Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Is there a way for a consumer to report PCI non compliance?

share|improve this question
Not that this will help, but PCI does require you to handle security reports... But of course, if they're not compliant, they probably dont have that either... –  AviD Apr 20 '11 at 19:26
@Avid: and what about the companies which show off that they are following PCI-DSS standard? How can a consumer report in that case for non-complaince? –  p_upadhyay Apr 21 '11 at 8:33

1 Answer 1

The PCI organization sets the standards. The card brands enforce those standards with fines. If you contact a brand (Visa, American Express, etc)., they may act on it. I am not aware of any PCI compliance hotline, and it may involve a lot of transfers and "call this person" redirects to find somebody... who may do nothing anyway. If you have the time, though, I encourage you to work on finding your way through that process.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.