Home / Client help / That PCI email

That PCI email, explained.

PCI is the card industry's set of security rules. Every business that takes cards is expected to meet them. It sounds like a big job. For most of our clients it isn’t.

Why you got it

Processors check every account. An email about PCI, or a fee on your statement called "non-compliance", usually means their records about you’re incomplete. It rarely means you did something wrong.

What to do

  1. Don’t pay anyone who emails you about PCI unless we have told you it is real. Scam emails copy the real ones.
  2. Don’t fill out a long security questionnaire on your own.
  3. Forward it to [email protected] or call 929-930-3973. We check your status with the processor and tell you exactly what, if anything, they need from you. Most of the time it is nothing, or one short step.

A non-compliance fee on your statement

Call us. That fee shouldn’t be there for an account in good standing. We ask the processor to look at it the same day and to reverse it if it was charged by mistake.

Keeping card data safe day to day

  • Never write down or store full card numbers.
  • Never ask for a card number by email or text.
  • Keep your terminal where customers can’t reach behind or under it.
  • Change the default password on any online payment account, and don’t share logins.

Last checked 19 October 2026. Kept up to date by our Customer Service team.

Need a hand?

Still stuck? Call us and we’ll sort it out with you.