We have things to say

PCI Compliance for Normal People: Moolah Removes the Headaches

For anyone in the payment world, PCI (Payment Card Industry) compliance can feel like a huge burden. Anyone who has dealt with it first-hand knows how much of a time-suck it can pose, but it’s essential to take seriously. Part of what makes Moolah one of the best credit card processing companies is our efforts to help businesses in all the areas they need it, and PCI compliance is undoubtedly one of these. Knowing you may have some questions, we wrote out some answers:

  1. I’m just a little ma and pop shop—why would fraudsters target me?
    This is a dangerous misconception fueled by the media’s coverage of high-profile data breaches, like those that hit Target and Chipotle. While these epic data breaches command everyone’s notice, huge amounts of crime aren’t publicized. Around 80% of data breaches target small businesses—just like yours. Fraudsters target these small businesses because accepting card payments has more or less become the norm, and they (often rightly) assume that smaller operations won’t have proper security measures in place. Don’t be a statistic!
  2. Isn’t it expensive to get help with PCI compliance?
    Non-compliance is by far the biggest expense. If going it alone, a small or mid-sized business can be crippled by the resulting fees and penalties imposed by credit card companies after a breach, not to speak of potential loss of reputation, and the associated headache of righting the situation.When you partner with Moolah for your merchant account, we offer the security resources of DataGuardian. With us, you don’t have to make a choice about PCI compliance—it’s included. DataGuardian’s totally free PCI program starts you off with a PCI self-assessment questionnaire, which allows you to better understand where your organization is at, and what you need to do to protect your business. From there, you get tons of free resources at your fingertips, and reminders to help keep you up-to-date with your compliance. And we repeat: it’s free.
  3. What if a breach does happen?
    If it can happen to Target, it can happen to anybody. Even when you are fully PCI compliant, bad things can still happen. With DataGuardian at your side, however, you’re still covered. You get $100,000 breach protection to keep your business out of trouble should a breach occur.

Moolah wants to remove the headaches, fear, and uncertainties that surround PCI security. For those who are seeking the best credit card processing company for small businesses, we encourage you to take a look at all that Moolah has to offer.

Oops! We could not locate your form.

Surcharge FAQ

Surcharge Compliance

If you are considering introducing a credit card surcharge for your patients, it is important to understand that there are specific rules and regulations that must be followed when enrolling in and operating under a surcharge plan.

This article provides a general overview of common surcharging requirements. This content is provided for informational purposes only and does not constitute legal advice. It is the responsibility of each merchant to review, understand, and comply with all applicable laws, card-network rules, and regulatory requirements, including notification timeframes, signage requirements, surcharge percentage limits, and jurisdictions where surcharging is prohibited.

If you are unsure about the laws or regulations applicable to your practice, you should consult with qualified legal counsel. Moolah assumes no liability for a merchant’s compliance or non-compliance with credit card surcharging rules or regulations.

Transparent Communication
Card networks, including Visa, Mastercard, Discover, and American Express, require merchants to clearly and transparently disclose when a credit card surcharge is applied.

Practices must clearly notify patients of a credit card surcharge through appropriate signage placed at the practice entrance, at the point of sale or terminal, and anywhere payments are accepted. If payments are accepted online, surcharge disclosures must also be clearly visible on the practice’s website. All disclosures must inform patients that the surcharge applies only to credit card transactions.

Surcharge Limits
Credit card surcharges must comply with both card-network rules and applicable law. The surcharge amount may not exceed the merchant’s actual cost of accepting credit cards and may not exceed 3% of the total transaction amount.

Card-network rules cap credit card surcharges at 3%, meaning that if a merchant’s processing costs exceed this amount, the excess portion cannot be passed on to the patient.


Warning
The following is a general overview of credit card surcharging rules in the United States. Merchants are responsible for understanding and complying with all applicable requirements.

Network and State Restrictions
The major credit card networks, such as Visa and Mastercard, impose specific requirements related to surcharge limits, advance notification, and disclosure.

In addition, several U.S. states and territories regulate or prohibit credit card surcharging. At the time of writing, credit card surcharging is prohibited in Connecticut, Maine, Massachusetts, and Puerto Rico. Other states, including Colorado, Minnesota, Mississippi, New Jersey, and New York, impose restrictions on surcharge amounts or require specific disclosures.

If your practice operates in a state that restricts or prohibits credit card surcharging, you must fully understand and comply with those requirements before implementing a surcharge.

Debit card transactions may never be surcharged, even if the debit card is processed as a credit transaction.

Applicability
Credit card surcharges may be applied only to credit card transactions. Other payment types, including debit cards and alternative payment methods, are not eligible for surcharging.

Regulatory Compliance
Merchants are responsible for maintaining ongoing compliance with all applicable card-network and legal requirements. This includes meeting advance notification obligations, using compliant signage and disclosures, adhering to surcharge percentage limits, and respecting jurisdiction-specific restrictions.

By following these guidelines, dental practices can implement credit card surcharging in a way that aligns with card-network rules and promotes transparency with patients. Clear and upfront communication helps maintain patient trust and supports a positive payment experience.