Categorize Payment Attestation For Free

Level 1: Merchants that process over 6 million card transactions annually. Level 2: Merchants that process 1 to 6 million transactions annually. Level 3: Merchants that process 20,000 to 1 million transactions annually. Level 4: Merchants that process fewer than 20,000 transactions annually.

The following are the 4 levels of PCI compliance: Level 1: Merchants processing over 6 million card transactions per year. Level 2: Merchants processing 1 to 6 million transactions per year. Level 3: Merchants handling 20,000 to 1 million transactions per year.

PCI Level 3 applies to merchants that handle between 20,000 and one million annual e-commerce transactions. They must complete the annual evaluation using the appropriate SAQ. It may also require a quarterly PCI ASV scan.

If your organization meets any of these criteria, it qualifies as a PCI Level 3 merchant: Processes between 20,000 and 1 million Visa e-commerce transactions annually. Processes 20,000 Mastercard e-commerce transactions annually, but less than or equal to 1 million total Mastercard transactions annually.

Level 4 applies to merchants that process fewer than 20,000 Visa or Mastercard e-commerce transactions per year or up to 1 million total Visa or Mastercard credit card transactions and that have not suffered a data breach or attack that compromised card or cardholder data.

There are four levels, or tiers, of PCI compliance that merchants are organized under based upon their card transaction volume (credit, debit, and prepaid) over a 12-month period. If a merchant suffers a breach that results in account data compromise, they may be escalated to a higher level of compliance.

Payment Card Industry Data Security Standard (PCI DSS) Level 2 merchants are those that process between 1 and 6 million Visa, Mastercard, and Discover transactions per year; 50,000 to 2 million sales using American Express, and fewer than 1 million JCB International credit card transactions.