As the QuickBooks Team says, it's not a scam.
That said, they are being really dodgy about the necessity of this.
See my post above on what forms I think we need to file to be in compliance.
I said: "Now just awaiting an answer from [email address removed] about if I can submit an SAQ C-VT or SAQ-A and where to submit it."
That was in late September -- they never answered me.
I wrote:
~~~~
Dear Intuit PCI Compliance Team:
I am aware that I can submit an SAQ form to Intuit.
a) Where is the proper place for me to submit this form?
I process credit cards through your MerchantCenter portal website ( https://merchantcenter.intuit.com ) and any stored credit card information is stored in paper form offline.
To me, this looks like I can use the SAQ C-VT form. There is an outside chance I might need the SAQ-A although I don't believe so.
b) Do you want me using the SAQ C-VT, SAQ-A, or some other PCI self-certification method?
~~~
If I can ever get an answer to the above email (I am resending it today), I will "happily" file the proper compliance paperwork with whatever is the correct place within Intuit.
-- Zagone
