So, two of my clients have received a letter from Elavon (formally) NOVA indicating that they need to pay a third party "Qualified Security Assurance Assessor" to validate their PCI Compliance. This is bullshit. The merchants in question do not store cardholder data. My clients have been told they have until Dec. 15th to get this assessment; or, pay $135.00 a year to Trustwave, until all of the issues are hammered out.
The claim is simply not true. If you look at the PCI Compliance website it lays out the level of PCI Compliance to which one must conform. If you are selling stuff online and you are not storing cardholder data, you should be done. Instead, the credit card companies are asking you to shell out cash to have verification performed.
I'm not against PCI Compliance. In fact, it is a legitimate concern; however, if you are not storing credit card numbers, and you aren't doing 2 million dollars worth of transactions, you are in compliance. This is an extortion racket created by the credit card companies to scare merchants into buying things they can't afford. Why this surprises me, I'm not sure: what's the point of having a credit card if you're only going to buy things you can pay for outright? My recommendation to my clients is to refuse to accept credit cards on their sites and instead sell through PayPal or Google Checkout. There is no excuse for punishing people who are abiding the principle and the letter of the PCI standards by squeezing them for money. I find it interesting that this letter arrived with a deadline two weeks before Christmas and when Congress is out of session. I see that Elavon donated to the McCain campaign; so, I can bet they are trying to strike while the iron is hot.
If you're reading this, please use cash. Stop working for these bastards. They don't care about you except how they can get you to give them money for nothing. I am a capitalist and I don't mind trading my money for a service; but, this is gangster behavior and it must stop. Until it does, create a PayPal account, and fire these assholes.
Monthly Archives
- August 2010 (1)
- January 2010 (2)
- August 2009 (1)
- June 2009 (2)
- May 2009 (1)
- April 2009 (1)
- February 2009 (1)
- December 2008 (1)
- November 2008 (1)
- June 2008 (3)
- May 2008 (6)
- January 2008 (2)
- November 2007 (4)
- October 2007 (2)
- September 2007 (5)
- July 2007 (4)
- June 2007 (2)
- May 2007 (4)
- April 2007 (5)
- March 2007 (1)
- February 2007 (3)
- January 2007 (3)
- December 2006 (7)
- October 2006 (3)
- September 2006 (1)
- August 2006 (2)
- July 2006 (4)
- June 2006 (1)
- May 2006 (3)
- April 2006 (4)
- March 2006 (4)
- February 2006 (7)
- January 2006 (4)
- December 2005 (2)
- November 2005 (4)
- October 2005 (2)
- September 2005 (3)
- August 2005 (6)
- July 2005 (3)
- June 2005 (4)
- May 2005 (1)
- April 2005 (5)
- March 2005 (3)
- February 2005 (1)
- January 2005 (9)
- December 2004 (1)
- November 2004 (4)
- August 2004 (2)
- July 2004 (3)
- May 2004 (1)
- April 2004 (1)
- November 2003 (3)
- April 2003 (2)
- March 2003 (1)
- December 2002 (1)
- November 2002 (2)
- October 2002 (1)
Pages
OpenID accepted here
Learn more about OpenID
Search
About this Entry
This page contains a single entry by Benjie published on December 6, 2008 2:54 PM.
Happy Day was the previous entry in this blog.
Interesting tidbit. is the next entry in this blog.
Find recent content on the main index or look in the archives to find all content.

Leave a comment