Your PCI compliance level is determined both by your total sales and whether those sales
were made from a physical location or over the Internet. Let's say your online sales
rise more quickly than do sales through your physical locations. Your revenue may
not rise dramatically, but the number of online transactions you're conducting will,
which could tip you into another compliance level with additional requirements.
Your card level is based on the number of transactions per card brand – Visa, MasterCard,
American Express, etc. You're probably already tracking the number of credit card
vs. debit card transactions you're conducting, but not the card brands.
Let's say that all the large banks in your area suddenly shift their credit card accounts
from MasterCard to Visa. Within six months to a year, without your overall revenue
or the number of your overall transactions changing, you could change merchant levels
and be held to a higher compliance standards.
Learn more about your PCI DSS Compliance Levels or
download our PCI Compliance Guide.