I understand that paying an additional fee for something that you don't expect isn't the right thing to do. Let me add some details about this, ROC.

Intuit and our products are on the PCI Security Standards Council website as compliant. While QuickBooks applications are secure, other applications on your local computer/network can compromise the security of your environment. The use of QuickBooks Payments services doesn’t mean you’re already PCI compliant. Only the pieces of the transaction processing chain are compliant.

The PCI DSS is a list of practices merchants must follow to accept payment cards. This includes how to securely handle, process, and store sensitive payment card data. Therefore, Intuit has partnered with SecurityMetrics to streamline the PCI compliance validation process. SecurityMetrics charges an annual fee to merchants. If you choose to use SecurityMetrics, you need to create an account with them. After you complete SecurityMetrics’ FastPass, you can purchase the PCI package that best suits your needs. From there, complete SAQ, then set up your scans. To get started with PCI service and protection, you'll want to sign up for an account.  Follow the steps outlined below:

1. Sign in to your SecurityMetrics account.
   1. Select Sign Up, then fill out all the fields in the Create Account page.
      
   2. Select Create Account, then follow the Intuit FastPass to determine your PCI compliance requirements.
   3. Select Next then select a security package that best fits your business.

You can also visit our website or the PCI Security Standards website for more information. For more details, learn from the most frequently asked questions about PCI: Frequently Asked Questions About QuickBooks PCI Compliance.

Reach out to us if you need anything else about PCI. Please know we're always right here to help you. Have a nice day!