A PCI compliance fee is a processor charge for the program that helps you meet card-security standards, often around $10 a month or $100 a year. A PCI non-compliance fee is a separate monthly penalty, commonly $20 to $50 or more, charged when your yearly security questionnaire isn't on file. You can usually stop the penalty by completing the questionnaire in your processor's portal.
Key takeaways
- PCI DSS is the card industry's security standard for businesses that accept cards.
- The compliance fee pays for the program; the non-compliance fee is a penalty for not validating.
- Most small and mid-size businesses validate with a yearly self-assessment questionnaire.
- Paying a non-compliance fee every month is one of the easiest overcharges to eliminate.
PCI compliance fee vs. non-compliance fee
| PCI compliance fee | PCI non-compliance fee | |
|---|---|---|
| What it is | A charge for the processor's PCI program and tools | A penalty when your account isn't marked compliant |
| Common cost | About $10 a month or about $100 a year | About $20 to $50 a month or more, until you validate |
| Avoidable? | Sometimes included free; negotiable | Yes, by completing your questionnaire |
Costs vary by processor. Check the fee section of your statement for the exact names and amounts.
How to stop paying the non-compliance penalty
- Find the fee in the fee section of your statement (our merchant statement guide shows where). It may say "PCI non-compliance," "PCI non-validation" or "non-receipt of PCI validation."
- Log into your processor's compliance portal or call support for the link.
- Complete the self-assessment questionnaire (SAQ). Most businesses using a standalone terminal or a hosted payment page qualify for a shorter version.
- Run the network scan if your setup requires one.
- Check your next statement to confirm the fee is gone, and set a reminder to renew every year.
Why this matters beyond the fee
Good news: PCI fees, like other processing fees, are generally deductible (see are credit card processing fees tax deductible?). PCI fees are only one of the monthly charges that inflate your rate; see what normal processing fees look like and how to cut them. A data breach costs far more than any monthly fee. Being compliant means you're protecting card data the way the card brands require, which also helps if you ever need to dispute liability after a breach. A processing partner that handles validation with you saves both the penalty and the paperwork.
Frequently asked questions
What is a PCI compliance fee?
What is a PCI non-compliance fee?
How do I stop paying PCI non-compliance fees?
Is PCI compliance required by law?
Can I avoid PCI fees entirely?
This article is general information, not legal, tax or financial advice. Card network rules and state laws change; confirm the rules for your business before changing how you charge customers.