GlobalPayments PCI Compliance

[Deleted member 171865]

I feel like I'm being scammed at the moment, would anyone be able to let me know what I can do in this position?

I have a small merchant account, one card machine, don't keep card details, don't keep any details, I just process the card, done.

Global payments have warned a £50 PCI Compliance Fine if I do not comply.

Global payments kindly offer that I can use their 'preferred partner' Security Metrics for £3.50 a month + VAT

Global payments state that I can utilise an alternative QSA for my Compliance but there will be an 'administration charge' of £3 a month if I choose to do so.

Thus they force me to use Security Metrics or face paying more. This seems to be anti competitive.

 

[Nexolutions]

Hello.

I work for Nexolutions/Payment Nexus and we're a PCIDSS specialist.

Unfortuantely, however small the business; if you process card transactions at all, you are required to be compliant or else you will be fined monthly by Global Payments.

This is standard procedure for all big banks.

Could I ask you to PM some more details about your business so we could discuss your compliance in further detail?

 

[LMDServicesUK]

Hi RealGeek

You are not being scammed..

Please see my previous post on this subject, and as mentioned by the previous poster, this is an Industry wide scheme so you have to register as PCI Compliant if you handle any form of payment card information.

http://www.ukbusinessforums.co.uk/forums/showthread.php?t=297502&highlight=PCI+Compliance

You need to complete the SAQ for your business (FoC every 12 months) and Global Payments should provide you a link to the provider that manages it on their behalf.

If you do not you will be fined a monthly fee that starts at £ 10 and will increase to £ 50 a month until you become compliant. There is a 3 month grace period for you to meet this requirement however.

The management fees are Merchant Service Provider dependent but usually range from between £ 3.50 to £ 4.99 a month depending on the Provider.

Key thing here is you need to get registered as compliant irrespective as to who you use and ensure that you advise Global Payments accordingly.

If you need any more help re this please feel free to PM me.

Rgds

Mark

 

[Optegris]

I think the point the OP was making was that he felt he was being forced to use SM and being penalised if he didn't.

Unfortunately SM tied up a large chunk of the market with agreements with the major banks but to penalise you for using someone else would be enough for me to tell my merchant provider to shove it and go and use some else so I could select my QSA.