PCI DSS Explained for Zeller Merchants
What is PCI DSS?
PCI DSS (Payment Card Industry Data Security Standard) is a security standard designed to help businesses protect cardholder data when accepting payments.
If your business accepts card payments - whether in-store, online, or over the phone - PCI DSS applies to you.
The goal of PCI DSS is to reduce the risk of card fraud and keep payment information secure.
Why does PCI DSS matter?
Keeping payment data secure helps protect:
- your customers,
- your business,
- and your reputation.
Strong payment security can also reduce the risk of fraud, data breaches, and disruptions to your ability to accept card payments.
How Zeller helps support PCI DSS security
Zeller Terminal and payment systems are built with security in mind.
Encrypted payments
Card data is encrypted when payments are processed, helping protect sensitive information during transmission.
Reduced compliance burden
Because Zeller securely handles payment processing and card data transmission, merchants using Zeller will have fewer PCI DSS requirements to manage directly.
Secure hardware and software
Zeller’s payment infrastructure is designed to align with industry security standards and best practices.
What merchants still need to do
Even when using secure payment systems, merchants still play an important role in protecting customer data.
Follow these best practices:
- Keep your Zeller Terminal secure and check regularly for signs of tampering.
- Use a secure private Wi-Fi network or Zeller SIM connectivity.
- Never write down or store customer card details.
- Keep your Zeller Dashboard login secure and avoid sharing passwords.
- Ensure staff understand how to handle payment information safely.
Frequently asked questions
Do I need to complete PCI paperwork?
For now, this isn’t relevant but some businesses might be required to complete a PCI compliance survey or Self-Assessment Questionnaire (SAQ) depending on their payment methods.
Does Zeller charge PCI compliance fees?
Zeller does not charge separate monthly PCI compliance fees.
What is an SAQ?
An SAQ (Self-Assessment Questionnaire) is a set of questions used to confirm that your business follows PCI DSS security practices.
Do PCI DSS rules apply to phone payments?
Yes. If you accept payments over the phone (MOTO), you should ensure customer card details are handled securely and are not recorded or stored.
Zeller Merchant Security Incident Response Protocol
In the event of suspected terminal tampering, unauthorized dashboard access, or a suspected data breach, follow these steps:
- Contain: Immediately disconnect the affected Zeller Terminal from the internet (Wi-Fi or Ethernet).
- Preserve: Do not turn the device off and do not attempt a factory reset. This is critical for forensic investigation.
- Isolate: Stop using the affected terminal or your Zeller Dashboard until cleared by Zeller Support.
- Notify: Contact Zeller Security at support@myzeller.com or 0800 917 9206 within 24 hours.
- Audit: Review your staff access logs in the Zeller Dashboard and change passwords for all users with admin privileges.
Need help?
If you believe your business has experienced a payment security issue or data breach, contact the Zeller Support team as soon as possible.
Phone: 0800 917 9206
Email: support@myzeller.com
