All entities including merchants, service providers and financial institutions must get a quarterly scan completed to remain compliant with the PCI DSS standards. The table below lists the Quarterly network scan requirements for service providers by region.
All VisaNet processors (member and non-member) and all payment gateways
Any service provider that is not in Level 1 and stores, processes, or transmits more than 1,000,000 Visa accounts/transactions annually.
Any service provider that is not in Level 1 and stores, processes, or transmits fewer than 1,000,000 Visa accounts/transactions annually.
According to Visa, payment gateways are a category of agent or service provider that stores, processes, and/or transmits cardholder data as part of a payment transaction. Specifically, they enable payment transactions between merchants and processors.