Merchant Levels are designated by the PCI Standard as
Follows:
MasterCard Merchants
Level 1
Any merchant, regardless of acceptance channel, processing over 6,000,000 MasterCard transactions in a 12 month period.
Requirements
- Annual On-Site Assessment performed by QSA or accredited internal staff.
- Quarterly Network Scans. Sign up for Free Quarterly PCI Network Scan Offer
All merchants should have validated compliance by June 30, 2011.
Level 2
1 million - 6 million MasterCard transactions in a 12 month period.
Requirements
- Self-Assessment Questionnaire performed by accredited internal staff or on-site by QSA.
- Quarterly Network Scans. Sign up for Free Quarterly PCI Network Scan Offer
Merchants should have validated compliance by June 30, 2011.
Level 3
Between 20,000 and 1 million MasterCard e-commerce transactions in a 12 month period.
Requirements
- Self-Assessment Questionnaire (SAQ)
- Quarterly Network Scan. Sign up for Free Quarterly PCI Network Scan Offer
Merchants should have compliance within 12 months from date of notification.
Level 4
Less than 20,000 e-commerce or less than 1 million transactions with one card brand
Requirements
- Self-Assessment Questionnaire (SAQ)
- Quarterly Network Scans. Sign up for Free Quarterly PCI Network Scan Offer (Submission to acquirer not mandatory)
Visa Merchants
Level 1
Any merchant, regardless of acceptance channel, processing over 6,000,000 Visa transactions in a 12 month period.
Requirements
- Annual On-Site Assessment performed by QSA or accredited internal staff.
- Quarterly Network Scans. Sign up for Free Quarterly PCI Network Scan Offer
Merchants should have validated compliance by September 30th of the year following notification.
Level 2
1 million - 6 million Visa transactions in a 12 month period.
Requirements
- Self-Assessment Questionnaire performed by accredited internal staff or on-site by QSA.
- Quarterly Network Scans. Sign up for Free Quarterly PCI Network Scan Offer
Merchants should have validated compliance by December 31, 2011.
Level 3
Between 20,000 and 1 million Visa e-commerce transactions in a 12 month period.
Requirements
- Self-Assessment Questionnaire (SAQ)
- Quarterly Network Scans. Sign up for Free Quarterly PCI Network Scan Offer
Merchants should have compliance within 12 months from date of notification.
Level 4
Less than 20,000 e-commerce or less than 1 million transactions with one card brand
Requirements
- Self-Assessment Questionnaire (SAQ)
- Quarterly Network Scan. Sign up for Free Quarterly PCI Network Scan Offer (Submission to acquirer not mandatory)
