MoonPay earns PCI DSS 4.0 certification

MoonPay is excited to announce that we are now PCI DSS 4.0 certified! 

Earning our PCI DSS 4.0 certification means that we maintain our PCI Level 1 (the most stringent of the four PCI levels) at the highest security standards.  

The Payment Card Industry Data Security Standard (PCI DSS) 4.0 is a globally recognized benchmark for securing payment card data, developed by the PCI Security Standards Council. This latest version builds on previous standards, enhancing protections for cardholder information in an evolving digital landscape.  

A PCI DSS 4.0 certification demonstrates that we:

• maintain enhanced data protection
• promote continuous security monitoring
• uphold the highest level of payment security

Unlike PCI DSS 3.2.1, which focused on baseline compliance, PCI DSS 4.0 evaluates MoonPay’s security controls over time, ensuring ongoing effectiveness. It covers 12 core requirements - from robust encryption to access controls - testing our ability to safeguard transactions, maintain secure systems, and respond to threats. 

“Earning PCI DSS 4.0 certification shows MoonPay’s relentless focus on security, risk management, and operational trust,” said Doug Innocenti, Chief Information Security Officer at MoonPay. “It’s a clear signal of our dedication to keeping customer transactions safe and delivering a dependable payment experience.”  

Last year, in addition to earning our PCI Level 1, we also secured our SOC 2 Type 2, ISO 27001, and ISO 27018 certifications. This latest achievement underscores our ongoing commitment to providing a secure and trustworthy platform for all of our users.