Checklist

How do you take cards?

Confirm each item · 8 of 11

• No one writes down or stores full card numbers, on paper or in a computer
• Old paper with card numbers is shredded
• Only staff who need it can use the card terminal or virtual terminal
• Each person has their own login for the processor's website; no shared passwords
• Default passwords on terminals, Wi-Fi and the router have been changed
• Staff know not to take card numbers by email or text
• You have a short written card security policy and staff have read it
• You know who to call (your processor) if you suspect a card breach
• You keep a list of every card terminal: make, model, serial number and location
• Someone checks each terminal for tampering or skimmers on a schedule
• Staff are trained to spot skimmers and suspicious 'repair' visits

Sign