Question

Why am I getting emails about pci compliance. I only take payments with quickbooks

Forum|Forum|1 year ago
September 9, 2024
6 replies
0 views

Original commenter did not share additional details

QuickBooks Self-Employed

I appreciate you taking the time to express your concerns, @jkoenzuraida. Let me provide information about why you're getting emails about PCI compliance.

To start with, Intuit has a PCI service provider to help our QuickBooks Payments subscribers meet Data Security Standard (DSS) compliance requirements. If you've set up a QuickBooks Payments account to link with QuickBooks Self-Employed with SecurityMetrics, you'll have to complete its FastPass. This compliance is necessary if you purchase the PCI package from SecurityMetrics, which is why they charge a fee for the service.

In addition, you'll also need to complete Self-Assessment Questionnaires (SAQ) and set up your scans. You should also receive email instructions. If you haven't received email instructions, you can find more details about PCI compliance and your roles in this article: Learn about QuickBooks PCI Service.

To learn more about PCI data security standard compliance services, check this article:

Learn about the PCI DSS Compliance services.

Please let me know if you have any follow-up questions about PCI compliance, @jkoenzuraida. I'll be more than happy to answer them.

K

kcharleskc

Does this apply to non-profits and companies that have low credit card usage?

J

JoanaC

Let me shed you some confirmation about the PCI Compliance, @kcharleskc.

Yes, PCI Compliance applies to all businesses, including non-profit merchants, that meet the security standards established by the PCI Security Standards Council.

Since the merchant will collect information from your customers when they make card payments, PCI compliance is mandatory as long as the company receives or accepts any card.

To learn more about PCI compliance, here's an article for you to check out: Learn about QuickBooks PCI Compliance.

I'll be here if you still have questions about your payments. Have a great day.

J

Just_me

@jkoenzuraida It's totally because QB doesn't want to pay it, so they are trying to force it's customers to pay it instead. If you HAVE to be PCI compliant, use a different company, NOT the one that QB is partnered with. They are as shady and horrible as QB is.

I

Is-this-a-scam

Have you found a loophole or other company that charges less or free? Seems scammy to me...

O

Only-GoPayment

If I only use Intuit's GoPayment on my phone, no other Intuit products. for maybe a hundred CC transactions a year, why would I need to purchase a PCI compliance package?

A

Aldren18

Even with minimal GoPayment transactions, prioritizing PCI compliance is essential for protecting your business and ensuring compliance with industry regulations. Let me share more about this data security requirement.

All businesses that handle credit or debit card transactions are required to comply with PCI DSS, regardless of transaction volume. It includes small businesses using mobile payment solutions like GoPayment. While the necessary level of compliance may vary based on transaction volume, the fundamental need for compliance remains.

To gain a comprehensive understanding of QuickBooks PCI compliance and the Payment Card Industry Data Security Standard (PCI DSS), I highly recommend exploring this informative article: Learn about the PCI DSS Compliance services.

This resource delves into the essential requirements, best practices, and tools necessary to ensure your business meets the rigorous standards set forth by the PCI Security Standards Council.

Furthermore, I’m pleased to share these valuable resources designed to help you effectively manage your payments through the QuickBooks GoPayment app. These guides will empower you to streamline your payment processes and enhance your overall customer experience:

I'm here to help with questions or concerns about QuickBooks Payment Card Industry Data Security Standard (PCI DSS) compliance. Let me know by commenting down below. I'm dedicated to ensuring that your experience is both satisfying and secure.

O

Only-GoPayment

I've spoke with SecurityMetrics regarding this. I only run GoPayment on a single cell phone. I do not know if GoPayment stores the whole CC number and CCV info. At minimum they want me to purchase an $85 basic plan and a $10 phone scan, plus tax I would assume. Seems that no one can tell me if what GoPayment stores by default is of actual concern or not. So I feel like I'm just being fleeced for something that will actually do nothing. Kevin at SecurityMetrics recommended that if I feel that way, I should just stop taking CC as payment.

Seems like Intuit may have lots of clients just using GoPayment. Shouldn't there be a better definition of what is or is not required for just something that simple? Intuits own description of what happens when your purchase a plan is quite vague. Buy it and start a scan. Really? What exactly is being scanned and for what? I certainly don't need one more scanning utility on my phone.

J

JG Jup

As a long time customer: Quicken 1990, and then through Desktop, then Enterprise Desktop and now QB online 2024: Finding a new provider for accounting, invoicing and payments processing has found my to do list. email invoicing message failures + the PCI compliance runaround complimented by support ambivalence.

Great concept: punish the customer

I

Is-this-a-scam

I NEVER handle payments and understand that a previous explanation purported that even if ONLY names and invoice dates are accessible via my portal, that I need to be PCI compliant. WHY? I have NO access to any payment information WHATSOEVER. This seems like a scam to me, as merchants who have NO data to "comply" with or risk breech with and mandate $85 for something that Quickbooks handles in their own security measures. What happens if I don't "comply"?

BTW, I'm expecting some pat answer from QB that says we need to do it anyway and wondering if anyone has found a loophole or a less expensive route.

I

Is-this-a-scam

I NEVER handle payments and understand that a previous explanation purported that even if ONLY names and invoice dates are accessible via my portal, that I need to be PCI compliant. WHY? I have NO access to any payment information WHATSOEVER. This seems like a scam to me, as merchants who have NO data to "comply" with or risk breech with and mandate $85 for something that Quickbooks handles in their own security measures. What happens if I don't "comply"?

BTW, I'm expecting some pat answer from QB that says we need to do it anyway and wondering if anyone has found a loophole or a less expensive route.

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded