Merchant Level 1:

  •       • Any Merchant that processes over 6,000,000 Visa or MasterCard transactions per year (regardless of whether the transactions are e-commerce or not), OR
  •       • Any Merchant that is declared to be Level 1 by any Card Association
  •       • Any Merchant that has suffered a security incident or attack that resulted in an account data compromise

Merchant Level 2:
Any Merchant processing 1,000,000 to 6,000,000 Visa or MasterCard transactions per year.

Merchant Level 3:
Any Merchant processing 20,000 to 1,000,000 Visa or Mastercard e-commerce transactions per year.

Merchant Level 4:
Any merchant processing fewer than 20,000 Visa e-commerce transactions per year, and all other merchants processing fewer than 1,000,000 transactions per year.