NCR Merchant Solutions PCI Compliance Program – Update
Many of NCR Counterpoint merchants use NCR Merchant Solutions for credit card processing
Merchants using NCR Merchant Solutions are enrolled in the NCR Merchant Services PCI Compliance Program to ensure the merchants were as protected as possible from credit card threats, and to verify PCI DSS compliance. Starting in March, 2014, a monthly fee began to be assessed against merchants who had not verified PCI compliance with NCR Merchant Services, either via a self-assessment questionnaire (SAQ), a report from a qualified security assessor (QSA), or both. This fee will continue until PCI DSS compliance is verified by the merchant.
The instructions for the merchant are straightforward the merchant needs to log on to https://pci.trustwave.com/ncrmerchantsolutions and complete the validation process.
The note below was emailed to all NCR Merchant Services users, so this is legitimate and something that needs to be addressed:
"Small businesses are the number one target for criminals to steal cardholder data. To help you reduce your risk, you were previously enrolled in the NCR Merchant Solutions PCI Compliance Program designed to help you protect your business from cardholder theft and become PCI DSS (Payment Card Industry Data Security Standard) compliant. Our system indicates that you have not validated your compliance as required so beginning in March 2014, a Monthly PCI Non-Validation Fee of $19.99 is being added and will be billed until your compliance is validated.
Please log on to https://pci.trustwave.com/ncrmerchantsolutions to complete your validation process. Have your MID and DBA (the business name at the top of this processing statement) ready for easy access."
If you have any questions related to the above issue, please contact the CCS Retail Systems Support Department.
– John