Great Rates!                   Great Service!

Great rates, great service!

PCI Compliance

If you're an existing merchant that needs to undergo PCI registration, please click the link below:

If you are an existing merchant who needs to complete their online PCI (Payment Card Industry) compliance form pursuant to the letter you recently recieved, please click here and you'll be redirected to our independent third-party to begin registration. Please log in between November and December 31st, 2011 (or soon thereafter) to complete your PCI questionaire.

The initial login ID is your merchant number starting with 512178340XXXXXX and your zip code will be your initial password. If you are a new merchant or you didn't complete the questionaire last year, click 
here for instructions.

If you would like to review a sample PCI security policy, click
here.

What is PCI Compliance and Why Does it Matter?

Read the whole story on PCI at www.pcisecuritystandards.org, but a basic summary can be read here:

Credit card fraud is expensive, and these costs inevitably get passed on to merchants in the form of higher costs. Merchants need to protect card holder data. To be PCI compliant:
(1) Make sure your receipts do not show the entire credit card number on either the merchant or customer copy.
(2) If you use a pin pad for debit card transactions (put in 4 digit PIN), the pin pad may need to be replaced if it isn't triple DES encrypted (most pin pads older than two years need to be replaced).

If you receive a call from someone saying they are from Visa, etc. (or that you are set up as Retail vs. Healthcare) and that you are not PCI compliant so they need to come by to check out your equipment. PLEASE know there is no regulatory body doing this! They are simply another processor trying to solicit business with underhanded scare tactics. It is the software that you download that makes you PCI compliant and Best Card (via First Data, the largest processor in the world) has updated software for nearly all terminals. Call us if your receipt shows the entire credit card number.

Merchants are to:
(1) have a policy that is reviewed annually which designates how your business protects card holder data.
(2) complete a questionnaire annually. If you already completed the online questionnaire in prior years, you can simply log in and verify that there are no changes from prior year. If you have never completed the questionnaire (hint-answer yes to all questions to pass), please follow the link at the top of the page.

If you have an online system (not a terminal), you need to have quarterly scans completed to ensure that proper firewalls are in place, etc. to prevent hacking attempts. Do not keep credit card numbers stored in any electronic format on your hard drive (excel customer data file, etc.). If you have recurring transactions, we will set you up on an online system with use of a PCI compliant system (our most popular is eProcessingNetwork, but any gateway we refer you to will store credit card numbers in the proper encrypted format). You can be fined by Visa/MasterCard/Discover if you are non-compliant. Most processors charge annual fees up to $179 and a $15-$20 monthly fee if non -compliant. Best Card does not charge a non-compliance fee but ultimately you, the merchant, are responsible for being PCI compliant. Our nominal annual PCI fee ($30) was charged 11/2011and will not be charged again until 11/2012.

Call us at 877.739.3952 if you need assistance.
Web Hosting Companies