Do I need PCI Compliance with PayPal?

Well I gave Paypal a call today and now I must say I'm completely confused. So do I need to be scanned and audited if they check out on Paypals server and if I use a gateway what scans must I have and how much do they cost and blah... blah...

I know many of you out there have dealt with this already just asking for a little guidance. I'd like to begin using Paypal merchant solutions and from what I see the IPN is working but what do I need to do? The rep at Paypal told me I need to be compliant and scanned no matter what and it looks expensive.

Anyone had similar issues? I'm stuch as I need to sell many items that are more than a few thousand dollars and Paypal puts a limit on it using the standard. Any suggestions? What am I required to do and how do I take the first step?

Also let me say I'm using 1.3.9 now but will upgrade shortly just have been pressed for time. Not a problem to upgrade but then what? :blink:

I believe it depends on the version
for
Paypal's Web Payments Pro - You need SSL and PCI compliance
PayPal Express Checkout - don't need SSL or pci compliance, as everything is done on Paypals server

edit----------------------------
Of course things could have changed or i could have it wrong

nigelt74:

I believe it depends on the version
for
Paypal's Web Payments Pro - You need SSL and PCI compliance
PayPal Express Checkout - don't need SSL or pci compliance, as everything is done on Paypals server

edit----------------------------
Of course things could have changed or i could have it wrong

That is the way I understand it too.

Of course things could have changed or we both could have it wrong. :)

Cheers
Rod

Isn't Paypal express just a standard form without a true merchant account? I thought it was standard or express with no merchant account but payments pro had a merchant account. Well I guess I need to do some more digging thanks for the info!:smile:

Paul69:

Isn't Paypal express just a standard form without a true merchant account? I thought it was standard or express with no merchant account but payments pro had a merchant account. Well I guess I need to do some more digging thanks for the info!:smile:

I don't know what you mean by 'standard form', but Paypal Express takes your customer to Paypal's site for payment processing (ignore Paypal Standard (IPN) - there's no reason to use it any more).

Paypal Payments Pro operates like a regular merchant account processor (like authorize.net). Customers stay on your site to enter payment information, and your server needs to be PCI compliant. There's also a monthly charge for Pro, but not Express.