All merchants will fall into a merchant level based on credit card transaction volume over a 12 month period. (Transaction volume is based on the aggregate number of credit, debit and prepaid transactions.)

In case where a merchant has more than one DBA (Doing Business As), acquirers must consider the aggregate volume of transactions stored, processed or transmitted to determine the validation level. If data is not aggregated, acquirers will continue to consider the DBA’s individual transaction volume to determine their validation level.

Merchant Level 2
Criteria: 

Any merchant that processes 1 million – 6 million Visa or MasterCard transactions annually

 

Validation Requirements:
  • Annual Self-Assessment Questionnaire (SAQ)
  • Quarterly network scan by an Approved Scan Vendor (ASV)
  • Verification of Compliance Form

 

Merchant Level 3
Criteria: 

Any merchant processing 20,000 to 1 million Visa or MasterCard e-commerce transactions annually

 

Validation Requirements:
  • Annual Self-Assessment Questionnaire (SAQ)
  • Quarterly network scan by an Approved Scan Vendor (ASV)
  • Verification of Compliance Form