It’s Wednesday, which means it’s time to tackle another high stakes retention crisis in the merchant services trenches. Today, we’re looking at a scenario that happens all too often when administrative details slip through the cracks: The PCI Non Compliance Penalty Trap.
Here is this week’s scenario. What would you do?
The Merchant & The Setup
You have a local auto parts distributor who’s been with you about 14 months. They average $50,000 a month in card volume across about 600 transactions. You set them up on a competitive Interchange + 50 Basis Points (0.50%) and $0.06 per transaction pricing structure.
They’ve been a low-maintenance, reliable account. You collect a healthy monthly residual, and everybody is happy—or so you thought.
The Crisis: $1,188 in Hidden Penalties
On Tuesday morning, the business owner calls your cell phone, and he is absolutely livid. He just finished his annual bookkeeping audit with his CPA.
“You told me my rate was 50 basis points and 6 cents a transaction! I just went through my last 12 statements, and there is a $99 ‘PCI Non-Compliance Fee’ tagged onto EVERY single bill! That’s $1,188 in penalty fees because of some online questionnaire nobody told me about! You sent automated marketing emails, but you never called me to walk me through it. Refund the full $1,188 by Friday, or I’m canceling my account and filing a dispute with my bank.”
You check your ISO/processor dashboard right away. Sure enough, they’ve been hit with the $99 monthly fee for 12 straight months.
The Catch: Your processor’s policy strictly caps non-compliance fee refunds at a maximum of 3 months ($297). The remaining $891 is completely un-refundable by the bank. If it gets paid back, it’s coming directly out of your pocket.
What Would You Do?
You need to diffuse the anger, protect your reputation, and prevent a profitable $50k/month account from walking out the door. Which path do you take?
Option A: The Out-of-Pocket Bullet
You take full responsibility for the communication breakdown. You secure the maximum $297 processor refund, and then you write a check or issue an agent rebate for the remaining $891 out of your own money. You sit down with the owner that afternoon, complete the PCI Self-Assessment Questionnaire (SAQ) together, and make sure the fee is permanently eliminated.
Blau Option B: The Margin Restructure (The “Invisible” Refund)
You explain the strict 90-day bank refund cap ($297), but you offer an alternative to make them whole. You adjust their pricing markup from 50 Basis Points down to 35 Basis Points (0.35%). On $50,000 in monthly volume, that 15 BPS rate cut saves them $75 a month ($900 over 12 months). You show them on paper how this structured rate cut gives them back their $891 over the next year without draining your personal cash today.
Option C: The Paper Trail & Hard Line
You schedule a face to face meeting and bring receipts. You politely show them the paper trail: five automated PCI compliance emails, two text alerts, and the warning notice printed directly on their monthly statements over the past year. You issue the allowable $297 refund, help them fill out the SAQ on the spot to stop future fees, and firmly explain that regulatory PCI compliance is ultimately the merchant’s legal responsibility.
The Industry Reality Check: Compliance vs. Relationship
Now these PCI non compliance fees are one of the biggest sources of merchant churn in our industry. Processors love them because they generate pure margin, but for us, they are a ticking time bomb. While it’s technically the merchant’s duty to complete their annual SAQ, business owners expect their payment partner to keep them out of harm’s way. When a merchant feels blind-sided by $1,000+ in fees, logic takes a back seat to emotion.
Weighing the Options Before You Vote
- If you choose Option A (The Out-of-Pocket Bullet): You restore 100% of the merchant’s trust immediately by proving you stand behind your service. But taking an $891 hit wipes out months of your net margin on a $50k account.
- If you choose Option B (The Margin Restructure): You solve the financial problem cleverly using future savings rather than immediate cash. However, if the merchant demands cash back now, offering a future discount might sound like an excuse to avoid paying what they feel they are owed.
- If you choose Option C (The Paper Trail): You protect your margins and enforce business accountability. But even if you are 100% in the right legally, an angry merchant with a point to prove may still switch to a competitor just to spite you.
SO, WWYD?
How do you handle PCI fee blowups when the bank won’t refund the full amount?
Drop your choice in the comments below: Option A, B, or C?
If you have a different strategy or a automated workflow you use to prevent your merchants from ever hitting non-compliance in the first place, let’s hear it in the comments!
Happy Selling,
David
