Free Engineering Workbench calculator
PCI DSS merchant level
Find your card merchant level and what you must do each year to validate PCI DSS compliance.
Governance, risk & complianceHow it's worked out
- Level 1: over 6 million transactions a year or a breach. Level 2: 1 to 6 million. Level 3: 20,000 to 1 million e-commerce. Level 4: fewer than 20,000 e-commerce, or up to 1 million overall
- Visa merchant level definitions
NoteCard brands and acquirers set levels, and they can differ. Confirm with your acquirer. Check the PCI DSS version your acquirer validates against.
Source: Visa and Mastercard merchant level definitions; PCI DSS v4.0.1 (PCI SSC)
Need help acting on this number?
VVnT SeQuor's ISO & Compliance Implementation practice helps teams turn this metric into a plan.