Which SAQ applies to you
Most small merchants complete SAQ A (ecommerce with fully outsourced payment pages) or SAQ B/B-IP (standalone terminals). Your acquirer will tell you which one applies — ask them rather than guessing.
The habits that matter
The questionnaire is straightforward once basic practices are in place.
- Never write down or store full card numbers, ever
- Change default passwords on routers and terminals
- Physically inspect terminals for tampering weekly
- Keep a list of authorised staff who handle payments
Non-compliance fees
Acquirers commonly charge £10-£30 a month for non-compliance. Completing the SAQ takes under an hour and removes the charge entirely — one of the highest hourly returns available to a small business.
Want this reviewed for your business?
Send us a recent bill and a consultant from our Cardiff office will tell you, honestly, whether you are paying more than you need to.