Again, Remember the fact that these aren’t “fines” in the exact same sense that, say, you’d pay for violating some federal government regulation or website traffic legislation; they’re penalties constructed into a deal among merchants, payment processors, and card manufacturers. Formally attest your compliance. An AOC (attestation of compliance) is https://www.nathanlabsadvisory.com/pci-3ds.html