Do Fuel Dealers Still Have PCI Duties With In-App Payments?

Yes. A merchant still has PCI DSS duties when a provider handles card processing. Check that provider’s compliance for the service you use. Put shared duties in writing. Ask your acquirer or payment brand how to prove compliance for your setup. An encrypted-payment feature alone is not proof.

Find out where card data goes

PCI Security Standards Council FAQ 1092 says merchants still have duties when they outsource processing. Check the provider, keep written agreements on its duties and check its compliance status at least once a year. Know which duties you share.

Bring the bookkeeper to the demo

Ask who processes cards and who holds the merchant account. Have the provider show where card data goes. Request proof that covers the service you plan to use. Then have your acquirer or payment brand confirm how you must validate compliance. Do not choose a questionnaire just because another dealer uses it.

Check beyond the feature list

Our in-app payment answer describes a published feature. It is not a certification of your setup. Settle the processor agreement and card-data duties before turning customer payments on.

Questions owners ask

Does outsourcing mean I have no PCI work left?

No. PCI SSC says merchants keep duties even when a third party handles all card processing.

Which self-assessment questionnaire should my dealership use?

Ask your acquirer or payment brand. Show them the actual card setup. This page does not choose a questionnaire for you.

Next step

Bring your payment contact’s checklist to a payment-workflow demo. Get each party’s duties in writing.

Last reviewed: October 17, 2026
Author: The Blink Fuel team