PCI non-compliance fee: what it is and how to stop paying it
A PCI non-compliance (or "non-validation") fee is a recurring penalty your processor adds when you haven't completed your annual PCI validation, usually a Self-Assessment Questionnaire (SAQ) and sometimes a quarterly scan. It is different from a PCI compliance fee, which is a program charge for a portal or scans.
How much it costs
One fee guide puts monthly PCI compliance fees at about $15–50 and non-compliance penalties at about $50–150 a month. Real statements show other forms: a TSYS sample has a $59 "PCI annual non-scanable" fee; an Elavon sample shows both a monthly PCI fee and a PCI non-compliance fee.
How to stop it
- Log into the PCI portal your processor names (not a random search result).
- Complete the SAQ that matches how you take cards; run the approved scan if required.
- Keep the attestation PDF.
- Ask your processor, in writing, to remove the fee from the next cycle and to refund past months. Refunds aren't guaranteed.
Red flags: a compliance fee and a non-compliance fee in the same month, or a non-compliance fee that continues after you filed.
FAQ
Is a PCI non-compliance fee legally required?
No. The PCI Security Standards Council does not set these fees; processors and acquiring banks set and charge them.Will filing the SAQ refund past fees?
Filing usually stops the fee going forward. Refunds of past fees depend on your processor and must be requested.What's the difference between a PCI fee and a PCI non-compliance fee?
A PCI (compliance) fee pays for a program such as a portal or scans. A non-compliance fee is a penalty for not validating.Related
Effective rate guide · Interchange-plus vs flat rate · Fiserv / Clover · TSYS · Elavon
Sources
- Clearo Payments: PCI compliance fees
- Omega Bank Card: PCI non-compliance fees
- Payments & Risk: Processor fees guide
- TSYS sample statement
- Elavon statement guide (UK)
Last reviewed Oct 2026. Statement layouts change; your statement may differ. Not legal or financial advice.