PCI Compliance applies to your business if it accepts credit cards as a form of payment. It's not a scam and it's required. The fee is not unusual and it's generally less than the non-compliance fee if you don't complete the PCI compliance questionnaire.
