PCI fees and equipment leases: the two statement lines you can actually control

What a PCI fee is, and what it is not

PCI DSS is the security standard the card networks expect of every business that accepts cards. For most small merchants, meeting it means completing a Self-Assessment Questionnaire — a form about how you handle card data, not a payment. The PCI Security Standards Council publishes the standard and the questionnaires; nobody has to buy anything to attest.

The confusion starts because two different lines both get called "PCI", and they are not the same charge.

The distinction matters, because one of these is a penalty for missing paperwork and the other is a service you are paying for — and you treat them differently.

• ·A PCI non-compliance fee — a surcharge added when a questionnaire was never completed or has lapsed. It pays for nothing; it is a penalty.
• ·A PCI compliance program fee — a monthly service charge for compliance support, scanning or insurance. This one buys something, whether or not you need it.
• ·Both are usually billed monthly and easy to miss inside a long statement.

How to make a non-compliance fee go away

A non-compliance surcharge is charged because an attestation is missing — so the fix is to complete it. Most processors provide a portal for the Self-Assessment Questionnaire; you answer the questions honestly, and completing it usually removes the surcharge from the next statement entirely.

One catch: the attestation lapses, typically once a year, and the fee quietly returns when it does. Treat it like a renewal, not a one-time task. With some platforms the attestation is handled for you as part of the service, in which case there is nothing to renew — worth confirming which situation you are in.

A PCI program fee is a different decision. That is a service being sold to you; the question there is not how to remove it but whether you want what it provides.

• ·Find the "PCI" line on your statement and ask which of the two it is
• ·If it is a non-compliance surcharge, complete the questionnaire through your processor's portal
• ·Diarise the annual renewal so it does not lapse and the fee does not return
• ·Check the following statement to confirm the surcharge is gone

Why an equipment lease is often the most expensive line

The single most costly line on many legacy statements is not a processing fee at all — it is an equipment lease. It is worth reading closely, because a lease behaves differently from every other charge on the page.

Leases are frequently sold by a separate leasing company, on a separate contract from your processing agreement. That means switching processors does not end the lease, and the lease can be non-cancellable for its full term. Many carry a personal guarantee, which can survive even closing the business, and the term often outlasts the hardware it paid for.

• ·It is usually a separate contract with a separate company, not your processor
• ·It is often non-cancellable for the full term, whatever happens to your account
• ·It may carry a personal guarantee that outlives the business
• ·The term frequently runs longer than the working life of the device

Lease or buy: the SBA's own trade-off

The U.S. Small Business Administration lays the choice out plainly. Leasing needs less cash or credit upfront and the payments are typically tax-deductible — but the lifetime cost is normally higher than buying. Buying needs more cash upfront and you take on maintenance, but you can claim depreciation and the lifetime cost is usually lower.

For a card reader specifically, that maths has shifted: modern readers are inexpensive to buy outright, which makes a multi-year lease harder to justify than it once was. The SBA's own advice is that every lease is structured differently — so before signing, read the buyout terms, the length, and the early-termination penalty, and have an attorney look at anything unclear.

• ·Leasing: less cash now, payments usually deductible, higher lifetime cost
• ·Buying: more cash now, depreciation, usually lower lifetime cost, you own maintenance
• ·Before you sign: check the buyout option, the term length, and the early-termination penalty
• ·Get the whole lease in writing and read the parts nobody reads

Finding both lines on your own statement

You do not need to change anything to check this — you need last month's statement and a few minutes. Find the PCI line and work out whether it is a penalty you can remove or a service you chose. Find the equipment or lease line and note whether it is your processor's or a third party's, and when it ends.

These two lines are separate from your effective rate — the single figure that tells you what card acceptance really costs you. If you want that number too, our calculator at /effective-rate works it out from your own totals without sending anything to a server.

• ·Locate the monthly PCI line and identify which kind it is
• ·Locate the equipment or lease line
• ·Note who holds the lease — your processor or a separate company
• ·Note the lease end date and whether you own the hardware after it

If you would rather not dig through it

Send us last month's statement and we will mark which lines are avoidable — the PCI penalty, the lease, and anything else that pays for nothing. It is free, there is nothing to sign, and if your current deal is fair we will say so; that outcome is common enough that we plan for it.

We are a reseller, so we earn only if you eventually switch and process. That is the bias, stated up front, so you can weigh the analysis knowing where it comes from.