SPAM PCI Compliance email by SecurityMetrics is an official partner of Intuit.

Hi there, William.

It sounds like you have received a concerning email regarding PCI compliance, and it's completely valid to want clarity about it. Here's a breakdown of your situation based on your responses:

1. Since you didn't receive an email from Intuit about your PCI compliance requirement, it's worth being cautious. Legitimate communications regarding compliance come directly from Intuit, especially if you have previously engaged with them on this topic.
2. If you're unsure about your compliance status, you can contact our QuickBooks Payment Support Team. They have the right tools to check the compliance status of your Merchant Account.
3. As a merchant, you're required to validate your PCI compliance yearly, which involves resubmitting the SAQ and passing the required scans.
4. Yes, SecurityMetrics is an official partner of Intuit. If you believe that your security is being compromised, you can contact SecurityMetrics support directly.

For more information about PCI Compliance, feel free to check out this article: Learn about QuickBooks PCI Compliance.

You can always reply or reach out to us again if you have more questions or concerns about PCI compliance. We're always here to guide and assist you whenever you need help.

Why am I required to pay someone for this?

Our credit card system is super simple. The  only ones accepted are entered through Quickbooks by the customer with Intuit. It is your system. We don't see, touch, scan  or have POS to use.

I should be able to self authenticate and answer the questions directly. This is what we did last year, but not seeing where it is available anymore. Where is this?

@WilliamK   There are other companies out there that will let you do it for a LOT cheaper than what Security Metrics is charging.  They're a LOT nicer and more professional, as well.  Google it and find one that fits your needs.

Quickbooks should have self-verification with question blanks in place for those with simple operations.

As a small business, I don't need more fees. It took 5 minutes to answer the questions and was done. Was that worth $85 if I could do it myself?

SecurityMetrics was friendly and easy, but like to manage my own things.