MEP001
Well-known member
You are not legally required to do PCI compliance. That's a choice of your merchant processor. You may be able to demand they remove the requirement and the charges if the equipment itself meets compliance. I worked for a company that had an old dial-in card swiper unit, and it cannot be compromised. We started getting demands for $99/month fees, we told them the equipment is secure, they didn't care, so with some creative filling out of the forms we were able to get them to waive it.