockdowns arrived. No longer able to get out to sell stuff. Let the idea of the ecommerce site drift and did not progress that.
HOWEVER :
in the last few weeks I'm getting emails from Security Metrics. They are threatening fire and brimstone and massive fines if I don't go signing up with them and deal with PCI compliance.
Here's a bit from one of the emails : "
This is a notification from the Braintree PCI compliance team. Our previous requests for PCI compliance documentation have gone unanswered and we wanted to make sure, as your account’s Authorized Signer, that you are receiving these communications.
As part of our obligation as a Level 1 Service Provider, [DBA] has now been reported as “Non-Compliant” to the Card Brands and Regional Acquisition Banking Partners. Your business is currently at risk of invoking the maximum amount of fines for merchants that are identified as non-compliant.
What do I need to do?
Your complimentary SecurityMetrics account remains inactive and we have nothing on file to confirm you are adhering to the PCI DSS guidelines as a necessary layer of protection for your business, which is outlined in your Payment Services Agreement. It is vital we are provided with current PCI reporting so that we can update our records accordingly.
"
I never used the Braintree service.
I do use the business paypal account - very occasionally - for inward payments.
So the question is :
Do I need to bother responding to these Security Metrics people?
Is there any benefit in it?
Is there "fines" given that I'll probably never use that Braintree setup?
